@effected/github-actions 0.23.1 → 0.24.0

package/Action.js

@@ -8,7 +8,7 @@ import { NodeServices } from "@effect/platform-node";
 import { Cause, Effect, Exit, Layer, LogLevel, Option, References, Result } from "effect";
 import { FetchHttpClient } from "effect/http";
 
-//#region src/Action.ts
+// src/Action.ts
 /**
 * The default runtime an action executes inside.
 *
@@ -152,5 +152,4 @@ var Action = class {
 	};
 };
 
-//#endregion
 export { Action, ActionRuntime, describeCause };

package/ActionCache.js

@@ -13,7 +13,7 @@ import { BlobClient, BlockBlobClient } from "@azure/storage-blob";
 import { GlobPattern, GlobSet } from "@effected/glob";
 import { ChildProcess, ChildProcessSpawner } from "effect/process";
 
-//#region src/ActionCache.ts
+// src/ActionCache.ts
 /**
 * Raised when the runner's cache cannot be read or written.
 *
@@ -379,5 +379,4 @@ var ActionCache = class ActionCache extends Context.Service()("@effected/github-
 	static layerTest = (overrides = {}) => Layer.succeed(ActionCache, ActionCache.makeTest(overrides));
 };
 
-//#endregion
 export { ActionCache, ActionCacheError };

package/ActionEnvironment.js

@@ -1,6 +1,6 @@
 import { Context, Effect, FileSystem, Layer, Option, Schema } from "effect";
 
-//#region src/ActionEnvironment.ts
+// src/ActionEnvironment.ts
 /**
 * Raised when the runner environment does not say what an action needs.
 *
@@ -324,5 +324,4 @@ var ActionEnvironment = class ActionEnvironment extends Context.Service()("@effe
 	static layerTest = (overrides = {}, payload) => Layer.effect(ActionEnvironment, ActionEnvironment.makeTest(overrides, payload)).pipe(Layer.provide(FileSystem.layerNoop({})));
 };
 
-//#endregion
 export { ActionEnvironment, ActionEnvironmentError, GitHubContext, RunnerContext };

package/ActionInput.js

@@ -1,6 +1,6 @@
 import { Config, ConfigProvider, Context, Effect, Schema, SchemaIssue } from "effect";
 
-//#region src/ActionInput.ts
+// src/ActionInput.ts
 /**
 * The variable name the runner publishes an input under.
 *
@@ -512,5 +512,4 @@ var ActionInput = class ActionInput {
 	static layerDefault = ConfigProvider.layer(Effect.map(Effect.context(), (context) => ActionInput.providerOver(Context.getOrUndefined(context, ConfigProvider.ConfigProvider) ?? ConfigProvider.fromEnv())));
 };
 
-//#endregion
 export { ActionInput, inputVariable };

package/ActionLogger.js

@@ -2,7 +2,7 @@ import { ActionEnvironment } from "./ActionEnvironment.js";
 import { CommandNeutralizer, WorkflowCommand } from "@effected/github-commands";
 import { Console, Context, Effect, Exit, Inspectable, Layer, LogLevel, Logger, References } from "effect";
 
-//#region src/ActionLogger.ts
+// src/ActionLogger.ts
 /**
 * Render a log message, which arrives as an array of the values passed to
 * `Effect.log*`.
@@ -223,5 +223,4 @@ var ActionLogger = class ActionLogger extends Context.Service()("@effected/githu
 	static layerSilent = Layer.mergeAll(ActionLogger.layerTest(), Logger.layer([]));
 };
 
-//#endregion
 export { ActionLogger };

package/ActionOutputs.js

@@ -4,7 +4,7 @@ import { unstubbed } from "./internal/unstubbed.js";
 import { CommandNeutralizer, WorkflowCommand } from "@effected/github-commands";
 import { Console, Context, Effect, FileSystem, Layer, Schema } from "effect";
 
-//#region src/ActionOutputs.ts
+// src/ActionOutputs.ts
 /**
 * Raised when an action cannot publish an output.
 *
@@ -337,5 +337,4 @@ var ActionOutputs = class ActionOutputs extends Context.Service()("@effected/git
 	};
 };
 
-//#endregion
 export { ActionOutputs, DetachedOutputError, InvalidOutputNameError, OutputEncodeError, RecordedOutput, RunnerFileUnavailableError, RunnerFileWriteError };

package/ActionState.js

@@ -4,7 +4,7 @@ import { unstubbed } from "./internal/unstubbed.js";
 import { ActionOutputs } from "./ActionOutputs.js";
 import { Context, Effect, FileSystem, Layer, Option, Schema } from "effect";
 
-//#region src/ActionState.ts
+// src/ActionState.ts
 /**
 * Raised when action state cannot be saved, read or decoded across the phase
 * boundary.
@@ -157,5 +157,4 @@ var ActionState = class ActionState extends Context.Service()("@effected/github-
 	static layerTest = (overrides = {}) => Layer.succeed(ActionState, ActionState.makeTest(overrides));
 };
 
-//#endregion
 export { ActionState, ActionStateError };

package/ActionsIdentityToken.js

@@ -2,7 +2,7 @@ import { OidcTokenIssuer } from "./OidcTokenIssuer.js";
 import { Effect, Layer } from "effect";
 import { IdentityToken, IdentityTokenError } from "@effected/sbom";
 
