alchemy 2.0.0-beta.2 → 2.0.0-beta.21

package/lib/GitHub/AuthProvider.js

@@ -0,0 +1,154 @@
+import * as Console from "effect/Console";
+import * as Effect from "effect/Effect";
+import * as FileSystem from "effect/FileSystem";
+import * as Match from "effect/Match";
+import * as Redacted from "effect/Redacted";
+import * as Stream from "effect/Stream";
+import * as ChildProcess from "effect/unstable/process/ChildProcess";
+import { AuthError, AuthProviderLayer, } from "../Auth/AuthProvider.js";
+import { deleteCredentials, displayRedacted, readCredentials, writeCredentials, } from "../Auth/Credentials.js";
+import { getEnvRedacted, retryOnce } from "../Auth/Env.js";
+import * as Clank from "../Util/Clank.js";
+const options = [
+    {
+        value: "gh-cli",
+        label: "GitHub CLI",
+        hint: "delegate to `gh auth token` (run `gh auth login` first)",
+    },
+    {
+        value: "env",
+        label: "Environment Variables",
+        hint: "GITHUB_ACCESS_TOKEN or GITHUB_TOKEN",
+    },
+    {
+        value: "stored",
+        label: "Personal Access Token",
+        hint: "enter PAT interactively, stored in ~/.alchemy/credentials",
+    },
+];
+export const GITHUB_AUTH_PROVIDER_NAME = "GitHub";
+/**
+ * Layer that registers the GitHub {@link AuthProvider} into the
+ * {@link AuthProviders} registry when built. Include this in the GitHub
+ * `providers()` layer so `alchemy login` can discover it.
+ *
+ * Supported methods:
+ * - `gh-cli`: shells out to `gh auth token` (recommended).
+ * - `env`: reads `GITHUB_ACCESS_TOKEN` or `GITHUB_TOKEN`.
+ * - `stored`: prompts for a PAT and writes it to `~/.alchemy/credentials`.
+ *
+ * Browser/device OAuth is intentionally not implemented: GitHub's
+ * OAuth App flow requires a `client_secret` we cannot ship, and
+ * device flow is exactly what `gh auth login` already does.
+ */
+export const GitHubAuth = AuthProviderLayer()(GITHUB_AUTH_PROVIDER_NAME, {
+    configure: (profileName, ctx) => configureCredentials(profileName, ctx),
+    logout: (profileName, config) => logout(profileName, config),
+    login: (profileName, config) => login(profileName, config),
+    prettyPrint: (profileName, config) => prettyPrint(profileName, config),
+    read: (profileName, config) => resolveCredentials(profileName, config),
+});
+const resolveCredentials = (profileName, config) => Match.value(config).pipe(Match.when({ method: "env" }, Effect.fnUntraced(function* () {
+    const access = yield* getEnvRedacted("GITHUB_ACCESS_TOKEN");
+    if (access) {
+        return {
+            type: "token",
+            token: access,
+            source: {
+                type: "env",
+                details: "GITHUB_ACCESS_TOKEN",
+            },
+        };
+    }
+    const token = yield* getEnvRedacted("GITHUB_TOKEN");
+    if (token) {
+        return {
+            type: "token",
+            token,
+            source: { type: "env", details: "GITHUB_TOKEN" },
+        };
+    }
+    return yield* new AuthError({
+        message: "GitHub env credentials not found. Set GITHUB_ACCESS_TOKEN or GITHUB_TOKEN.",
+    });
+})), Match.when({ method: "stored" }, () => readCredentials(profileName, "gh-stored").pipe(Effect.flatMap((creds) => creds == null
+    ? Effect.fail(new AuthError({
+        message: "GitHub stored credentials not found. Run: alchemy login --configure",
+    }))
+    : Effect.succeed({
+        type: "token",
+        token: Redacted.make(creds.token),
+        source: { type: "stored" },
+    })))), Match.when({ method: "gh-cli" }, () => ghCliToken().pipe(Effect.map((token) => ({
+    type: "token",
