alchemy 0.1.16 → 0.1.18

package/lib/esbuild.d.ts

@@ -0,0 +1,152 @@
+import * as esbuild from "esbuild";
+export interface BundleProps {
+    /**
+     * Entry point for the bundle
+     */
+    entryPoint: string;
+    /**
+     * Output directory for the bundle
+     */
+    outdir?: string;
+    /**
+     * Output filename for the bundle
+     */
+    outfile?: string;
+    /**
+     * Bundle format (iife, cjs, esm)
+     */
+    format?: "iife" | "cjs" | "esm";
+    /**
+     * Target environment (e.g., 'node16', 'es2020')
+     */
+    target?: string | string[];
+    /**
+     * Whether to minify the output
+     */
+    minify?: boolean;
+    /**
+     * Whether to generate sourcemaps
+     */
+    sourcemap?: boolean | "inline" | "external" | "both";
+    /**
+     * External packages to exclude from bundle
+     */
+    external?: string[];
+    /**
+     * Platform to target (browser, node, neutral)
+     */
+    platform?: "browser" | "node" | "neutral";
+    /**
+     * Additional esbuild options
+     */
+    options?: Partial<esbuild.BuildOptions>;
+}
+export interface BundleOutput {
+    /**
+     * Path to the bundled file
+     */
+    path: string;
+    /**
+     * SHA-256 hash of the bundle contents
+     */
+    hash: string;
+}
+declare const Bundle_base: import("./resource").Provider<string, [props: BundleProps], BundleOutput>;
+export declare class Bundle extends Bundle_base {
+    /**
+     * Get the metafile from the last build
+     */
+    getMetafile(ctx: {
+        get<T>(key: string): Promise<T | undefined>;
+    }): Promise<esbuild.Metafile | undefined>;
+    /**
+     * Get the hash from the last build
+     */
+    getHash(ctx: {
+        get<T>(key: string): Promise<T | undefined>;
+    }): Promise<string | undefined>;
+}
+export declare function bundle(props: BundleProps): Promise<esbuild.BuildResult<{
+    bundle: boolean;
+    splitting?: boolean;
+    preserveSymlinks?: boolean;
+    outfile: string;
+    metafile: boolean;
+    outdir?: string;
+    outbase?: string;
+    external: string[];
+    packages?: "bundle" | "external";
+    alias?: Record<string, string>;
+    loader?: {
+        [ext: string]: esbuild.Loader;
+    };
+    resolveExtensions?: string[];
+    mainFields?: string[];
+    conditions?: string[];
+    write: boolean;
+    allowOverwrite?: boolean;
+    tsconfig?: string;
+    outExtension?: {
+        [ext: string]: string;
+    };
+    publicPath?: string;
+    entryNames?: string;
+    chunkNames?: string;
+    assetNames?: string;
+    inject?: string[];
+    banner?: {
+        [type: string]: string;
+    };
+    footer?: {
+        [type: string]: string;
+    };
+    entryPoints: string[] | Record<string, string> | {
+        in: string;
+        out: string;
+    }[];
+    stdin?: esbuild.StdinOptions;
+    plugins?: esbuild.Plugin[];
+    absWorkingDir?: string;
+    nodePaths?: string[];
+    sourcemap: boolean | "linked" | "inline" | "external" | "both";
+    legalComments?: "none" | "inline" | "eof" | "linked" | "external";
+    sourceRoot?: string;
+    sourcesContent?: boolean;
+    format: esbuild.Format;
+    globalName?: string;
+    target: string | string[];
+    supported?: Record<string, boolean>;
+    platform: esbuild.Platform;
+    mangleProps?: RegExp;
+    reserveProps?: RegExp;
+    mangleQuoted?: boolean;
+    mangleCache?: Record<string, string | false>;
+    drop?: esbuild.Drop[];
+    dropLabels?: string[];
+    minify: boolean;
+    minifyWhitespace?: boolean;
+    minifyIdentifiers?: boolean;
+    minifySyntax?: boolean;
+    lineLimit?: number;
+    charset?: esbuild.Charset;
+    treeShaking?: boolean;
+    ignoreAnnotations?: boolean;
+    jsx?: "transform" | "preserve" | "automatic";
+    jsxFactory?: string;
+    jsxFragment?: string;
+    jsxImportSource?: string;
+    jsxDev?: boolean;
+    jsxSideEffects?: boolean;
+    define?: {
+        [key: string]: string;
+    };
+    pure?: string[];
+    keepNames?: boolean;
+    color?: boolean;
+    logLevel?: esbuild.LogLevel;
+    logLimit?: number;
+    logOverride?: Record<string, esbuild.LogLevel>;
+    tsconfigRaw?: string | esbuild.TsconfigRaw;
+}>>;
+export {};
+//# sourceMappingURL=esbuild.d.ts.map

