@executor-js/plugin-keychain 0.0.1-beta.5 → 0.0.1-beta.6

package/README.md

@@ -44,10 +44,10 @@ Secrets written through this plugin are available to every other plugin that res
 
 ## Using with Effect
 
-If you're building on `@executor/sdk/core` (the raw Effect entry), import this plugin from its `/core` subpath instead:
+If you're building on `@executor/sdk` (the raw Effect entry), import this plugin from its `/core` subpath instead:
 
 ```ts
-import { keychainPlugin } from "@executor/plugin-keychain/core";
+import { keychainPlugin } from "@executor/plugin-keychain";
 ```
 
 ## Status

package/dist/{chunk-AWJ4XIQJ.js → chunk-XGNRIWKJ.js}

@@ -1,8 +1,6 @@
 // src/index.ts
 import { Effect as Effect3 } from "effect";
-import {
-  definePlugin
-} from "@executor-js/sdk/core";
+import { definePlugin } from "@executor-js/sdk";
 
 // src/keyring.ts
 import { Effect } from "effect";
@@ -75,15 +73,9 @@ import { Effect as Effect2 } from "effect";
 var makeKeychainProvider = (serviceName) => ({
   key: "keychain",
   writable: true,
-  get: (secretId) => getPassword(serviceName, secretId).pipe(
-    Effect2.orElseSucceed(() => null)
-  ),
-  set: (secretId, value) => setPassword(serviceName, secretId, value).pipe(
-    Effect2.orElseSucceed(() => void 0)
-  ),
-  delete: (secretId) => deletePassword(serviceName, secretId).pipe(
-    Effect2.orElseSucceed(() => false)
-  ),
+  get: (secretId) => getPassword(serviceName, secretId).pipe(Effect2.orElseSucceed(() => null)),
+  set: (secretId, value) => setPassword(serviceName, secretId, value).pipe(Effect2.orElseSucceed(() => void 0)),
+  delete: (secretId) => deletePassword(serviceName, secretId).pipe(Effect2.orElseSucceed(() => false)),
   // Keychain doesn't support enumerating — you need to know the account name
   list: void 0
 });
@@ -115,4 +107,4 @@ export {
   makeKeychainProvider,
   keychainPlugin
 };
-//# sourceMappingURL=chunk-AWJ4XIQJ.js.map
+//# sourceMappingURL=chunk-XGNRIWKJ.js.map