-//#region src/ActionsIdentityToken.ts
+// src/ActionsIdentityToken.ts
 /**
 * Serves `@effected/sbom`'s `IdentityToken` contract from the runner's own OIDC
 * token service, so signing an SBOM inside a workflow needs no further wiring.
@@ -58,5 +58,4 @@ var ActionsIdentityToken = class {
 	}))) })));
 };
 
-//#endregion
 export { ActionsIdentityToken };

package/ActionsProvenance.js

@@ -3,7 +3,7 @@ import { OidcTokenIssuer } from "./OidcTokenIssuer.js";
 import { Effect, Option } from "effect";
 import { SlsaProvenance } from "@effected/sbom";
 
-//#region src/ActionsProvenance.ts
+// src/ActionsProvenance.ts
 /**
 * The server URL a workflow on github.com runs against.
 *
@@ -100,5 +100,4 @@ var ActionsProvenance = class {
 	});
 };
 
-//#endregion
 export { ActionsProvenance };

package/Artifact.js

@@ -12,7 +12,7 @@ import { HttpClient } from "effect/http";
 import { BlobClient, BlockBlobClient } from "@azure/storage-blob";
 import { ChildProcessSpawner } from "effect/process";
 
-//#region src/Artifact.ts
+// src/Artifact.ts
 /**
 * Raised when an artifact cannot be uploaded, listed, downloaded or deleted.
 *
@@ -399,5 +399,4 @@ var Artifact = class Artifact extends Context.Service()("@effected/github-action
 	static layerTest = (overrides = {}) => Layer.succeed(Artifact, Artifact.makeTest(overrides));
 };
 
-//#endregion
 export { Artifact, ArtifactError };

package/BlobEnvelope.js

@@ -1,6 +1,6 @@
 import { Result, Schema } from "effect";
 
-//#region src/BlobEnvelope.ts
+// src/BlobEnvelope.ts
 /**
 * Raised when bytes cannot be read as an envelope.
 *
@@ -166,5 +166,4 @@ var BlobEnvelope = class {
 	}
 };
 
-//#endregion
 export { BlobEnvelope, BlobMetadataDecodeError, BlobMetadataEncodeError, NotABlobEnvelopeError, TruncatedBlobEnvelopeError, UnsupportedBlobEnvelopeVersionError };

package/BlobStore.githubCache.js

@@ -10,7 +10,7 @@ import { Effect, Layer, Option } from "effect";
 import { HttpClient } from "effect/http";
 import { BlobClient, BlockBlobClient } from "@azure/storage-blob";
 
-//#region src/BlobStore.githubCache.ts
+// src/BlobStore.githubCache.ts
 /**
 * The `version` every entry is filed under.
 *
@@ -166,5 +166,4 @@ var GitHubCacheBlobStore = class {
 	static layerWith = (transfer) => Layer.effect(BlobStore, make(transfer));
 };
 
-//#endregion
 export { GitHubCacheBlobStore };

package/BlobStore.js

@@ -5,7 +5,7 @@ import { Secret } from "./Secret.js";
 import { Context, Effect, Layer, Option, Schema } from "effect";
 import { HttpClient, HttpClientRequest } from "effect/http";
 
-//#region src/BlobStore.ts
+// src/BlobStore.ts
 /**
 * Raised when a blob cannot be stored or retrieved.
 *
@@ -193,5 +193,4 @@ const makeS3 = (config) => Effect.gen(function* () {
 	};
 });
 
-//#endregion
 export { BlobStore, BlobStoreError };

package/BlobTransfer.js

@@ -1,6 +1,6 @@
 import { Schema } from "effect";
 
-//#region src/BlobTransfer.ts
+// src/BlobTransfer.ts
 /**
 * Raised when bytes could not be moved to or from a signed blob url.
 *
@@ -17,5 +17,4 @@ var BlobTransferError = class extends Schema.TaggedError()("BlobTransferError",
 	}
 };
 
-//#endregion
 export { BlobTransferError };

package/CacheKey.js

@@ -3,7 +3,7 @@ import { Effect, FileSystem, Option, Path, Schema } from "effect";
 import { GlobSet } from "@effected/glob";
 import { descend } from "@effected/walker";
 
-//#region src/CacheKey.ts
+// src/CacheKey.ts
 /**
 * Raised when a file or directory that was going to be hashed could not be
 * read.
@@ -441,5 +441,4 @@ var CacheKey = class CacheKey extends Schema.Class("CacheKey")(Schema.Struct({
 	});
 };
 
-//#endregion
 export { CacheKey, CacheKeyBadPatternError, CacheKeyReadError };

package/CheckDocument.js

@@ -3,7 +3,7 @@ import { CheckState } from "./CheckState.js";
 import { ManagedDocument } from "./ManagedDocument.js";
 import { Clock, Context, Duration, Effect, Latch, Layer, Ref, Schema, Semaphore } from "effect";
 
-//#region src/CheckDocument.ts
+// src/CheckDocument.ts
 /**
 * What a run knows about one of its checks: the authoritative state, and the
 * presentation facts a renderer projects into the document.
@@ -311,5 +311,4 @@ var CheckDocument = class CheckDocument extends Context.Service()("@effected/git
 };
 const dies = unstubbed("CheckDocument.makeTest");
 
-//#endregion
 export { CheckDocument, CheckDocumentError, CheckDocumentStamp, CheckReport };

package/CheckState.js

@@ -1,6 +1,6 @@
 import { Schema } from "effect";
 
-//#region src/CheckState.ts
+// src/CheckState.ts
 /**
 * The kit's check-state vocabulary.
 *
@@ -71,5 +71,4 @@ const projectCheckState = (state) => {
 	}
 };
 