package/lib/esbuild.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"esbuild.d.ts","sourceRoot":"","sources":["../src/esbuild.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,OAAO,MAAM,SAAS,CAAC;AAMnC,MAAM,WAAW,WAAW;IAC1B;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;IACnB;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,GAAG,KAAK,GAAG,KAAK,CAAC;IAChC;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAC3B;;OAEG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB;;OAEG;IACH,SAAS,CAAC,EAAE,OAAO,GAAG,QAAQ,GAAG,UAAU,GAAG,MAAM,CAAC;IACrD;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB;;OAEG;IACH,QAAQ,CAAC,EAAE,SAAS,GAAG,MAAM,GAAG,SAAS,CAAC;IAC1C;;OAEG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;CACzC;AAED,MAAM,WAAW,YAAY;IAC3B;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC;IACb;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC;CACd;;AAED,qBAAa,MAAO,SAAQ,WAkC3B;IACC;;OAEG;IACU,WAAW,CAAC,GAAG,EAAE;QAC5B,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC;KAC7C;IAID;;OAEG;IACU,OAAO,CAAC,GAAG,EAAE;QAAE,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC,CAAA;KAAE;CAG1E;AAED,wBAAsB,MAAM,CAAC,KAAK,EAAE,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAiB9C"}

package/lib/esbuild.js

@@ -0,0 +1,67 @@
+import * as esbuild from "esbuild";
+import crypto from "node:crypto";
+import fs from "node:fs";
+import path from "node:path";
+import { Resource } from "./resource";
+export class Bundle extends Resource("esbuild::Bundle", {
+    alwaysUpdate: true,
+}, async (ctx, props) => {
+    // Determine output path
+    const outputPath = getOutputPath(props);
+    // Ensure output directory exists
+    await fs.promises.mkdir(path.dirname(outputPath), { recursive: true });
+    if (ctx.event === "delete") {
+        await fs.promises.unlink(outputPath).catch(() => { });
+        // Also clean up sourcemap if it exists
+        await fs.promises.unlink(outputPath + ".map").catch(() => { });
+        return { path: outputPath, hash: "" };
+    }
+    const result = await bundle(props);
+    // Calculate hash of the output
+    const contents = await fs.promises.readFile(outputPath);
+    const hash = crypto.createHash("sha256").update(contents).digest("hex");
+    // Store metadata in context
+    await ctx.set("metafile", result.metafile);
+    await ctx.set("hash", hash);
+    // Return output info
+    return {
+        path: outputPath,
+        hash,
+    };
+}) {
+    /**
+     * Get the metafile from the last build
+     */
+    async getMetafile(ctx) {
+        return ctx.get("metafile");
+    }
+    /**
+     * Get the hash from the last build
+     */
+    async getHash(ctx) {
+        return ctx.get("hash");
+    }
+}
+export async function bundle(props) {
+    const outputPath = getOutputPath(props);
+    // Build the bundle
+    return await esbuild.build({
+        entryPoints: [props.entryPoint],
+        outfile: outputPath,
+        bundle: true,
+        format: props.format,
+        target: props.target,
+        minify: props.minify,
+        sourcemap: props.sourcemap,
+        external: props.external,
+        platform: props.platform,
+        metafile: true,
+        write: true,
+        ...props.options,
+    });
+}
+function getOutputPath(props) {
+    return (props.outfile ||
+        path.join(props.outdir || "dist", path.basename(props.entryPoint, path.extname(props.entryPoint)) + ".js"));
+}
+//# sourceMappingURL=esbuild.js.map