package/dist/chunk-XGNRIWKJ.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts","../src/keyring.ts","../src/errors.ts","../src/provider.ts"],"sourcesContent":["import { Effect } from \"effect\";\n\nimport { definePlugin, type SecretId, type ExecutorPlugin } from \"@executor/sdk\";\n\nimport { displayName, isSupportedPlatform, resolveServiceName } from \"./keyring\";\nimport { getPassword } from \"./keyring\";\nimport { makeKeychainProvider } from \"./provider\";\n\n// ---------------------------------------------------------------------------\n// Re-exports\n// ---------------------------------------------------------------------------\n\nexport { KeychainError } from \"./errors\";\nexport { makeKeychainProvider } from \"./provider\";\nexport { isSupportedPlatform, displayName } from \"./keyring\";\n\n// ---------------------------------------------------------------------------\n// Plugin config\n// ---------------------------------------------------------------------------\n\nexport interface KeychainPluginConfig {\n  /** Override the keychain service name (default: \"executor\") */\n  readonly serviceName?: string;\n}\n\n// ---------------------------------------------------------------------------\n// Plugin extension — public API on executor.keychain\n// ---------------------------------------------------------------------------\n\nexport interface KeychainExtension {\n  /** Human-readable name for the keychain on this platform */\n  readonly displayName: string;\n\n  /** Whether the current platform supports system keychain */\n  readonly isSupported: boolean;\n\n  /** Check if a secret exists in the system keychain */\n  readonly has: (secretId: SecretId) => Effect.Effect<boolean>;\n}\n\n// ---------------------------------------------------------------------------\n// Plugin definition\n// ---------------------------------------------------------------------------\n\nconst PLUGIN_KEY = \"keychain\";\n\nexport const keychainPlugin = (\n  config?: KeychainPluginConfig,\n): ExecutorPlugin<typeof PLUGIN_KEY, KeychainExtension> =>\n  definePlugin({\n    key: PLUGIN_KEY,\n    init: (ctx) =>\n      Effect.gen(function* () {\n        // Scope the service name to the current scope so each folder gets its own keychain entries\n        const baseServiceName = resolveServiceName(config?.serviceName);\n        const serviceName = `${baseServiceName}/${ctx.scope.id}`;\n\n        yield* ctx.secrets.addProvider(makeKeychainProvider(serviceName));\n\n        const extension: KeychainExtension = {\n          displayName: displayName(),\n          isSupported: isSupportedPlatform(),\n\n          has: (secretId) =>\n            getPassword(serviceName, secretId).pipe(\n              Effect.map((v) => v !== null),\n              Effect.orElseSucceed(() => false),\n            ),\n        };\n\n        return { extension };\n      }),\n  });\n","import { Effect } from \"effect\";\n\nimport { KeychainError } from \"./errors\";\n\n// ---------------------------------------------------------------------------\n// Constants\n// ---------------------------------------------------------------------------\n\nconst DEFAULT_SERVICE_NAME = \"executor\";\nconst SERVICE_NAME_ENV = \"EXECUTOR_KEYCHAIN_SERVICE_NAME\";\n\n// ---------------------------------------------------------------------------\n// Platform helpers\n// ---------------------------------------------------------------------------\n\nexport const isSupportedPlatform = () =>\n  process.platform === \"darwin\" || process.platform === \"linux\" || process.platform === \"win32\";\n\nexport const displayName = () =>\n  process.platform === \"darwin\"\n    ? \"macOS Keychain\"\n    : process.platform === \"win32\"\n      ? \"Windows Credential Manager\"\n      : \"Desktop Keyring\";\n\nexport const resolveServiceName = (explicit?: string): string =>\n  explicit?.trim() || process.env[SERVICE_NAME_ENV]?.trim() || DEFAULT_SERVICE_NAME;\n\n// ---------------------------------------------------------------------------\n// Lazy-load @napi-rs/keyring (native module)\n// ---------------------------------------------------------------------------\n\ntype EntryConstructor = (typeof import(\"@napi-rs/keyring\"))[\"Entry\"];\n\nlet entryCtorPromise: Promise<EntryConstructor> | null = null;\n\nconst loadEntry = (): Effect.Effect<EntryConstructor, KeychainError> =>\n  Effect.tryPromise({\n    try: async () => {\n      if (!isSupportedPlatform()) {\n        throw new Error(`unsupported platform '${process.platform}'`);\n      }\n      entryCtorPromise ??= import(\"@napi-rs/keyring\").then(({ Entry }) => Entry);\n      return await entryCtorPromise;\n    },\n    catch: (cause) =>\n      new KeychainError({\n        message: `Failed loading native keyring: ${cause instanceof Error ? cause.message : String(cause)}`,\n        cause,\n      }),\n  });\n\nconst createEntry = (serviceName: string, account: string) =>\n  Effect.flatMap(loadEntry(), (Entry) =>\n    Effect.try({\n      try: () => new Entry(serviceName, account),\n      catch: (cause) =>\n        new KeychainError({\n          message: `Failed creating keyring entry: ${cause instanceof Error ? cause.message : String(cause)}`,\n          cause,\n        }),\n    }),\n  );\n\n// ---------------------------------------------------------------------------\n// Low-level keychain operations\n// ---------------------------------------------------------------------------\n\nexport const getPassword = (\n  serviceName: string,\n  account: string,\n): Effect.Effect<string | null, KeychainError> =>\n  Effect.flatMap(createEntry(serviceName, account), (entry) =>\n    Effect.try({\n      try: () => entry.getPassword(),\n      catch: () => new KeychainError({ message: `Failed reading secret for account '${account}'` }),\n    }),\n  );\n\nexport const setPassword = (\n  serviceName: string,\n  account: string,\n  value: string,\n): Effect.Effect<void, KeychainError> =>\n  Effect.flatMap(createEntry(serviceName, account), (entry) =>\n    Effect.try({\n      try: () => entry.setPassword(value),\n      catch: (cause) =>\n        new KeychainError({\n          message: `Failed writing secret: ${cause instanceof Error ? cause.message : String(cause)}`,\n          cause,\n        }),\n    }).pipe(Effect.asVoid),\n  );\n\nexport const deletePassword = (\n  serviceName: string,\n  account: string,\n): Effect.Effect<boolean, KeychainError> =>\n  Effect.flatMap(createEntry(serviceName, account), (entry) =>\n    Effect.try({\n      try: () => {\n        entry.deletePassword();\n        return true;\n      },\n      catch: () =>\n        new KeychainError({ message: `Failed deleting secret for account '${account}'` }),\n    }),\n  );\n","import { Data } from \"effect\";\n\nexport class KeychainError extends Data.TaggedError(\"KeychainError\")<{\n  readonly message: string;\n  readonly cause?: unknown;\n}> {}\n","import { Effect } from \"effect\";\n\nimport type { SecretProvider } from \"@executor/sdk\";\n\nimport { getPassword, setPassword, deletePassword } from \"./keyring\";\n\n// ---------------------------------------------------------------------------\n// SecretProvider adapter — bridges keyring into SDK resolution chain\n// ---------------------------------------------------------------------------\n\nexport const makeKeychainProvider = (serviceName: string): SecretProvider => ({\n  key: \"keychain\",\n  writable: true,\n  get: (secretId) => getPassword(serviceName, secretId).pipe(Effect.orElseSucceed(() => null)),\n  set: (secretId, value) =>\n    setPassword(serviceName, secretId, value).pipe(Effect.orElseSucceed(() => undefined)),\n  delete: (secretId) =>\n    deletePassword(serviceName, secretId).pipe(Effect.orElseSucceed(() => false)),\n  // Keychain doesn't support enumerating — you need to know the account name\n  list: undefined,\n});\n"],"mappings":";AAAA,SAAS,UAAAA,eAAc;AAEvB,SAAS,oBAAwD;;;ACFjE,SAAS,cAAc;;;ACAvB,SAAS,YAAY;AAEd,IAAM,gBAAN,cAA4B,KAAK,YAAY,eAAe,EAGhE;AAAC;;;ADGJ,IAAM,uBAAuB;AAC7B,IAAM,mBAAmB;AAMlB,IAAM,sBAAsB,MACjC,QAAQ,aAAa,YAAY,QAAQ,aAAa,WAAW,QAAQ,aAAa;AAEjF,IAAM,cAAc,MACzB,QAAQ,aAAa,WACjB,mBACA,QAAQ,aAAa,UACnB,+BACA;AAED,IAAM,qBAAqB,CAAC,aACjC,UAAU,KAAK,KAAK,QAAQ,IAAI,gBAAgB,GAAG,KAAK,KAAK;AAQ/D,IAAI,mBAAqD;AAEzD,IAAM,YAAY,MAChB,OAAO,WAAW;AAAA,EAChB,KAAK,YAAY;AACf,QAAI,CAAC,oBAAoB,GAAG;AAC1B,YAAM,IAAI,MAAM,yBAAyB,QAAQ,QAAQ,GAAG;AAAA,IAC9D;AACA,yBAAqB,OAAO,kBAAkB,EAAE,KAAK,CAAC,EAAE,MAAM,MAAM,KAAK;AACzE,WAAO,MAAM;AAAA,EACf;AAAA,EACA,OAAO,CAAC,UACN,IAAI,cAAc;AAAA,IAChB,SAAS,kCAAkC,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AAAA,IACjG;AAAA,EACF,CAAC;AACL,CAAC;AAEH,IAAM,cAAc,CAAC,aAAqB,YACxC,OAAO;AAAA,EAAQ,UAAU;AAAA,EAAG,CAAC,UAC3B,OAAO,IAAI;AAAA,IACT,KAAK,MAAM,IAAI,MAAM,aAAa,OAAO;AAAA,IACzC,OAAO,CAAC,UACN,IAAI,cAAc;AAAA,MAChB,SAAS,kCAAkC,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AAAA,MACjG;AAAA,IACF,CAAC;AAAA,EACL,CAAC;AACH;AAMK,IAAM,cAAc,CACzB,aACA,YAEA,OAAO;AAAA,EAAQ,YAAY,aAAa,OAAO;AAAA,EAAG,CAAC,UACjD,OAAO,IAAI;AAAA,IACT,KAAK,MAAM,MAAM,YAAY;AAAA,IAC7B,OAAO,MAAM,IAAI,cAAc,EAAE,SAAS,sCAAsC,OAAO,IAAI,CAAC;AAAA,EAC9F,CAAC;AACH;AAEK,IAAM,cAAc,CACzB,aACA,SACA,UAEA,OAAO;AAAA,EAAQ,YAAY,aAAa,OAAO;AAAA,EAAG,CAAC,UACjD,OAAO,IAAI;AAAA,IACT,KAAK,MAAM,MAAM,YAAY,KAAK;AAAA,IAClC,OAAO,CAAC,UACN,IAAI,cAAc;AAAA,MAChB,SAAS,0BAA0B,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AAAA,MACzF;AAAA,IACF,CAAC;AAAA,EACL,CAAC,EAAE,KAAK,OAAO,MAAM;AACvB;AAEK,IAAM,iBAAiB,CAC5B,aACA,YAEA,OAAO;AAAA,EAAQ,YAAY,aAAa,OAAO;AAAA,EAAG,CAAC,UACjD,OAAO,IAAI;AAAA,IACT,KAAK,MAAM;AACT,YAAM,eAAe;AACrB,aAAO;AAAA,IACT;AAAA,IACA,OAAO,MACL,IAAI,cAAc,EAAE,SAAS,uCAAuC,OAAO,IAAI,CAAC;AAAA,EACpF,CAAC;AACH;;;AE5GF,SAAS,UAAAC,eAAc;AAUhB,IAAM,uBAAuB,CAAC,iBAAyC;AAAA,EAC5E,KAAK;AAAA,EACL,UAAU;AAAA,EACV,KAAK,CAAC,aAAa,YAAY,aAAa,QAAQ,EAAE,KAAKC,QAAO,cAAc,MAAM,IAAI,CAAC;AAAA,EAC3F,KAAK,CAAC,UAAU,UACd,YAAY,aAAa,UAAU,KAAK,EAAE,KAAKA,QAAO,cAAc,MAAM,MAAS,CAAC;AAAA,EACtF,QAAQ,CAAC,aACP,eAAe,aAAa,QAAQ,EAAE,KAAKA,QAAO,cAAc,MAAM,KAAK,CAAC;AAAA;AAAA,EAE9E,MAAM;AACR;;;AHwBA,IAAM,aAAa;AAEZ,IAAM,iBAAiB,CAC5B,WAEA,aAAa;AAAA,EACX,KAAK;AAAA,EACL,MAAM,CAAC,QACLC,QAAO,IAAI,aAAa;AAEtB,UAAM,kBAAkB,mBAAmB,QAAQ,WAAW;AAC9D,UAAM,cAAc,GAAG,eAAe,IAAI,IAAI,MAAM,EAAE;AAEtD,WAAO,IAAI,QAAQ,YAAY,qBAAqB,WAAW,CAAC;AAEhE,UAAM,YAA+B;AAAA,MACnC,aAAa,YAAY;AAAA,MACzB,aAAa,oBAAoB;AAAA,MAEjC,KAAK,CAAC,aACJ,YAAY,aAAa,QAAQ,EAAE;AAAA,QACjCA,QAAO,IAAI,CAAC,MAAM,MAAM,IAAI;AAAA,QAC5BA,QAAO,cAAc,MAAM,KAAK;AAAA,MAClC;AAAA,IACJ;AAEA,WAAO,EAAE,UAAU;AAAA,EACrB,CAAC;AACL,CAAC;","names":["Effect","Effect","Effect","Effect"]}