-//#endregion
 export { CheckState, projectCheckState };

package/ChildEnv.js

@@ -1,4 +1,4 @@
-//#region src/ChildEnv.ts
+// src/ChildEnv.ts
 /**
 * Child-process environment construction: prepending directories to `PATH`
 * without falling into three cross-platform traps.
@@ -127,5 +127,4 @@ var ChildEnv = class ChildEnv {
 	}
 };
 
-//#endregion
 export { ChildEnv };

package/DetachedProcess.js

@@ -6,7 +6,7 @@ import { ChildProcessSpawner } from "effect/process";
 import { spawn } from "node:child_process";
 import { closeSync, openSync } from "node:fs";
 
-//#region src/DetachedProcess.ts
+// src/DetachedProcess.ts
 /**
 * Raised when the log file for a detached child's output cannot be opened.
 *
@@ -309,5 +309,4 @@ var DetachedProcess = class DetachedProcess {
 	});
 };
 
-//#endregion
 export { DetachedLogUnavailableError, DetachedNotReadyError, DetachedProcess, DetachedSignalFailedError, DetachedSpawnFailedError, InvalidPidError, ProcessId };

package/DryRun.js

@@ -1,7 +1,7 @@
 import { ActionInput } from "./ActionInput.js";
 import { Config, Context, Effect, Layer } from "effect";
 
-//#region src/DryRun.ts
+// src/DryRun.ts
 /** The input a workflow author sets to rehearse a run. */
 const DEFAULT_INPUT = "dry-run";
 const make = (enabled) => ({
@@ -69,5 +69,4 @@ var DryRun = class DryRun extends Context.Service()("@effected/github-actions/Dr
 	static layerTest = (overrides = {}) => Layer.succeed(DryRun, DryRun.makeTest(overrides));
 };
 
-//#endregion
 export { DryRun };

package/GitHubMarkdown.js

@@ -1,7 +1,7 @@
 import { Result, Schema, SchemaAST } from "effect";
 import { Code, Html, InlineCode, Link, List, ListItem, Markdown, Paragraph, Root, Table, TableCell, TableRow } from "@effected/markdown";
 
-//#region src/GitHubMarkdown.ts
+// src/GitHubMarkdown.ts
 /**
 * A block node whose value passes through the serializer verbatim, which is
 * exactly how a pre-rendered markdown fragment must travel: GFM structure
@@ -234,5 +234,4 @@ var GitHubMarkdown = class GitHubMarkdown {
 	}
 };
 
-//#endregion
 export { GitHubMarkdown };

package/GitHubToken.js

@@ -3,7 +3,7 @@ import { Secret } from "./Secret.js";
 import { DateTime, Duration, Effect, Exit, Layer, Option, Result, Schema } from "effect";
 import { GitHubApp, GitHubClient, InstallationToken, TokenPermissions } from "@effected/github";
 
-//#region src/GitHubToken.ts
+// src/GitHubToken.ts
 /**
 * Raised when the token an earlier phase persisted cannot be used.
 *
@@ -220,5 +220,4 @@ var GitHubToken = class GitHubToken {
 	});
 };
 
-//#endregion
 export { GitHubToken, GitHubTokenError };

package/ManagedDocument.js

@@ -1,7 +1,7 @@
 import { Effect, Option, Result, Schema } from "effect";
 import { CommentStyle, SectionDialect, SectionDocument, SectionId } from "@effected/templates";
 
-//#region src/ManagedDocument.ts
+// src/ManagedDocument.ts
 /**
 * The grammar shared by a document's `namespace`, its `key` and every region
 * key.
@@ -316,5 +316,4 @@ var ManagedDocument = class ManagedDocument extends Schema.Class("ManagedDocumen
 	}
 };
 
-//#endregion
 export { ManagedDocument, ManagedDocumentError };

package/OidcTokenIssuer.js

@@ -5,7 +5,7 @@ import { Context, Effect, Layer, Redacted, Schema } from "effect";
 import { HttpClient, HttpClientRequest } from "effect/http";
 import * as HttpClientResponse from "effect/http/HttpClientResponse";
 
-//#region src/OidcTokenIssuer.ts
+// src/OidcTokenIssuer.ts
 /**
 * Raised when an OIDC token cannot be issued or read.
 *
@@ -218,5 +218,4 @@ var OidcTokenIssuer = class OidcTokenIssuer extends Context.Service()("@effected
 	});
 };
 
-//#endregion
 export { OidcClaims, OidcTokenError, OidcTokenIssuer };

package/PackageManagerInstaller.js

@@ -10,7 +10,7 @@ import { Context, Effect, FileSystem, Layer, Option, Path, Schema } from "effect
 import { ChildProcess, ChildProcessSpawner } from "effect/process";
 import { CorepackIntegrityHash, DEFAULT_REGISTRY, PackageManagerPin, PackageManagerPinName } from "@effected/npm";
 
-//#region src/PackageManagerInstaller.ts
+// src/PackageManagerInstaller.ts
 /**
 * Raised when a package manager cannot be provisioned on the runner.
 *
@@ -734,5 +734,4 @@ var PackageManagerInstaller = class PackageManagerInstaller extends Context.Serv
 	static layerTest = (overrides = {}) => Layer.succeed(PackageManagerInstaller, PackageManagerInstaller.makeTest(overrides));
 };
 