package/lib/esbuild.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"esbuild.js","sourceRoot":"","sources":["../src/esbuild.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,OAAO,MAAM,SAAS,CAAC;AACnC,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAwDtC,MAAM,OAAO,MAAO,SAAQ,QAAQ,CAClC,iBAAiB,EACjB;IACE,YAAY,EAAE,IAAI;CACnB,EACD,KAAK,EAAE,GAAG,EAAE,KAAkB,EAAyB,EAAE;IACvD,wBAAwB;IACxB,MAAM,UAAU,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IAExC,iCAAiC;IACjC,MAAM,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAEvE,IAAI,GAAG,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC3B,MAAM,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACrD,uCAAuC;QACvC,MAAM,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAC9D,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IACxC,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,CAAC;IACnC,+BAA+B;IAC/B,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IACxD,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAExE,4BAA4B;IAC5B,MAAM,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC3C,MAAM,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAE5B,qBAAqB;IACrB,OAAO;QACL,IAAI,EAAE,UAAU;QAChB,IAAI;KACL,CAAC;AACJ,CAAC,CACF;IACC;;OAEG;IACI,KAAK,CAAC,WAAW,CAAC,GAExB;QACC,OAAO,GAAG,CAAC,GAAG,CAAmB,UAAU,CAAC,CAAC;IAC/C,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,OAAO,CAAC,GAAoD;QACvE,OAAO,GAAG,CAAC,GAAG,CAAS,MAAM,CAAC,CAAC;IACjC,CAAC;CACF;AAED,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,KAAkB;IAC7C,MAAM,UAAU,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IACxC,mBAAmB;IACnB,OAAO,MAAM,OAAO,CAAC,KAAK,CAAC;QACzB,WAAW,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC;QAC/B,OAAO,EAAE,UAAU;QACnB,MAAM,EAAE,IAAI;QACZ,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,IAAI;QACX,GAAG,KAAK,CAAC,OAAO;KACjB,CAAC,CAAC;AACL,CAAC;AAED,SAAS,aAAa,CAAC,KAAkB;IACvC,OAAO,CACL,KAAK,CAAC,OAAO;QACb,IAAI,CAAC,IAAI,CACP,KAAK,CAAC,MAAM,IAAI,MAAM,EACtB,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,GAAG,KAAK,CACxE,CACF,CAAC;AACJ,CAAC"}

package/lib/fs.d.ts

@@ -0,0 +1,12 @@
+declare const File_base: import("./resource").Provider<"fs::File", [filePath: string, content: string], string>;
+export declare class File extends File_base {
+}
+declare const Folder_base: import("./resource").Provider<"fs::Folder", [dirPath: string], {
+    path: string;
+}>;
+export declare class Folder extends Folder_base {
+    file(filePath: string, content: string): File;
+}
+export declare function rm(filePath: string): Promise<void>;
+export {};
+//# sourceMappingURL=fs.d.ts.map

package/lib/fs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fs.d.ts","sourceRoot":"","sources":["../src/fs.ts"],"names":[],"mappings":";AAMA,qBAAa,IAAK,SAAQ,SAWzB;CAAG;;UAI4C,MAAM;;AAFtD,qBAAa,MAAO,SAAQ,WAa3B;IACQ,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;CAG9C;AAED,wBAAsB,EAAE,CAAC,QAAQ,EAAE,MAAM,iBAQxC"}

package/lib/fs.js

@@ -0,0 +1,41 @@
+import fs from "node:fs";
+import { unlink } from "node:fs/promises";
+import path from "node:path";
+import { ignore } from "./error";
+import { Resource } from "./resource";
+export class File extends Resource("fs::File", async (ctx, filePath, content) => {
+    if (ctx.event === "delete") {
+        await ignore("ENOENT", () => fs.promises.unlink(filePath));
+    }
+    else {
+        await fs.promises.mkdir(path.dirname(filePath), { recursive: true });
+        await fs.promises.writeFile(filePath, content);
+    }
+    return filePath;
+}) {
+}
+export class Folder extends Resource("fs::Folder", async (ctx, dirPath) => {
+    if (ctx.event === "delete") {
+        // we just do a best effort attempt
+        await ignore(["ENOENT", "ENOTEMPTY"], () => fs.promises.rmdir(dirPath));
+    }
+    else {
+        await ignore("EEXIST", () => fs.promises.mkdir(dirPath, { recursive: true }));
+    }
+    return { path: dirPath };
+}) {
+    file(filePath, content) {
+        return new File(path.basename(filePath), filePath, content);
+    }
+}
+export async function rm(filePath) {
+    try {
+        await unlink(filePath);
+    }
+    catch (error) {
+        if (error.code !== "ENOENT") {
+            throw error;
+        }
+    }
+}
+//# sourceMappingURL=fs.js.map