package/dist/core.js

@@ -4,7 +4,7 @@ import {
   isSupportedPlatform,
   keychainPlugin,
   makeKeychainProvider
-} from "./chunk-AWJ4XIQJ.js";
+} from "./chunk-XGNRIWKJ.js";
 export {
   KeychainError,
   displayName,

package/dist/index.d.ts

@@ -1,5 +1,5 @@
 import { Effect } from "effect";
-import { type SecretId, type ExecutorPlugin } from "@executor-js/sdk/core";
+import { type SecretId, type ExecutorPlugin } from "@executor-js/sdk";
 export { KeychainError } from "./errors";
 export { makeKeychainProvider } from "./provider";
 export { isSupportedPlatform, displayName } from "./keyring";

package/dist/index.js

@@ -1,6 +1,6 @@
 import {
   keychainPlugin
-} from "./chunk-AWJ4XIQJ.js";
+} from "./chunk-XGNRIWKJ.js";
 
 // src/promise.ts
 var keychainPlugin2 = (config) => keychainPlugin(config);

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/promise.ts"],"sourcesContent":["import { keychainPlugin as keychainPluginEffect } from \"./index\";\n\nexport type { KeychainPluginConfig } from \"./index\";\n\nexport const keychainPlugin = (\n  config?: { readonly serviceName?: string },\n) => keychainPluginEffect(config);\n"],"mappings":";;;;;AAIO,IAAMA,kBAAiB,CAC5B,WACG,eAAqB,MAAM;","names":["keychainPlugin"]}
+{"version":3,"sources":["../src/promise.ts"],"sourcesContent":["import { keychainPlugin as keychainPluginEffect } from \"./index\";\n\nexport type { KeychainPluginConfig } from \"./index\";\n\nexport const keychainPlugin = (config?: { readonly serviceName?: string }) =>\n  keychainPluginEffect(config);\n"],"mappings":";;;;;AAIO,IAAMA,kBAAiB,CAAC,WAC7B,eAAqB,MAAM;","names":["keychainPlugin"]}

package/dist/promise.d.ts

@@ -1,4 +1,4 @@
 export type { KeychainPluginConfig } from "./index";
 export declare const keychainPlugin: (config?: {
     readonly serviceName?: string;
-}) => import("@executor-js/sdk/core").ExecutorPlugin<"keychain", import("./index").KeychainExtension>;
+}) => import("@executor-js/sdk").ExecutorPlugin<"keychain", import("./index").KeychainExtension>;

package/dist/provider.d.ts

@@ -1,2 +1,2 @@
-import type { SecretProvider } from "@executor-js/sdk/core";
+import type { SecretProvider } from "@executor-js/sdk";
 export declare const makeKeychainProvider: (serviceName: string) => SecretProvider;

package/package.json

@@ -1,17 +1,20 @@
 {
   "name": "@executor-js/plugin-keychain",
-  "type": "module",
-  "version": "0.0.1-beta.5",
+  "version": "0.0.1-beta.6",
+  "homepage": "https://github.com/RhysSullivan/executor/tree/main/packages/plugins/keychain",
+  "bugs": {
+    "url": "https://github.com/RhysSullivan/executor/issues"
+  },
   "license": "MIT",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/RhysSullivan/executor.git",
     "directory": "packages/plugins/keychain"
   },
-  "homepage": "https://github.com/RhysSullivan/executor/tree/main/packages/plugins/keychain",
-  "bugs": {
-    "url": "https://github.com/RhysSullivan/executor/issues"
-  },
+  "files": [
+    "dist"
+  ],
+  "type": "module",
   "exports": {
     ".": {
       "import": {
@@ -26,28 +29,26 @@
       }
     }
   },
+  "publishConfig": {
+    "access": "public"
+  },
   "scripts": {
     "build": "tsup && (tsc --declaration --emitDeclarationOnly --outDir dist --rootDir src || true)",
-    "typecheck": "bunx tsc --noEmit -p tsconfig.json",
+    "typecheck": "tsgo --noEmit",
     "test": "vitest run",
-    "test:watch": "vitest"
+    "test:watch": "vitest",
+    "typecheck:slow": "bunx tsc --noEmit -p tsconfig.json"
   },
   "dependencies": {
+    "@executor-js/sdk": "0.0.1-beta.6",
     "@napi-rs/keyring": "^1.2.0",
-    "@executor-js/sdk": "0.0.1-beta.5",
     "effect": "^3.21.0"
   },
   "devDependencies": {
     "@effect/vitest": "^0.29.0",
     "@types/node": "^24.3.1",
     "bun-types": "^1.2.22",
-    "vitest": "^4.1.3",
-    "tsup": "^8.5.0"
-  },
-  "publishConfig": {
-    "access": "public"
-  },
-  "files": [
-    "dist"
-  ]
+    "tsup": "^8.5.0",
+    "vitest": "^4.1.3"
+  }
 }