-//#endregion
 export { AmbientPackageManager, CachedPackageManager, InstalledPackageManager, PackageManagerInstaller, PackageManagerInstallerError };

package/Secret.js

@@ -1,7 +1,7 @@
 import { ActionOutputs } from "./ActionOutputs.js";
 import { Config, Effect, Redacted } from "effect";
 
-//#region src/Secret.ts
+// src/Secret.ts
 /**
 * The declassification seam: the **only** place in this package where a
 * `Redacted` value becomes a plain string.
@@ -198,5 +198,4 @@ var Secret = class Secret {
 	static adopt = (name) => Config.Redacted(name);
 };
 
-//#endregion
 export { Secret };

package/ToolInstaller.js

@@ -8,7 +8,7 @@ import { Context, Effect, FileSystem, Layer, Option, Path, Schedule, Schema, Str
 import { HttpClient } from "effect/http";
 import { ChildProcessSpawner } from "effect/process";
 
-//#region src/ToolInstaller.ts
+// src/ToolInstaller.ts
 /**
 * Raised when a tool cannot be downloaded, extracted or cached.
 *
@@ -376,5 +376,4 @@ var ToolInstaller = class ToolInstaller extends Context.Service()("@effected/git
 	static layerTest = (overrides = {}) => Layer.succeed(ToolInstaller, ToolInstaller.makeTest(overrides));
 };
 
-//#endregion
 export { ToolInstaller, ToolInstallerError };