package/lib/fs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fs.js","sourceRoot":"","sources":["../src/fs.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC1C,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAEtC,MAAM,OAAO,IAAK,SAAQ,QAAQ,CAChC,UAAU,EACV,KAAK,EAAE,GAAG,EAAE,QAAgB,EAAE,OAAe,EAAE,EAAE;IAC/C,IAAI,GAAG,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC3B,MAAM,MAAM,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC7D,CAAC;SAAM,CAAC;QACN,MAAM,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACrE,MAAM,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC,CACF;CAAG;AAEJ,MAAM,OAAO,MAAO,SAAQ,QAAQ,CAClC,YAAY,EACZ,KAAK,EAAE,GAAG,EAAE,OAAe,EAA6B,EAAE;IACxD,IAAI,GAAG,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC3B,mCAAmC;QACnC,MAAM,MAAM,CAAC,CAAC,QAAQ,EAAE,WAAW,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;IAC1E,CAAC;SAAM,CAAC;QACN,MAAM,MAAM,CAAC,QAAQ,EAAE,GAAG,EAAE,CAC1B,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAChD,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AAC3B,CAAC,CACF;IACQ,IAAI,CAAC,QAAgB,EAAE,OAAe;QAC3C,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC9D,CAAC;CACF;AAED,MAAM,CAAC,KAAK,UAAU,EAAE,CAAC,QAAgB;IACvC,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;IACzB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACvD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;AACH,CAAC"}

package/lib/github/client.d.ts

@@ -0,0 +1,34 @@
+import { Octokit } from "@octokit/rest";
+/**
+ * Try to get a GitHub token from the GitHub CLI
+ */
+export declare function getGitHubTokenFromCLI(): Promise<string | null>;
+/**
+ * Get GitHub authentication token with the following priority:
+ * 1. Explicit token provided in props
+ * 2. GITHUB_ACCESS_TOKEN environment variable (for actions with admin permissions)
+ * 3. GITHUB_TOKEN environment variable
+ * 4. GitHub CLI token (if gh is installed and authenticated)
+ *
+ * @param token Optional token to use
+ * @returns The resolved token or null if not available
+ */
+export declare function getGitHubToken(token?: string): Promise<string | null>;
+/**
+ * Create an authenticated Octokit client
+ *
+ * @param options Options for creating the client
+ * @returns An authenticated Octokit client
+ */
+export declare function createGitHubClient(options?: {
+    token?: string;
+}): Promise<Octokit>;
+/**
+ * Verifies GitHub authentication and provides helpful error messages
+ *
+ * @param octokit Octokit client
+ * @param owner Repository owner
+ * @param repo Repository name
+ */
+export declare function verifyGitHubAuth(octokit: Octokit, owner: string, repo: string): Promise<void>;
+//# sourceMappingURL=client.d.ts.map

package/lib/github/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/github/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAOxC;;GAEG;AACH,wBAAsB,qBAAqB,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAYpE;AAED;;;;;;;;;GASG;AACH,wBAAsB,cAAc,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAO3E;AAED;;;;;GAKG;AACH,wBAAsB,kBAAkB,CACtC,OAAO,GAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAA;CAAO,GAC/B,OAAO,CAAC,OAAO,CAAC,CAMlB;AAED;;;;;;GAMG;AACH,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,OAAO,EAChB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,IAAI,CAAC,CA4Cf"}