+    token: Redacted.make(token),
+    source: { type: "gh-cli" },
+})))), Match.exhaustive);
+const logout = (profileName, config) => Match.value(config).pipe(Match.when({ method: "env" }, () => Effect.void), Match.when({ method: "gh-cli" }, () => Effect.void), Match.when({ method: "stored" }, () => deleteCredentials(profileName, "gh-stored").pipe(Effect.andThen(Clank.success("GitHub: stored credentials removed")))), Match.exhaustive);
+const login = (profileName, config) => Match.value(config)
+    .pipe(Match.when({ method: "env" }, () => Effect.void), Match.when({ method: "gh-cli" }, () => ghCliToken().pipe(Effect.tap(() => Clank.success("GitHub: gh CLI authentication available.")), Effect.asVoid)), Match.when({ method: "stored" }, () => readCredentials(profileName, "gh-stored").pipe(Effect.flatMap((creds) => creds == null ? loginStored(profileName) : Effect.void))), Match.exhaustive)
+    .pipe(Effect.mapError((e) => new AuthError({ message: "login failed", cause: e })));
+const configureCredentials = (profileName, ctx) => Effect.gen(function* () {
+    if (ctx.ci) {
+        return { method: "env" };
+    }
+    return yield* configureInteractive(profileName);
+}).pipe(Effect.mapError((e) => new AuthError({
+    message: "failed to configure credentials",
+    cause: e,
+})));
+const configureInteractive = (profileName) => Clank.select({
+    message: "GitHub authentication method",
+    options,
+}).pipe(Effect.flatMap((method) => Match.value(method).pipe(Match.when("env", () => Effect.succeed({ method: "env" })), Match.when("gh-cli", () => ghCliToken().pipe(Effect.as({ method: "gh-cli" }), Effect.mapError((e) => new AuthError({
+    message: `gh CLI not available: ${e.message}`,
+    cause: e,
+})))), Match.when("stored", () => loginStored(profileName)), Match.exhaustive)));
+const loginStored = Effect.fnUntraced(function* (profileName) {
+    const token = yield* Clank.password({
+        message: "GitHub Personal Access Token (needs `repo` scope; `workflow` for Actions)",
+        validate: (v) => (v.length === 0 ? "Required" : undefined),
+    }).pipe(retryOnce);
+    yield* writeCredentials(profileName, "gh-stored", {
+        type: "pat",
+        token,
+    });
+    yield* Clank.success("GitHub: credentials saved.");
+    return { method: "stored" };
+});
+class GhCliError extends Error {
+    _tag = "GhCliError";
+}
+const ghCliToken = () => Effect.gen(function* () {
+    const handle = yield* ChildProcess.make("gh", ["auth", "token"], {
+        shell: false,
+    });
+    const [exitCode, stdout, stderr] = yield* Effect.all([
+        handle.exitCode,
+        Stream.mkString(Stream.decodeText(handle.stdout)),
+        Stream.mkString(Stream.decodeText(handle.stderr)),
+    ], { concurrency: 3 });
+    if (exitCode !== 0) {
+        return yield* Effect.fail(new GhCliError(`gh auth token exited with ${exitCode}: ${stderr.trim() || stdout.trim()}`));
+    }
+    const token = stdout.trim();
+    if (!token) {
+        return yield* Effect.fail(new GhCliError("gh auth token returned empty output"));
+    }
+    return token;
+}).pipe(Effect.scoped, Effect.mapError((e) => e instanceof GhCliError
+    ? new AuthError({ message: e.message, cause: e })
+    : new AuthError({
+        message: "Could not invoke `gh`. Install GitHub CLI from https://cli.github.com/ and run `gh auth login`.",
+        cause: e,
+    })));
+const prettyPrint = (profileName, config) => resolveCredentials(profileName, config).pipe(Effect.tap((creds) => {
+    const sourceStr = creds.source.details
+        ? `${creds.source.type} - ${creds.source.details}`
+        : creds.source.type;