package/index.d.ts

@@ -6,7 +6,6 @@ import { ChildProcessSpawner } from "effect/process";
 import { IdentityToken, SlsaProvenance } from "@effected/sbom";
 import { BotIdentity, GitHubApp, GitHubClient, InstallationToken, PermissionLevel, RetryPolicy } from "@effected/github";
 import { IntegrityHashBrand, PackageManagerPin } from "@effected/npm";
-//#region src/ActionEnvironment.d.ts
 declare const ActionEnvironmentError_base: Schema.Class<ActionEnvironmentError, Schema.TaggedStruct<"ActionEnvironmentError", {
   /** `missing` — absent or empty; `malformed` — present but unusable. */
   readonly reason: Schema.Literals<readonly ["missing", "malformed"]>;
@@ -259,8 +258,6 @@ export declare class ActionEnvironment extends ActionEnvironment_base {
    */
   static readonly layerTest: (overrides?: Readonly<Record<string, string>>, payload?: unknown) => Layer.Layer<ActionEnvironment>;
 }
-//#endregion
-//#region src/ActionLogger.d.ts
 /**
  * Options for {@link ActionLoggerShape.withBuffer}.
  *
@@ -453,8 +450,6 @@ export declare class ActionLogger extends ActionLogger_base {
    */
   static readonly layerSilent: Layer.Layer<ActionLogger>;
 }
-//#endregion
-//#region src/ActionOutputs.d.ts
 declare const RunnerFileUnavailableError_base: Schema.Class<RunnerFileUnavailableError, Schema.TaggedStruct<"RunnerFileUnavailableError", {
   /** The runner file involved, by environment variable name. */
   readonly file: Schema.String;
@@ -735,8 +730,6 @@ export declare class ActionOutputs extends ActionOutputs_base {
    */
   static readonly recording: () => RecordingOutputs;
 }
-//#endregion
-//#region src/ActionState.d.ts
 declare const ActionStateError_base: Schema.Class<ActionStateError, Schema.TaggedStruct<"ActionStateError", {
   /**
    * `missing` — no value was saved under this key in an earlier phase.
@@ -848,8 +841,6 @@ export declare class ActionState extends ActionState_base {
   /** {@link ActionState.makeTest} behind `Layer.succeed`. */
   static readonly layerTest: (overrides?: Partial<ActionStateShape>) => Layer.Layer<ActionState>;
 }
-//#endregion
-//#region src/Action.d.ts
 /**
  * Everything {@link ActionRuntime.layer} provides.
  *
@@ -999,8 +990,6 @@ export declare class Action {
    */
   static readonly run: <E, R = never>(program: Effect.Effect<void, E, ActionServices | R>, options?: ActionRunOptions<R>) => Promise<void>;
 }
-//#endregion
-//#region src/BlobTransfer.d.ts
 declare const BlobTransferError_base: Schema.Class<BlobTransferError, Schema.TaggedStruct<"BlobTransferError", {
   /** Which direction failed. */
   readonly reason: Schema.Literals<readonly ["uploadFailed", "downloadFailed"]>;
@@ -1058,8 +1047,6 @@ interface DataBlobTransfer {
   /** Download the url's contents. */
   readonly downloadToBuffer: (url: string) => Effect.Effect<Uint8Array, BlobTransferError>;
 }
-//#endregion
-//#region src/CacheKey.d.ts
 declare const CacheKeyReadError_base: Schema.Class<CacheKeyReadError, Schema.TaggedStruct<"CacheKeyReadError", {
   /** The path being read when it went wrong. */
   readonly path: Schema.String;
@@ -1410,8 +1397,6 @@ export declare class CacheKey extends CacheKey_base {
     readonly patterns: ReadonlyArray<string>;
   }) => Effect.Effect<Option.Option<string>, CacheKeyBadPatternError | CacheKeyReadError, FileSystem.FileSystem | Path.Path>;
 }
-//#endregion
-//#region src/ActionCache.d.ts
 declare const ActionCacheError_base: Schema.Class<ActionCacheError, Schema.TaggedStruct<"ActionCacheError", {
   /**
    * `misconfigured` — the results backend is not reachable from here (see
@@ -1550,8 +1535,6 @@ export declare class ActionCache extends ActionCache_base {
   /** {@link ActionCache.makeTest} behind `Layer.succeed`. */
   static readonly layerTest: (overrides?: Partial<ActionCacheShape>) => Layer.Layer<ActionCache>;
 }
-//#endregion
-//#region src/ActionInput.d.ts
 /**
  * Options for {@link ActionInput.pairs}.
  *
@@ -1944,8 +1927,6 @@ export declare class ActionInput {
    */
   static readonly layerDefault: Layer.Layer<never>;
 }
-//#endregion
-//#region src/OidcTokenIssuer.d.ts
 declare const OidcTokenError_base: Schema.Class<OidcTokenError, Schema.TaggedStruct<"OidcTokenError", {
   /**
    * `unavailable` — the runner did not publish the token-service variables,
@@ -2114,8 +2095,6 @@ export declare class OidcTokenIssuer extends OidcTokenIssuer_base {
    */
   static readonly layerFor: (claims: OidcClaims) => Layer.Layer<OidcTokenIssuer>;
 }
-//#endregion
-//#region src/ActionsIdentityToken.d.ts
 /**
  * Serves `@effected/sbom`'s `IdentityToken` contract from the runner's own OIDC
  * token service, so signing an SBOM inside a workflow needs no further wiring.
@@ -2167,8 +2146,6 @@ export declare class ActionsIdentityToken {
    */
   static readonly layer: Layer.Layer<IdentityToken, never, OidcTokenIssuer>;
 }
-//#endregion
-//#region src/ActionsProvenance.d.ts
 /**
  * Builds the current run's SLSA provenance from the runner's OIDC claims: the
  * Actions side of `@effected/sbom`'s `SlsaProvenance.forGitHubWorkflow`.
@@ -2235,8 +2212,6 @@ export declare class ActionsProvenance {
    */
   static readonly capture: (audience?: string) => Effect.Effect<SlsaProvenance, OidcTokenError, OidcTokenIssuer | ActionEnvironment>;
 }
-//#endregion
-//#region src/Artifact.d.ts
 declare const ArtifactError_base: Schema.Class<ArtifactError, Schema.TaggedStruct<"ArtifactError", {
   /**
    * `misconfigured` — the results backend is not reachable from here (see
@@ -2427,8 +2402,6 @@ export declare class Artifact extends Artifact_base {
   /** {@link Artifact.makeTest} behind `Layer.succeed`. */
   static readonly layerTest: (overrides?: Partial<ArtifactShape>) => Layer.Layer<Artifact>;
 }
-//#endregion
-//#region src/BlobEnvelope.d.ts
 declare const NotABlobEnvelopeError_base: Schema.Class<NotABlobEnvelopeError, Schema.TaggedStruct<"NotABlobEnvelopeError", {
   /** The underlying failure, preserved structurally. */
   readonly cause: Schema.optionalKey<Schema.Defect>;
@@ -2571,8 +2544,6 @@ export declare class BlobEnvelope {
     readonly body: Uint8Array;
   }, BlobEnvelopeError>;
 }
-//#endregion
-//#region src/BlobStore.d.ts
 declare const BlobStoreError_base: Schema.Class<BlobStoreError, Schema.TaggedStruct<"BlobStoreError", {
   /**
    * `unreachable` — the store could not be contacted. `refused` — it answered,
@@ -2719,8 +2690,6 @@ export declare class BlobStore extends BlobStore_base {
    */
   static readonly layerMemory: Layer.Layer<BlobStore>;
 }