package/lib/github/client.js

@@ -0,0 +1,91 @@
+import { Octokit } from "@octokit/rest";
+import { exec } from "child_process";
+import { promisify } from "util";
+// Convert exec to promise-based
+const execAsync = promisify(exec);
+/**
+ * Try to get a GitHub token from the GitHub CLI
+ */
+export async function getGitHubTokenFromCLI() {
+    try {
+        // Check if GitHub CLI is installed
+        const { stdout: ghVersion } = await execAsync("gh --version");
+        if (!ghVersion)
+            return null;
+        // Get the auth token
+        const { stdout: token } = await execAsync("gh auth token");
+        return token?.trim() || null;
+    }
+    catch (error) {
+        return null;
+    }
+}
+/**
+ * Get GitHub authentication token with the following priority:
+ * 1. Explicit token provided in props
+ * 2. GITHUB_ACCESS_TOKEN environment variable (for actions with admin permissions)
+ * 3. GITHUB_TOKEN environment variable
+ * 4. GitHub CLI token (if gh is installed and authenticated)
+ *
+ * @param token Optional token to use
+ * @returns The resolved token or null if not available
+ */
+export async function getGitHubToken(token) {
+    return (token ||
+        process.env.GITHUB_ACCESS_TOKEN ||
+        process.env.GITHUB_TOKEN ||
+        (await getGitHubTokenFromCLI()));
+}
+/**
+ * Create an authenticated Octokit client
+ *
+ * @param options Options for creating the client
+ * @returns An authenticated Octokit client
+ */
+export async function createGitHubClient(options = {}) {
+    const token = await getGitHubToken(options.token);
+    return new Octokit({
+        auth: token,
+    });
+}
+/**
+ * Verifies GitHub authentication and provides helpful error messages
+ *
+ * @param octokit Octokit client
+ * @param owner Repository owner
+ * @param repo Repository name
+ */
+export async function verifyGitHubAuth(octokit, owner, repo) {
+    try {
+        // Make a test request to check authentication
+        await octokit.rest.repos.get({
+            owner,
+            repo,
+        });
+    }
+    catch (error) {
+        if (error.status === 401) {
+            console.error("\n⚠️ GitHub authentication failed. Please try one of the following:");
+            console.error("1. Run 'gh auth login' to authenticate with the GitHub CLI");
+            console.error("2. Set the GITHUB_TOKEN environment variable with a personal access token");
+            console.error("3. Pass a token directly to the constructor");
+            console.error("\nTo create a token, visit: https://github.com/settings/tokens");
+            console.error("Required scopes: 'repo' for private repos or 'public_repo' for public repos\n");
+            throw new Error("GitHub authentication failed");
+        }
+        else if (error.status === 403) {
+            console.error("\n⚠️ Insufficient permissions. You need admin access to the repository.");
+            console.error("Make sure your token has the 'repo' scope for private repos or 'public_repo' for public repos\n");
+            throw new Error("Insufficient GitHub permissions");
+        }
+        else if (error.status === 404) {
+            console.error(`\n⚠️ Repository not found: ${owner}/${repo}`);
+            console.error("Make sure the repository exists and you have access to it\n");
+            throw new Error("GitHub repository not found");
+        }
+        else {
+            throw error;
+        }
+    }
+}
+//# sourceMappingURL=client.js.map

package/lib/github/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/github/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AACrC,OAAO,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AAEjC,gCAAgC;AAChC,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;AAElC;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB;IACzC,IAAI,CAAC;QACH,mCAAmC;QACnC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,SAAS,CAAC,cAAc,CAAC,CAAC;QAC9D,IAAI,CAAC,SAAS;YAAE,OAAO,IAAI,CAAC;QAE5B,qBAAqB;QACrB,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,SAAS,CAAC,eAAe,CAAC,CAAC;QAC3D,OAAO,KAAK,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC;IAC/B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,KAAc;IACjD,OAAO,CACL,KAAK;QACL,OAAO,CAAC,GAAG,CAAC,mBAAmB;QAC/B,OAAO,CAAC,GAAG,CAAC,YAAY;QACxB,CAAC,MAAM,qBAAqB,EAAE,CAAC,CAChC,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,UAA8B,EAAE;IAEhC,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAElD,OAAO,IAAI,OAAO,CAAC;QACjB,IAAI,EAAE,KAAK;KACZ,CAAC,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAAgB,EAChB,KAAa,EACb,IAAY;IAEZ,IAAI,CAAC;QACH,8CAA8C;QAC9C,MAAM,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;YAC3B,KAAK;YACL,IAAI;SACL,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAU,EAAE,CAAC;QACpB,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACzB,OAAO,CAAC,KAAK,CACX,qEAAqE,CACtE,CAAC;YACF,OAAO,CAAC,KAAK,CACX,4DAA4D,CAC7D,CAAC;YACF,OAAO,CAAC,KAAK,CACX,2EAA2E,CAC5E,CAAC;YACF,OAAO,CAAC,KAAK,CAAC,6CAA6C,CAAC,CAAC;YAC7D,OAAO,CAAC,KAAK,CACX,gEAAgE,CACjE,CAAC;YACF,OAAO,CAAC,KAAK,CACX,+EAA+E,CAChF,CAAC;YACF,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAClD,CAAC;aAAM,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAChC,OAAO,CAAC,KAAK,CACX,yEAAyE,CAC1E,CAAC;YACF,OAAO,CAAC,KAAK,CACX,iGAAiG,CAClG,CAAC;YACF,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACrD,CAAC;aAAM,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAChC,OAAO,CAAC,KAAK,CAAC,8BAA8B,KAAK,IAAI,IAAI,EAAE,CAAC,CAAC;YAC7D,OAAO,CAAC,KAAK,CACX,6DAA6D,CAC9D,CAAC;YACF,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACjD,CAAC;aAAM,CAAC;YACN,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;AACH,CAAC"}