+    return Effect.all([
+        Console.log(`  token: ${displayRedacted(creds.token, 6)}`),
+        Console.log(`  source: ${sourceStr}`),
+    ]);
+}), Effect.catch((e) => Console.error(`  Failed to retrieve credentials: ${e}`)));
+//# sourceMappingURL=AuthProvider.js.map

package/lib/GitHub/AuthProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthProvider.js","sourceRoot":"","sources":["../../src/GitHub/AuthProvider.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,OAAO,MAAM,gBAAgB,CAAC;AAC1C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,UAAU,MAAM,mBAAmB,CAAC;AAChD,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAC5C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,YAAY,MAAM,sCAAsC,CAAC;AAErE,OAAO,EACL,SAAS,EACT,iBAAiB,GAElB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,iBAAiB,EACjB,eAAe,EACf,eAAe,EACf,gBAAgB,GACjB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,KAAK,KAAK,MAAM,kBAAkB,CAAC;AAE1C,MAAM,OAAO,GAIR;IACH;QACE,KAAK,EAAE,QAAQ;QACf,KAAK,EAAE,YAAY;QACnB,IAAI,EAAE,yDAAyD;KAChE;IACD;QACE,KAAK,EAAE,KAAK;QACZ,KAAK,EAAE,uBAAuB;QAC9B,IAAI,EAAE,qCAAqC;KAC5C;IACD;QACE,KAAK,EAAE,QAAQ;QACf,KAAK,EAAE,uBAAuB;QAC9B,IAAI,EAAE,2DAA2D;KAClE;CACF,CAAC;AAkBF,MAAM,CAAC,MAAM,yBAAyB,GAAG,QAAQ,CAAC;AAElD;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,iBAAiB,EAGxC,CAAC,yBAAyB,EAAE;IAC7B,SAAS,EAAE,CAAC,WAAW,EAAE,GAAG,EAAE,EAAE,CAAC,oBAAoB,CAAC,WAAW,EAAE,GAAG,CAAC;IACvE,MAAM,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC;IAC5D,KAAK,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,MAAM,CAAC;IAC1D,WAAW,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,CAAC,WAAW,CAAC,WAAW,EAAE,MAAM,CAAC;IACtE,IAAI,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,CAAC,kBAAkB,CAAC,WAAW,EAAE,MAAM,CAAC;CACvE,CAAC,CAAC;AAEH,MAAM,kBAAkB,GAAG,CACzB,WAAmB,EACnB,MAAwB,EAKxB,EAAE,CACF,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CACtB,KAAK,CAAC,IAAI,CACR,EAAE,MAAM,EAAE,KAAK,EAAE,EACjB,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC;IACzB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,cAAc,CAAC,qBAAqB,CAAC,CAAC;IAC5D,IAAI,MAAM,EAAE,CAAC;QACX,OAAO;YACL,IAAI,EAAE,OAAgB;YACtB,KAAK,EAAE,MAAM;YACb,MAAM,EAAE;gBACN,IAAI,EAAE,KAAc;gBACpB,OAAO,EAAE,qBAAqB;aAC/B;SACF,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,cAAc,CAAC,cAAc,CAAC,CAAC;IACpD,IAAI,KAAK,EAAE,CAAC;QACV,OAAO;YACL,IAAI,EAAE,OAAgB;YACtB,KAAK;YACL,MAAM,EAAE,EAAE,IAAI,EAAE,KAAc,EAAE,OAAO,EAAE,cAAc,EAAE;SAC1D,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC,CAAC,IAAI,SAAS,CAAC;QAC1B,OAAO,EACL,4EAA4E;KAC/E,CAAC,CAAC;AACL,CAAC,CAAC,CACH,EACD,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,CACpC,eAAe,CAA0B,WAAW,EAAE,WAAW,CAAC,CAAC,IAAI,CACrE,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CACvB,KAAK,IAAI,IAAI;IACX,CAAC,CAAC,MAAM,CAAC,IAAI,CACT,IAAI,SAAS,CAAC;QACZ,OAAO,EACL,qEAAqE;KACxE,CAAC,CACH;IACH,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;QACb,IAAI,EAAE,OAAgB;QACtB,KAAK,EAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;QACjC,MAAM,EAAE,EAAE,IAAI,EAAE,QAAiB,EAAE;KACpC,CAAC,CACP,CACF,CACF,EACD,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,CACpC,UAAU,EAAE,CAAC,IAAI,CACf,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACrB,IAAI,EAAE,OAAgB;IACtB,KAAK,EAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC;IAC3B,MAAM,EAAE,EAAE,IAAI,EAAE,QAAiB,EAAE;CACpC,CAAC,CAAC,CACJ,CACF,EACD,KAAK,CAAC,UAAU,CACjB,CAAC;AAEJ,MAAM,MAAM,GAAG,CAAC,WAAmB,EAAE,MAAwB,EAAE,EAAE,CAC/D,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CACtB,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAChD,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