-//#endregion
-//#region src/BlobStore.githubCache.d.ts
 /**
  * The {@link BlobStore} backend that stores blobs in the runner's own Actions
  * cache.
@@ -2781,8 +2750,6 @@ export declare class GitHubCacheBlobStore {
    */
   static readonly layerWith: (transfer: DataBlobTransfer) => Layer.Layer<BlobStore, never, HttpClient.HttpClient | ActionEnvironment>;
 }
-//#endregion
-//#region src/CheckDocument.d.ts
 declare const CheckReport_base: Schema.Class<CheckReport, Schema.Struct<{
   /** Where the check is now. The last reported state is the authoritative one. */
   readonly state: Schema.Literals<readonly ["running", "pass", "fail", "warn", "user_interaction_required", "skipped", "timeout"]>;
@@ -3084,8 +3051,6 @@ export declare class CheckDocument extends CheckDocument_base {
   /** {@link CheckDocument.makeTest} behind a `Layer`. */
   static readonly layerTest: (overrides?: Partial<CheckDocumentShape>) => Layer.Layer<CheckDocument>;
 }
-//#endregion
-//#region src/CheckState.d.ts
 /**
  * The kit's check-state vocabulary.
  *
@@ -3154,8 +3119,6 @@ type CheckRunProjection = {
  * @public
  */
 export declare const projectCheckState: (state: CheckState) => CheckRunProjection;
-//#endregion
-//#region src/ChildEnv.d.ts
 /**
  * The environment additions {@link ChildEnv.prependPath} builds: exactly one
  * entry, keyed by the spelling of `PATH` the base environment already uses.
@@ -3307,8 +3270,6 @@ export declare class ChildEnv {
    */
   static needsShell(platform: string): boolean;
 }
-//#endregion
-//#region src/DetachedProcess.d.ts
 declare const DetachedLogUnavailableError_base: Schema.Class<DetachedLogUnavailableError, Schema.TaggedStruct<"DetachedLogUnavailableError", {
   /** The log file that could not be opened. */
   readonly path: Schema.String;
@@ -3645,8 +3606,6 @@ export declare class DetachedProcess {
    */
   static readonly makeTestOps: (overrides?: Partial<DetachedProcessOps>) => DetachedProcessOps;
 }
-//#endregion
-//#region src/DryRun.d.ts
 /**
  * The {@link DryRun} service shape.
  *
@@ -3728,8 +3687,6 @@ export declare class DryRun extends DryRun_base {
   /** {@link DryRun.makeTest} behind `Layer.succeed`. */
   static readonly layerTest: (overrides?: Partial<DryRunShape>) => Layer.Layer<DryRun>;
 }
-//#endregion
-//#region src/GitHubMarkdown.d.ts
 /**
  * A heading level GitHub renders, `1` through `6`.
  *
@@ -3980,8 +3937,6 @@ export declare class GitHubMarkdown {
    */
   static raw(markdown: string): string;
 }
-//#endregion
-//#region src/GitHubToken.d.ts
 declare const GitHubTokenError_base: Schema.Class<GitHubTokenError, Schema.TaggedStruct<"GitHubTokenError", {
   /**
    * One reason, deliberately: everything else that can go wrong here already
@@ -4169,8 +4124,6 @@ export declare class GitHubToken {
    */
   static readonly dispose: (options?: ReadOptions | undefined) => Effect.Effect<void, ActionStateError | import("@effected/github").GitHubAppError, ActionState | GitHubApp>;
 }
-//#endregion
-//#region src/ManagedDocument.d.ts
 declare const ManagedDocumentError_base: Schema.Class<ManagedDocumentError, Schema.TaggedStruct<"ManagedDocumentError", {
   /** Which ambiguity or refusal was found. */
   readonly kind: Schema.Literals<readonly ["unterminatedRegion", "orphanedEnd", "overlappingRegions", "duplicateRegion", "markerInContent", "duplicateDeclaration", "invalidAttribute"]>;
@@ -4387,8 +4340,6 @@ export declare class ManagedDocument extends ManagedDocument_base {
    */
   private ensureSentinel;
 }
-//#endregion
-//#region src/ToolInstaller.d.ts
 declare const ToolInstallerError_base: Schema.Class<ToolInstallerError, Schema.TaggedStruct<"ToolInstallerError", {
   /**
    * `downloadFailed` — the archive could not be fetched. `extractFailed` — the
@@ -4657,8 +4608,6 @@ export declare class ToolInstaller extends ToolInstaller_base {
   /** {@link ToolInstaller.makeTest} behind `Layer.succeed`. */
   static readonly layerTest: (overrides?: Partial<ToolInstallerShape>) => Layer.Layer<ToolInstaller>;
 }
-//#endregion
-//#region src/PackageManagerInstaller.d.ts
 declare const PackageManagerInstallerError_base: Schema.Class<PackageManagerInstallerError, Schema.TaggedStruct<"PackageManagerInstallerError", {
   /**
    * `downloadFailed`, `extractFailed` and `cacheFailed` mirror the
@@ -4961,8 +4910,6 @@ export declare class PackageManagerInstaller extends PackageManagerInstaller_bas
   /** {@link PackageManagerInstaller.makeTest} behind `Layer.succeed`. */
   static readonly layerTest: (overrides?: Partial<PackageManagerInstallerShape>) => Layer.Layer<PackageManagerInstaller>;
 }
-//#endregion
-//#region src/Secret.d.ts
 /**
  * The declassification seam: the **only** place in this package where a
  * `Redacted` value becomes a plain string.
@@ -5144,6 +5091,5 @@ export declare class Secret {
    */
   static readonly adopt: (name: string) => Config.Config<Redacted.Redacted<string>>;
 }
-//#endregion
 export { type ActionCacheShape, type ActionEnvironmentShape, type ActionLoggerShape, type ActionOutputError, type ActionOutputsShape, type ActionRunOptions, type ActionServices, type ActionStateShape, type AnnotationProperties, type ArtifactItem, type ArtifactRef, type ArtifactShape, type BlobEnvelopeError, type BlobStoreShape, type CacheKeyError, type CheckDocumentOptions, type CheckDocumentShape, type CheckDocumentSink, type CheckFlushOutcome, type CheckRunConclusion, type CheckRunProjection, type ClientLayerOptions, type DataBlobTransfer, type DetachedProcessError, type DetachedProcessOps, type DetachedSpawnOptions, type DownloadOptions, type DownloadResult, type DryRunShape, type ExtractOptions, type FileBlobTransfer, type GitHubHeadingDepth, type GitHubListOptions, type GitHubRowSchema, type GitHubSchemaTable, type GitHubSchemaTableColumn, type GitHubSchemaTableColumns, type GitHubSchemaTableFormatRequiredKeys, type GitHubSchemaTableFormattedColumn, type GitHubSchemaTableOptions, type ManagedDocumentSource, type OidcTokenIssuerShape, type PackageManagerInstallOptions, type PackageManagerInstallerShape, type PairsOptions, type PathPrependEnv, type PathPrependOptions, type ProvisionFileOptions, type ProvisionOptions, type ProvisionedFile, type ReadOptions, type ReadinessOptions, type RecordedOutputMember, type RecordingOutputs, type S3Config, type StoredBlob, type ToolDownloadOptions, type ToolInstallerShape, type UploadOptions, type UploadResult, type WithBufferOptions, type WithStepOptions, WorkflowCommand };
 //# sourceMappingURL=index.d.ts.map