package/lib/github/index.d.ts

@@ -0,0 +1,2 @@
+export * from "./secret";
+//# sourceMappingURL=index.d.ts.map

package/lib/github/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/github/index.ts"],"names":[],"mappings":"AAAA,cAAc,UAAU,CAAC"}

package/lib/github/index.js

@@ -0,0 +1,2 @@
+export * from "./secret";
+//# sourceMappingURL=index.js.map

package/lib/github/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/github/index.ts"],"names":[],"mappings":"AAAA,cAAc,UAAU,CAAC"}

package/lib/github/secret.d.ts

@@ -0,0 +1,47 @@
+import type { Secret } from "../secret";
+/**
+ * Properties for creating or updating a GitHub Secret
+ */
+export interface GitHubSecretProps {
+    /**
+     * Repository owner (user or organization)
+     */
+    owner: string;
+    /**
+     * Repository name
+     */
+    repository: string;
+    /**
+     * Secret name
+     */
+    name: string;
+    /**
+     * Secret value (will be stored securely on GitHub)
+     */
+    value: Secret;
+    /**
+     * Optional GitHub API token (overrides environment variable)
+     */
+    token?: string;
+}
+/**
+ * Output returned after Secret creation/update
+ */
+export interface GitHubSecretOutput extends Omit<GitHubSecretProps, "value"> {
+    /**
+     * The ID of the resource
+     */
+    id: string;
+    /**
+     * Time at which the object was created/updated
+     */
+    updatedAt: string;
+}
+declare const GitHubSecret_base: import("../resource").Provider<"github::Secret", [props: GitHubSecretProps], GitHubSecretOutput>;
+/**
+ * Resource for managing GitHub repository secrets
+ */
+export declare class GitHubSecret extends GitHubSecret_base {
+}
+export {};
+//# sourceMappingURL=secret.d.ts.map

package/lib/github/secret.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret.d.ts","sourceRoot":"","sources":["../../src/github/secret.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAExC;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC;;OAEG;IACH,KAAK,EAAE,MAAM,CAAC;IAEd;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;IAEnB;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC;IAEb;;OAEG;IACH,KAAK,EAAE,MAAM,CAAC;IAEd;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,kBAAmB,SAAQ,IAAI,CAAC,iBAAiB,EAAE,OAAO,CAAC;IAC1E;;OAEG;IACH,EAAE,EAAE,MAAM,CAAC;IAEX;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC;CACnB;;AAED;;GAEG;AACH,qBAAa,YAAa,SAAQ,iBA4FjC;CAAG"}