EACnD,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,CACpC,iBAAiB,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC,IAAI,CAC9C,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,oCAAoC,CAAC,CAAC,CACpE,CACF,EACD,KAAK,CAAC,UAAU,CACjB,CAAC;AAEJ,MAAM,KAAK,GAAG,CAAC,WAAmB,EAAE,MAAwB,EAAE,EAAE,CAC9D,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC;KAChB,IAAI,CACH,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAChD,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,CACpC,UAAU,EAAE,CAAC,IAAI,CACf,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CACd,KAAK,CAAC,OAAO,CAAC,0CAA0C,CAAC,CAC1D,EACD,MAAM,CAAC,MAAM,CACd,CACF,EACD,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,CACpC,eAAe,CAA0B,WAAW,EAAE,WAAW,CAAC,CAAC,IAAI,CACrE,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CACvB,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CACvD,CACF,CACF,EACD,KAAK,CAAC,UAAU,CACjB;KACA,IAAI,CACH,MAAM,CAAC,QAAQ,CACb,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,SAAS,CAAC,EAAE,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAC5D,CACF,CAAC;AAEN,MAAM,oBAAoB,GAAG,CAAC,WAAmB,EAAE,GAAqB,EAAE,EAAE,CAC1E,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;QACX,OAAO,EAAE,MAAM,EAAE,KAAc,EAAE,CAAC;IACpC,CAAC;IACD,OAAO,KAAK,CAAC,CAAC,oBAAoB,CAAC,WAAW,CAAC,CAAC;AAClD,CAAC,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,QAAQ,CACb,CAAC,CAAC,EAAE,EAAE,CACJ,IAAI,SAAS,CAAC;IACZ,OAAO,EAAE,iCAAiC;IAC1C,KAAK,EAAE,CAAC;CACT,CAAC,CACL,CACF,CAAC;AAEJ,MAAM,oBAAoB,GAAG,CAAC,WAAmB,EAAE,EAAE,CACnD,KAAK,CAAC,MAAM,CAAC;IACX,OAAO,EAAE,8BAA8B;IACvC,OAAO;CACR,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CACxB,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CACtB,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAc,EAAE,CAAC,CAAC,EACnE,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,CACxB,UAAU,EAAE,CAAC,IAAI,CACf,MAAM,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,QAAiB,EAAE,CAAC,EACxC,MAAM,CAAC,QAAQ,CACb,CAAC,CAAC,EAAE,EAAE,CACJ,IAAI,SAAS,CAAC;IACZ,OAAO,EAAE,yBAAyB,CAAC,CAAC,OAAO,EAAE;IAC7C,KAAK,EAAE,CAAC;CACT,CAAC,CACL,CACF,CACF,EACD,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC,EACpD,KAAK,CAAC,UAAU,CACjB,CACF,CACF,CAAC;AAEJ,MAAM,WAAW,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,WAAmB;IAClE,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC;QAClC,OAAO,EACL,2EAA2E;QAC7E,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;KAC3D,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAEnB,KAAK,CAAC,CAAC,gBAAgB,CAA0B,WAAW,EAAE,WAAW,EAAE;QACzE,IAAI,EAAE,KAAK;QACX,KAAK;KACN,CAAC,CAAC;IACH,KAAK,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,4BAA4B,CAAC,CAAC;IACnD,OAAO,EAAE,MAAM,EAAE,QAAiB,EAAE,CAAC;AACvC,CAAC,CAAC,CAAC;AAEH,MAAM,UAAW,SAAQ,KAAK;IACnB,IAAI,GAAG,YAAY,CAAC;CAC9B;AAED,MAAM,UAAU,GAAG,GAAG,EAAE,CACtB,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE;QAC/D,KAAK,EAAE,KAAK;KACb,CAAC,CAAC;IACH,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAClD;QACE,MAAM,CAAC,QAAQ;QACf,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACjD,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;KAClD,EACD,EAAE,WAAW,EAAE,CAAC,EAAE,CACnB,CAAC;IACF,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;QACnB,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,UAAU,CACZ,6BAA6B,QAAQ,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,MAAM,CAAC,IAAI,EAAE,EAAE,CAC3E,CACF,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;IAC5B,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,UAAU,CAAC,qCAAqC,CAAC,CACtD,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,MAAM,EACb,