package/dist/chunk-AWJ4XIQJ.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/index.ts","../src/keyring.ts","../src/errors.ts","../src/provider.ts"],"sourcesContent":["import { Effect } from \"effect\";\n\nimport {\n  definePlugin,\n  type SecretId,\n  type ExecutorPlugin,\n} from \"@executor/sdk/core\";\n\nimport { displayName, isSupportedPlatform, resolveServiceName } from \"./keyring\";\nimport { getPassword } from \"./keyring\";\nimport { makeKeychainProvider } from \"./provider\";\n\n// ---------------------------------------------------------------------------\n// Re-exports\n// ---------------------------------------------------------------------------\n\nexport { KeychainError } from \"./errors\";\nexport { makeKeychainProvider } from \"./provider\";\nexport { isSupportedPlatform, displayName } from \"./keyring\";\n\n// ---------------------------------------------------------------------------\n// Plugin config\n// ---------------------------------------------------------------------------\n\nexport interface KeychainPluginConfig {\n  /** Override the keychain service name (default: \"executor\") */\n  readonly serviceName?: string;\n}\n\n// ---------------------------------------------------------------------------\n// Plugin extension — public API on executor.keychain\n// ---------------------------------------------------------------------------\n\nexport interface KeychainExtension {\n  /** Human-readable name for the keychain on this platform */\n  readonly displayName: string;\n\n  /** Whether the current platform supports system keychain */\n  readonly isSupported: boolean;\n\n  /** Check if a secret exists in the system keychain */\n  readonly has: (secretId: SecretId) => Effect.Effect<boolean>;\n}\n\n// ---------------------------------------------------------------------------\n// Plugin definition\n// ---------------------------------------------------------------------------\n\nconst PLUGIN_KEY = \"keychain\";\n\nexport const keychainPlugin = (\n  config?: KeychainPluginConfig,\n): ExecutorPlugin<typeof PLUGIN_KEY, KeychainExtension> =>\n  definePlugin({\n    key: PLUGIN_KEY,\n    init: (ctx) =>\n      Effect.gen(function* () {\n        // Scope the service name to the current scope so each folder gets its own keychain entries\n        const baseServiceName = resolveServiceName(config?.serviceName);\n        const serviceName = `${baseServiceName}/${ctx.scope.id}`;\n\n        yield* ctx.secrets.addProvider(makeKeychainProvider(serviceName));\n\n        const extension: KeychainExtension = {\n          displayName: displayName(),\n          isSupported: isSupportedPlatform(),\n\n          has: (secretId) =>\n            getPassword(serviceName, secretId).pipe(\n              Effect.map((v) => v !== null),\n              Effect.orElseSucceed(() => false),\n            ),\n        };\n\n        return { extension };\n      }),\n  });\n","import { Effect } from \"effect\";\n\nimport { KeychainError } from \"./errors\";\n\n// ---------------------------------------------------------------------------\n// Constants\n// ---------------------------------------------------------------------------\n\nconst DEFAULT_SERVICE_NAME = \"executor\";\nconst SERVICE_NAME_ENV = \"EXECUTOR_KEYCHAIN_SERVICE_NAME\";\n\n// ---------------------------------------------------------------------------\n// Platform helpers\n// ---------------------------------------------------------------------------\n\nexport const isSupportedPlatform = () =>\n  process.platform === \"darwin\" ||\n  