package/lib/github/secret.js

@@ -0,0 +1,99 @@
+import sodium from "libsodium-wrappers";
+import { Resource } from "../resource";
+import { createGitHubClient, verifyGitHubAuth } from "./client";
+/**
+ * Resource for managing GitHub repository secrets
+ */
+export class GitHubSecret extends Resource("github::Secret", async (ctx, props) => {
+    // Create authenticated Octokit client - will automatically handle token resolution
+    const octokit = await createGitHubClient({ token: props.token });
+    // Verify authentication and permissions
+    if (!ctx.quiet) {
+        await verifyGitHubAuth(octokit, props.owner, props.repository);
+    }
+    if (ctx.event === "delete") {
+        if (ctx.output?.id) {
+            try {
+                // Delete the secret
+                await octokit.rest.actions.deleteRepoSecret({
+                    owner: props.owner,
+                    repo: props.repository,
+                    secret_name: props.name,
+                });
+            }
+            catch (error) {
+                // Ignore 404 errors (secret already deleted)
+                if (error.status === 404) {
+                    console.log("Secret doesn't exist, ignoring");
+                }
+                else {
+                    throw error;
+                }
+            }
+        }
+        // Return void (a deleted resource has no content)
+        return undefined;
+    }
+    else {
+        try {
+            // Get the repository's public key for encrypting secrets
+            const { data: publicKey } = await octokit.rest.actions.getRepoPublicKey({
+                owner: props.owner,
+                repo: props.repository,
+            });
+            // Encrypt the secret value using libsodium
+            const encryptedValue = await encryptString(props.value.unencrypted, publicKey.key);
+            // Create or update the secret with the encrypted value and key_id
+            const response = await octokit.rest.actions.createOrUpdateRepoSecret({
+                owner: props.owner,
+                repo: props.repository,
+                secret_name: props.name,
+                encrypted_value: encryptedValue,
+                key_id: publicKey.key_id,
+            });
+            // GitHub doesn't return the secret details on create/update, so we need to construct it
+            const output = {
+                id: `${props.owner}/${props.repository}/${props.name}`,
+                owner: props.owner,
+                repository: props.repository,
+                name: props.name,
+                token: props.token,
+                updatedAt: new Date().toISOString(),
+            };
+            return output;
+        }
+        catch (error) {
+            if (error.status === 403 &&
+                error.message?.includes("Must have admin rights")) {
+                console.error("\n⚠️ Error creating/updating GitHub secret: You must have admin rights to the repository.");
+                console.error("Make sure your GitHub token has the required permissions (repo scope for private repos).\n");
+            }
+            else {
+                console.error("Error creating/updating GitHub secret:", error.message);
+            }
+            throw error;
+        }
+    }
+}) {
+}
+/**
+ * Encrypt a value for GitHub using libsodium
+ * Based on GitHub's documentation for encrypting secrets
+ *
+ * @param value - The secret value to encrypt
+ * @param publicKey - The base64-encoded public key from GitHub
+ * @returns The base64-encoded encrypted value
+ */
+async function encryptString(value, publicKey) {
+    // Initialize libsodium
+    await sodium.ready;
+    // Convert the public key from base64 to binary
+    const binKey = sodium.from_base64(publicKey, sodium.base64_variants.ORIGINAL);
+    // Convert the message to a Uint8Array
+    const binMessage = sodium.from_string(value);
+    // Encrypt the message with the public key using libsodium's sealed box
+    const encryptedBin = sodium.crypto_box_seal(binMessage, binKey);
+    // Convert the encrypted message to base64
+    return sodium.to_base64(encryptedBin, sodium.base64_variants.ORIGINAL);
+}
+//# sourceMappingURL=secret.js.map