package/internal/actionsResults.js

@@ -1,7 +1,7 @@
 import { payloadOf } from "./jwt.js";
 import { Effect, Option, Redacted, Result } from "effect";
 
-//#region src/internal/actionsResults.ts
+// src/internal/actionsResults.ts
 /** The variable naming the backend. Absent outside a `uses:` step. */
 const RESULTS_URL = "ACTIONS_RESULTS_URL";
 /** The variable holding the run-scoped credential. Absent outside a `uses:` step. */
@@ -72,5 +72,4 @@ const resultsBackend = (env) => Effect.gen(function* () {
 	};
 });
 
-//#endregion
 export { RESULTS_URL, RUNTIME_TOKEN, backendIdsFrom, misconfiguredDetail, resultsBackend };

package/internal/archiveCommands.js

@@ -1,6 +1,6 @@
 import { ChildProcess } from "effect/process";
 
-//#region src/internal/archiveCommands.ts
+// src/internal/archiveCommands.ts
 /** A PowerShell single-quoted literal: `'` becomes `''`, nothing else is special. */
 const pwshLiteral = (value) => `'${value.replaceAll("'", "''")}'`;
 /** A non-interactive pwsh invocation of one command line. */
@@ -83,5 +83,4 @@ const tarExtractCommand = (options) => {
 	]);
 };
 
-//#endregion
 export { tarExtractCommand, unzipCommand, zipCommand, zipManifest };

package/internal/cacheService.js

@@ -1,7 +1,7 @@
 import { CONFLICT, isOk, stringField } from "./twirp.js";
 import { Effect, Option } from "effect";
 
-//#region src/internal/cacheService.ts
+// src/internal/cacheService.ts
 /** The Twirp service the Actions cache protocol lives under. @internal */
 const CACHE_SERVICE = "github.actions.results.api.v1.CacheService";
 /**
@@ -50,5 +50,4 @@ const lookupDownload = (client, key, restoreKeys, version) => Effect.map(client.
 	});
 });
 
-//#endregion
 export { CACHE_SERVICE, finalizeUpload, lookupDownload, reserveUpload };

package/internal/digest.js

@@ -2,7 +2,7 @@ import { Effect, Stream } from "effect";
 import { createHash } from "node:crypto";
 import * as Hex from "effect/encoding/Hex";
 
-//#region src/internal/digest.ts
+// src/internal/digest.ts
 /** The raw SHA-256 of a string or byte array held in memory. @internal */
 const sha256 = (value) => new Uint8Array(createHash("sha256").update(value).digest());
 /** The hex SHA-256 of a string or byte array held in memory. @internal */
@@ -27,5 +27,4 @@ const digestFile = (fs, file, algorithm) => Effect.suspend(() => {
 /** {@link digestFile}, as hex. @internal */
 const digestFileHex = (fs, file, algorithm) => Effect.map(digestFile(fs, file, algorithm), Hex.encode);
 
-//#endregion
 export { digestFile, digestFileHex, sha256, sha256Hex };

package/internal/fsProbe.js

@@ -1,6 +1,6 @@
 import { Effect } from "effect";
 
-//#region src/internal/fsProbe.ts
+// src/internal/fsProbe.ts
 /**
 * The entry's type, or `undefined` when nothing readable is there. Absence
 * and unreadability collapse together on purpose: every caller's next move
@@ -18,5 +18,4 @@ const typeAt = (fs, path) => Effect.map(Effect.option(fs.stat(path)), (info) =>
 */
 const isErrno = (cause, code) => typeof cause === "object" && cause !== null && cause.code === code;
 
-//#endregion
 export { isErrno, typeAt };

package/internal/jwt.js

@@ -1,7 +1,7 @@
 import { Result } from "effect";
 import * as Base64Url from "effect/encoding/Base64Url";
 
-//#region src/internal/jwt.ts
+// src/internal/jwt.ts
 /**
 * The decoded payload of `token` — the middle segment, base64url JSON —
 * without any check on the signature.
@@ -38,5 +38,4 @@ const unsignedJwt = (header, payload) => {
 	return `${segment(header)}.${segment(payload)}.unsigned`;
 };
 
-//#endregion
 export { payloadOf, unsignedJwt };

package/internal/pnpmExe.js

@@ -2,7 +2,7 @@ import { Option, Result } from "effect";
 import * as Hex from "effect/encoding/Hex";
 import * as Base64 from "effect/encoding/Base64";
 
-//#region src/internal/pnpmExe.ts
+// src/internal/pnpmExe.ts
 /** The prefix every native-binary package name carries. @internal */
 const PNPM_EXE_PREFIX = "@pnpm/exe.";
 /**
@@ -107,5 +107,4 @@ const strongestSri = (integrity) => {
 /** Whether a bin target is a Node script (run with `node`) rather than an executable run directly. @internal */
 const isNodeScript = (target) => /\.[cm]?js$/i.test(target);
 
-//#endregion
 export { PNPM_EXE_PREFIX, detectMusl, isNodeScript, pnpmExeTarget, strongestSri };

package/internal/runner.js

@@ -1,6 +1,6 @@
 import { Effect, Option } from "effect";
 
