alchemy 2.0.0-beta.17 → 2.0.0-beta.18

package/src/AWS/Providers.ts

@@ -49,13 +49,18 @@ export const providers = () =>
       AutoScaling.AutoScalingGroup,
       AutoScaling.LaunchTemplate,
       AutoScaling.ScalingPolicy,
+      CloudFront.CachePolicy,
       CloudFront.Distribution,
       CloudFront.Function,
       CloudFront.Invalidation,
+      CloudFront.KeyGroup,
       CloudFront.KeyValueStore,
       CloudFront.KvEntries,
       CloudFront.KvRoutesUpdate,
       CloudFront.OriginAccessControl,
+      CloudFront.OriginRequestPolicy,
+      CloudFront.PublicKey,
+      CloudFront.ResponseHeadersPolicy,
       CloudWatch.Alarm,
       CloudWatch.AlarmMuteRule,
       CloudWatch.AnomalyDetector,
@@ -124,6 +129,7 @@ export const providers = () =>
       EC2.Vpc,
       EC2.VpcEndpoint,
       ECR.Repository,
+      ECS.CapacityProvider,
       ECS.Cluster,
       ECS.DescribeTasksPolicy,
       ECS.ListTasksPolicy,
@@ -282,13 +288,18 @@ export const providers = () =>
         AutoScaling.AutoScalingGroupProvider(),
         AutoScaling.LaunchTemplateProvider(),
         AutoScaling.ScalingPolicyProvider(),
+        CloudFront.CachePolicyProvider(),
         CloudFront.DistributionProvider(),
         CloudFront.FunctionProvider(),
         CloudFront.InvalidationProvider(),
+        CloudFront.KeyGroupProvider(),
         CloudFront.KeyValueStoreProvider(),
         CloudFront.KvEntriesProvider(),
         CloudFront.KvRoutesUpdateProvider(),
         CloudFront.OriginAccessControlProvider(),
+        CloudFront.OriginRequestPolicyProvider(),
+        CloudFront.PublicKeyProvider(),
+        CloudFront.ResponseHeadersPolicyProvider(),
         CloudWatch.AlarmMuteRuleProvider(),
         CloudWatch.AlarmProvider(),
         CloudWatch.AnomalyDetectorProvider(),
@@ -357,6 +368,7 @@ export const providers = () =>
         EC2.VpcEndpointProvider(),
         EC2.VpcProvider(),
         ECR.RepositoryProvider(),
+        ECS.CapacityProviderProvider(),
         ECS.ClusterProvider(),
         ECS.DescribeTasksPolicyLive,
         ECS.ListTasksPolicyLive,

package/src/GitHub/Secrets.ts

@@ -0,0 +1,66 @@
+import * as Effect from "effect/Effect";
+import * as Redacted from "effect/Redacted";
+
+import type { Input } from "../Input.ts";
+import { Secret } from "./Secret.ts";
+
+export interface SecretsProps {
+  /**
+   * Repository owner (user or organization).
+   */
+  owner: string;
+
+  /**
+   * Repository name.
+   */
+  repository: string;
+
+  /**
+   * Optional environment name. When set every secret is scoped to that
+   * GitHub Actions environment instead of the whole repository.
+   */
+  environment?: string;
+
+  /**
+   * Map of secret name to value. Plain strings are wrapped with
+   * `Redacted.make`; already-redacted values are passed through.
+   */
+  secrets: Record<string, Input<string | Redacted.Redacted<string>>>;
+}
+
+/**
+ * Bulk-creates a set of {@link Secret}s in the same repository (and
+ * optionally the same environment).
+ *
+ * Each entry in `secrets` becomes one `GitHub.Secret` resource, using the
+ * map key as both the alchemy logical id and the secret name.
+ *
+ * @example
+ * ```ts
+ * yield* GitHub.Secrets({
+ *   owner: "alchemy-run",
+ *   repository: "alchemy-effect",
+ *   secrets: {
+ *     AXIOM_INGEST_TOKEN: tokenValue,
+ *     AXIOM_DATASET_TRACES: traces.name,
+ *   },
+ * });
+ * ```
+ */
+export const Secrets = ({
+  owner,
+  repository,
+  environment,
+  secrets,
+}: SecretsProps) =>
+  Effect.all(
+    Object.entries(secrets).map(([name, value]) =>
+      Secret(name, {
+        owner,
+        repository,
+        environment,
+        name,
+        value: Redacted.make(value),
+      }),
+    ),
+  );

package/src/GitHub/index.ts

@@ -3,4 +3,5 @@ export * from "./Comment.ts";
 export { GitHubCredentials, fromEnv, fromToken } from "./Credentials.ts";
 export * from "./Providers.ts";
 export * from "./Secret.ts";
+export * from "./Secrets.ts";
 export * from "./Variable.ts";