package/lib/github/secret.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret.js","sourceRoot":"","sources":["../../src/github/secret.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAgB,QAAQ,EAAE,MAAM,aAAa,CAAC;AAErD,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AA8ChE;;GAEG;AACH,MAAM,OAAO,YAAa,SAAQ,QAAQ,CACxC,gBAAgB,EAChB,KAAK,EACH,GAAgC,EAChC,KAAwB,EACY,EAAE;IACtC,mFAAmF;IACnF,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;IAEjE,wCAAwC;IACxC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;QACf,MAAM,gBAAgB,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;IACjE,CAAC;IAED,IAAI,GAAG,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC3B,IAAI,GAAG,CAAC,MAAM,EAAE,EAAE,EAAE,CAAC;YACnB,IAAI,CAAC;gBACH,oBAAoB;gBACpB,MAAM,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC;oBAC1C,KAAK,EAAE,KAAK,CAAC,KAAK;oBAClB,IAAI,EAAE,KAAK,CAAC,UAAU;oBACtB,WAAW,EAAE,KAAK,CAAC,IAAI;iBACxB,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAU,EAAE,CAAC;gBACpB,6CAA6C;gBAC7C,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;oBACzB,OAAO,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC;gBAChD,CAAC;qBAAM,CAAC;oBACN,MAAM,KAAK,CAAC;gBACd,CAAC;YACH,CAAC;QACH,CAAC;QAED,kDAAkD;QAClD,OAAO,SAAS,CAAC;IACnB,CAAC;SAAM,CAAC;QACN,IAAI,CAAC;YACH,yDAAyD;YACzD,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,CACrE;gBACE,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,IAAI,EAAE,KAAK,CAAC,UAAU;aACvB,CACF,CAAC;YAEF,2CAA2C;YAC3C,MAAM,cAAc,GAAG,MAAM,aAAa,CACxC,KAAK,CAAC,KAAK,CAAC,WAAW,EACvB,SAAS,CAAC,GAAG,CACd,CAAC;YAEF,kEAAkE;YAClE,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,wBAAwB,CAAC;gBACnE,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,IAAI,EAAE,KAAK,CAAC,UAAU;gBACtB,WAAW,EAAE,KAAK,CAAC,IAAI;gBACvB,eAAe,EAAE,cAAc;gBAC/B,MAAM,EAAE,SAAS,CAAC,MAAM;aACzB,CAAC,CAAC;YAEH,wFAAwF;YACxF,MAAM,MAAM,GAAuB;gBACjC,EAAE,EAAE,GAAG,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,IAAI,EAAE;gBACtD,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACpC,CAAC;YAEF,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,IACE,KAAK,CAAC,MAAM,KAAK,GAAG;gBACpB,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC,wBAAwB,CAAC,EACjD,CAAC;gBACD,OAAO,CAAC,KAAK,CACX,2FAA2F,CAC5F,CAAC;gBACF,OAAO,CAAC,KAAK,CACX,4FAA4F,CAC7F,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,KAAK,CACX,wCAAwC,EACxC,KAAK,CAAC,OAAO,CACd,CAAC;YACJ,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;AACH,CAAC,CACF;CAAG;AAEJ;;;;;;;GAOG;AACH,KAAK,UAAU,aAAa,CAC1B,KAAa,EACb,SAAiB;IAEjB,uBAAuB;IACvB,MAAM,MAAM,CAAC,KAAK,CAAC;IAEnB,+CAA+C;IAC/C,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,SAAS,EAAE,MAAM,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;IAE9E,sCAAsC;IACtC,MAAM,UAAU,GAAG,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IAE7C,uEAAuE;IACvE,MAAM,YAAY,GAAG,MAAM,CAAC,eAAe,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAEhE,0CAA0C;IAC1C,OAAO,MAAM,CAAC,SAAS,CAAC,YAAY,EAAE,MAAM,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;AACzE,CAAC"}

package/lib/global.d.ts

@@ -0,0 +1,16 @@
+import type { Provider } from "./resource";
+import { FileSystemStateStore } from "./state";
+export interface Config {
+    defaultStage?: string;
+    stateStore?: new (dir: string) => FileSystemStateStore;
+}
+export declare const config: Config;
+export declare const defaultStage: string;
+export declare const defaultStateStore: typeof FileSystemStateStore;
+export declare const providers: Map<string, Provider<string, any[], any>>;
+export declare const deletions: {
+    id: string;
+    data: Record<string, any>;
+    inputs: any[];
+}[];
+//# sourceMappingURL=global.d.ts.map

package/lib/global.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"global.d.ts","sourceRoot":"","sources":["../src/global.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,QAAQ,EAAgB,MAAM,YAAY,CAAC;AACzD,OAAO,EAAE,oBAAoB,EAAE,MAAM,SAAS,CAAC;AAE/C,MAAM,WAAW,MAAM;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,KAAK,GAAG,EAAE,MAAM,KAAK,oBAAoB,CAAC;CACxD;AAoCD,eAAO,MAAM,MAAM,EAAE,MAGpB,CAAC;AAEF,eAAO,MAAM,YAAY,QAAgC,CAAC;AAE1D,eAAO,MAAM,iBAAiB,6BAA4C,CAAC;AAE3E,eAAO,MAAM,SAAS,2CAGnB,CAAC;AAEJ,eAAO,MAAM,SAAS,EAAE;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC1B,MAAM,EAAE,GAAG,EAAE,CAAC;CACf,EAAO,CAAC"}