-//#region src/internal/runner.ts
+// src/internal/runner.ts
 /**
 * Whether `RUNNER_OS` says Windows. `false` when unset — off a runner, the
 * POSIX shape is the honest default.
@@ -27,5 +27,4 @@ const isWindowsRunner = (env) => Effect.map(env.getOptional("RUNNER_OS"), (found
 */
 const toolCacheRoot = (env, path) => Effect.map(env.getOptional("RUNNER_TOOL_CACHE"), (found) => Option.getOrElse(found, () => path.join("/tmp", "runner-tool-cache")));
 
-//#endregion
 export { isWindowsRunner, toolCacheRoot };

package/internal/runnerFile.js

@@ -1,4 +1,4 @@
-//#region src/internal/runnerFile.ts
+// src/internal/runnerFile.ts
 /** The base delimiter for a heredoc block. */
 const BASE_DELIMITER = "EFFECTED_EOF";
 /** A delimiter guaranteed absent from `value`. @internal */
@@ -44,5 +44,4 @@ const heredocBlock = (name, value) => {
 	return `${name}<<${delimiter}\n${value}\n${delimiter}\n`;
 };
 
-//#endregion
 export { delimiterFor, heredocBlock, isUsableName };

package/internal/shim.js

@@ -1,6 +1,6 @@
 import { isNodeScript } from "./pnpmExe.js";
 
-//#region src/internal/shim.ts
+// src/internal/shim.ts
 /**
 * The POSIX shim body: an `exec` wrapper so the shim's process *becomes* the
 * target, and `"$@"` so arguments survive quoting intact. A Node script
@@ -26,5 +26,4 @@ const cmdShim = (target) => isNodeScript(target) ? `@echo off\r\nnode "${target}
 */
 const gitBashShim = (target) => posixShim(target.replaceAll("\\", "/"));
 
-//#endregion
 export { cmdShim, gitBashShim, posixShim };

package/internal/sigv4.js

@@ -1,7 +1,7 @@
 import { sha256Hex } from "./digest.js";
 import { createHmac } from "node:crypto";
 
-//#region src/internal/sigv4.ts
+// src/internal/sigv4.ts
 /**
 * AWS Signature Version 4, for S3-compatible object stores.
 *
@@ -111,5 +111,4 @@ const sign = (request, credentials) => {
 	};
 };
 
-//#endregion
 export { canonicalize, sha256Hex as digestHex, sign, signingKey, uriEncode };

package/internal/spawn.js

@@ -1,6 +1,6 @@
 import { Effect, Stream } from "effect";
 
-//#region src/internal/spawn.ts
+// src/internal/spawn.ts
 /**
 * Spawn `command` once, drain `stdout`+`stderr`, then read the exit code from
 * the same handle. Never fails on a non-zero exit — that is the caller's
@@ -14,5 +14,4 @@ const spawnOnce = (spawner, command) => Effect.scoped(Effect.gen(function* () {
 	};
 }));
 
-//#endregion
 export { spawnOnce };

package/internal/twirp.js

@@ -1,7 +1,7 @@
 import { Effect, Schedule } from "effect";
 import { HttpClientRequest } from "effect/http";
 
-//#region src/internal/twirp.ts
+// src/internal/twirp.ts
 /**
 * Returned instead of a failure when the backend answers HTTP 409.
 *
@@ -110,5 +110,4 @@ const stringField = (body, name) => {
 /** Whether a Twirp response carries `ok: true`. @internal */
 const isOk = (body) => field(body, "ok") === true;
 
-//#endregion
 export { CONFLICT, field, isOk, isRetryable, stringField, twirpCall, twirpFailureFields };

package/internal/unstubbed.js

@@ -1,6 +1,6 @@
 import { Effect } from "effect";
 
-//#region src/internal/unstubbed.ts
+// src/internal/unstubbed.ts
 /**
 * The die-on-call members of `<double>.makeTest`: `dies("save")` is an
 * `Effect` that defects naming `save` when run. Each package double binds its
@@ -12,5 +12,4 @@ const unstubbed = (double) => (member) => Effect.sync(() => {
 	throw new Error(`${double}: ${member}() was called but not stubbed — pass a \`${member}\` override.`);
 });
 
-//#endregion
 export { unstubbed };

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@effected/github-actions",
-	"version": "0.23.1",
+	"version": "0.24.0",
 	"private": false,
 	"description": "The GitHub Actions runtime: env, inputs, outputs, state, logging, cache, artifacts, blob storage, OIDC and the token bridge.",
 	"keywords": [
@@ -39,15 +39,15 @@
 	},
 	"dependencies": {
 		"@azure/storage-blob": "^12.33.0",
-		"@effected/github": "^0.21.0",
-		"@effected/github-commands": "^0.5.0",
-		"@effected/glob": "^0.13.0",
-		"@effected/markdown": "^0.19.0",
-		"@effected/npm": "^0.23.0",
-		"@effected/sbom": "^0.13.0",
-		"@effected/semver": "^0.14.0",
-		"@effected/templates": "^0.13.0",
-		"@effected/walker": "^0.18.0"
+		"@effected/github": "^0.22.0",
+		"@effected/github-commands": "^0.6.0",
+		"@effected/glob": "^0.14.0",
+		"@effected/markdown": "^0.20.0",
+		"@effected/npm": "^0.24.0",
+		"@effected/sbom": "^0.14.0",
+		"@effected/semver": "^0.15.0",
+		"@effected/templates": "^0.14.0",
+		"@effected/walker": "^0.19.0"
 	},
 	"peerDependencies": {
 		"@effect/platform-node": "^4.0.0",