process.platform === \"linux\" ||\n  process.platform === \"win32\";\n\nexport const displayName = () =>\n  process.platform === \"darwin\"\n    ? \"macOS Keychain\"\n    : process.platform === \"win32\"\n      ? \"Windows Credential Manager\"\n      : \"Desktop Keyring\";\n\nexport const resolveServiceName = (explicit?: string): string =>\n  explicit?.trim() || process.env[SERVICE_NAME_ENV]?.trim() || DEFAULT_SERVICE_NAME;\n\n// ---------------------------------------------------------------------------\n// Lazy-load @napi-rs/keyring (native module)\n// ---------------------------------------------------------------------------\n\ntype EntryConstructor = (typeof import(\"@napi-rs/keyring\"))[\"Entry\"];\n\nlet entryCtorPromise: Promise<EntryConstructor> | null = null;\n\nconst loadEntry = (): Effect.Effect<EntryConstructor, KeychainError> =>\n  Effect.tryPromise({\n    try: async () => {\n      if (!isSupportedPlatform()) {\n        throw new Error(`unsupported platform '${process.platform}'`);\n      }\n      entryCtorPromise ??= import(\"@napi-rs/keyring\").then(({ Entry }) => Entry);\n      return await entryCtorPromise;\n    },\n    catch: (cause) =>\n      new KeychainError({\n        message: `Failed loading native keyring: ${cause instanceof Error ? cause.message : String(cause)}`,\n        cause,\n      }),\n  });\n\nconst createEntry = (serviceName: string, account: string) =>\n  Effect.flatMap(loadEntry(), (Entry) =>\n    Effect.try({\n      try: () => new Entry(serviceName, account),\n      catch: (cause) =>\n        new KeychainError({\n          message: `Failed creating keyring entry: ${cause instanceof Error ? cause.message : String(cause)}`,\n          cause,\n        }),\n    }),\n  );\n\n// ---------------------------------------------------------------------------\n// Low-level keychain operations\n// ---------------------------------------------------------------------------\n\nexport const getPassword = (\n  serviceName: string,\n  account: string,\n): Effect.Effect<string | null, KeychainError> =>\n  Effect.flatMap(createEntry(serviceName, account), (entry) =>\n    Effect.try({\n      try: () => entry.getPassword(),\n      catch: () => new KeychainError({ message: `Failed reading secret for account '${account}'` }),\n    }),\n  );\n\nexport const setPassword = (\n  serviceName: string,\n  account: string,\n  value: string,\n): Effect.Effect<void, KeychainError> =>\n  Effect.flatMap(createEntry(serviceName, account), (entry) =>\n    Effect.try({\n      try: () => entry.setPassword(value),\n      catch: (cause) =>\n        new KeychainError({\n          message: `Failed writing secret: ${cause instanceof Error ? cause.message : String(cause)}`,\n          cause,\n        }),\n    }).pipe(Effect.asVoid),\n  );\n\nexport const deletePassword = (\n  serviceName: string,\n  account: string,\n): Effect.Effect<boolean, KeychainError> =>\n  Effect.flatMap(createEntry(serviceName, account), (entry) =>\n    Effect.try({\n      try: () => {\n        entry.deletePassword();\n        return true;\n      },\n      catch: () => new KeychainError({ message: `Failed deleting secret for account '${account}'` }),\n    }),\n  );\n","import { Data } from \"effect\";\n\nexport class KeychainError extends Data.TaggedError(\"KeychainError\")<{\n  readonly message: string;\n  readonly cause?: unknown;\n}> {}\n","import { Effect } from \"effect\";\n\nimport type { SecretProvider } from \"@executor/sdk/core\";\n\nimport { getPassword, setPassword, deletePassword } from \"./keyring\";\n\n// ---------------------------------------------------------------------------\n// SecretProvider adapter — bridges keyring into SDK resolution chain\n// ---------------------------------------------------------------------------\n\nexport const makeKeychainProvider = (serviceName: string): SecretProvider => ({\n  key: \"keychain\",\n  writable: true,\n  get: (secretId) =>\n    getPassword(serviceName, secretId).pipe(\n      Effect.orElseSucceed(() => null),\n    ),\n  set: (secretId, value) =>\n    setPassword(serviceName, secretId, value).pipe(\n      Effect.orElseSucceed(() => undefined),\n    ),\n  delete: (secretId) =>\n    deletePassword(serviceName, secretId).pipe(\n      Effect.orElseSucceed(() => false),\n    ),\n  // Keychain doesn't support enumerating — you need to know the account name\n  list: undefined,\n});\n"],"mappings":";AAAA,SAAS,UAAAA,eAAc;AAEvB;AAAA,EACE;AAAA,OAGK;;;ACNP,SAAS,cAAc;;;ACAvB,SAAS,YAAY;AAEd,IAAM,gBAAN,cAA4B,KAAK,YAAY,eAAe,EAGhE;AAAC;;;ADGJ,IAAM,uBAAuB;AAC7B,IAAM,mBAAmB;AAMlB,IAAM,sBAAsB,MACjC,QAAQ,aAAa,YACrB,QAAQ,aAAa,WACrB,QAAQ,aAAa;AAEhB,IAAM,cAAc,MACzB,QAAQ,aAAa,WACjB,mBACA,QAAQ,aAAa,UACnB,+BACA;AAED,IAAM,qBAAqB,CAAC,aACjC,UAAU,KAAK,KAAK,QAAQ,IAAI,gBAAgB,GAAG,KAAK,KAAK;AAQ/D,IAAI,mBAAqD;AAEzD,IAAM,YAAY,MAChB,OAAO,WAAW;AAAA,EAChB,KAAK,YAAY;AACf,QAAI,CAAC,oBAAoB,GAAG;AAC1B,YAAM,IAAI,MAAM,yBAAyB,QAAQ,QAAQ,GAAG;AAAA,IAC9D;AACA,yBAAqB,OAAO,kBAAkB,EAAE,KAAK,CAAC,EAAE,MAAM,MAAM,KAAK;AACzE,WAAO,MAAM;AAAA,EACf;AAAA,EACA,OAAO,CAAC,UACN,IAAI,cAAc;AAAA,IAChB,SAAS,kCAAkC,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AAAA,IACjG;AAAA,EACF,CAAC;AACL,CAAC;AAEH,IAAM,cAAc,CAAC,aAAqB,YACxC,OAAO;AAAA,EAAQ,UAAU;AAAA,EAAG,CAAC,UAC3B,OAAO,IAAI;AAAA,IACT,KAAK,MAAM,IAAI,MAAM,aAAa,OAAO;AAAA,IACzC,OAAO,CAAC,UACN,IAAI,cAAc;AAAA,MAChB,SAAS,kCAAkC,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AAAA,MACjG;AAAA,IACF,CAAC;AAAA,EACL,CAAC;AACH;AAMK,IAAM,cAAc,CACzB,aACA,YAEA,OAAO;AAAA,EAAQ,YAAY,aAAa,OAAO;AAAA,EAAG,CAAC,UACjD,OAAO,IAAI;AAAA,IACT,KAAK,MAAM,MAAM,YAAY;AAAA,IAC7B,OAAO,MAAM,IAAI,cAAc,EAAE,SAAS,sCAAsC,OAAO,IAAI,CAAC;AAAA,EAC9F,CAAC;AACH;AAEK,IAAM,cAAc,CACzB,aACA,SACA,UAEA,OAAO;AAAA,EAAQ,YAAY,aAAa,OAAO;AAAA,EAAG,CAAC,UACjD,OAAO,IAAI;AAAA,IACT,KAAK,MAAM,MAAM,YAAY,KAAK;AAAA,IAClC,OAAO,CAAC,UACN,IAAI,cAAc;AAAA,MAChB,SAAS,0BAA0B,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AAAA,MACzF;AAAA,IACF,CAAC;AAAA,EACL,CAAC,EAAE,KAAK,OAAO,MAAM;AACvB;AAEK,IAAM,iBAAiB,CAC5B,aACA,YAEA,OAAO;AAAA,EAAQ,YAAY,aAAa,OAAO;AAAA,EAAG,CAAC,UACjD,OAAO,IAAI;AAAA,IACT,KAAK,MAAM;AACT,YAAM,eAAe;AACrB,aAAO;AAAA,IACT;AAAA,IACA,OAAO,MAAM,IAAI,cAAc,EAAE,SAAS,uCAAuC,OAAO,IAAI,CAAC;AAAA,EAC/F,CAAC;AACH;;;AE7GF,SAAS,UAAAC,eAAc;AAUhB,IAAM,uBAAuB,CAAC,iBAAyC;AAAA,EAC5E,KAAK;AAAA,EACL,UAAU;AAAA,EACV,KAAK,CAAC,aACJ,YAAY,aAAa,QAAQ,EAAE;AAAA,IACjCC,QAAO,cAAc,MAAM,IAAI;AAAA,EACjC;AAAA,EACF,KAAK,CAAC,UAAU,UACd,YAAY,aAAa,UAAU,KAAK,EAAE;AAAA,IACxCA,QAAO,cAAc,MAAM,MAAS;AAAA,EACtC;AAAA,EACF,QAAQ,CAAC,aACP,eAAe,aAAa,QAAQ,EAAE;AAAA,IACpCA,QAAO,cAAc,MAAM,KAAK;AAAA,EAClC;AAAA;AAAA,EAEF,MAAM;AACR;;;AHqBA,IAAM,aAAa;AAEZ,IAAM,iBAAiB,CAC5B,WAEA,aAAa;AAAA,EACX,KAAK;AAAA,EACL,MAAM,CAAC,QACLC,QAAO,IAAI,aAAa;AAEtB,UAAM,kBAAkB,mBAAmB,QAAQ,WAAW;AAC9D,UAAM,cAAc,GAAG,eAAe,IAAI,IAAI,MAAM,EAAE;AAEtD,WAAO,IAAI,QAAQ,YAAY,qBAAqB,WAAW,CAAC;AAEhE,UAAM,YAA+B;AAAA,MACnC,aAAa,YAAY;AAAA,MACzB,aAAa,oBAAoB;AAAA,MAEjC,KAAK,CAAC,aACJ,YAAY,aAAa,QAAQ,EAAE;AAAA,QACjCA,QAAO,IAAI,CAAC,MAAM,MAAM,IAAI;AAAA,QAC5BA,QAAO,cAAc,MAAM,KAAK;AAAA,MAClC;AAAA,IACJ;AAEA,WAAO,EAAE,UAAU;AAAA,EACrB,CAAC;AACL,CAAC;","names":["Effect","Effect","Effect","Effect"]}