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,CACpB,CAAC,YAAY,UAAU;IACrB,CAAC,CAAC,IAAI,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;IACjD,CAAC,CAAC,IAAI,SAAS,CAAC;QACZ,OAAO,EACL,iGAAiG;QACnG,KAAK,EAAE,CAAC;KACT,CAAC,CACP,CACF,CAAC;AAEJ,MAAM,WAAW,GAAG,CAAC,WAAmB,EAAE,MAAwB,EAAE,EAAE,CACpE,kBAAkB,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,IAAI,CAC1C,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;IACnB,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,OAAO;QACpC,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,MAAM,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE;QAClD,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC;IACtB,OAAO,MAAM,CAAC,GAAG,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,YAAY,eAAe,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC;QAC1D,OAAO,CAAC,GAAG,CAAC,aAAa,SAAS,EAAE,CAAC;KACtC,CAAC,CAAC;AACL,CAAC,CAAC,EACF,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CACjB,OAAO,CAAC,KAAK,CAAC,qCAAqC,CAAC,EAAE,CAAC,CACxD,CACF,CAAC"}

package/lib/GitHub/Comment.d.ts

@@ -0,0 +1,134 @@
+import * as Provider from "../Provider.ts";
+import { Resource } from "../Resource.ts";
+import * as GitHub from "./Providers.ts";
+export interface CommentProps {
+    /**
+     * Repository owner (user or organization).
+     */
+    owner: string;
+    /**
+     * Repository name.
+     */
+    repository: string;
+    /**
+     * Issue or Pull Request number to comment on.
+     */
+    issueNumber: number;
+    /**
+     * Comment body (supports GitHub Markdown).
+     *
+     * The body is automatically dedented, so you can use indented template
+     * literals without worrying about leading whitespace. Accepts
+     * `Output<string>` at the call site via `Output.interpolate` to embed
+     * resource attributes that are not yet resolved.
+     */
+    body: string;
+    /**
+     * Whether to allow deletion of the comment when the resource is destroyed.
+     * By default, comments are never deleted to preserve discussion history.
+     * @default false
+     */
+    allowDelete?: boolean;
+    /**
+     * GitHub API token. If not provided, falls back to
+     * `GITHUB_ACCESS_TOKEN` or `GITHUB_TOKEN` environment variables.
+     */
+    token?: string;
+}
+export interface Comment extends Resource<"GitHub.Comment", CommentProps, {
+    /**
+     * The numeric ID of the comment in GitHub.
+     */
+    commentId: number;
+    /**
+     * URL to view the comment in a browser.
+     */
+    htmlUrl: string;
+    /**
+     * ISO-8601 timestamp of the last update.
+     */
+    updatedAt: string;
+}, never, GitHub.Providers> {
+}
+/**
+ * A GitHub issue or pull request comment.
+ *
+ * `Comment` manages the lifecycle of a single comment on an issue or pull
+ * request. Comments are created on the first deploy and updated in place on
+ * subsequent deploys when the `body` changes. By default, comments are never
+ * deleted to preserve discussion history — set `allowDelete: true` to opt in.
+ *
+ * Authentication is resolved in order: explicit `token` prop,
+ * `GITHUB_ACCESS_TOKEN` env var, `GITHUB_TOKEN` env var. The token needs
+ * `repo` scope for private repositories or `public_repo` for public ones.
+ *
+ * @section Creating Comments
+ * @example Comment on an Issue
+ * ```typescript
+ * const comment = yield* GitHub.Comment("issue-comment", {
+ *   owner: "my-org",
+ *   repository: "my-repo",
+ *   issueNumber: 123,
+ *   body: "This is a comment created by Alchemy!",
+ * });
+ * ```
+ *
+ * @example Comment on a Pull Request
+ * ```typescript
+ * const prComment = yield* GitHub.Comment("pr-comment", {
+ *   owner: "my-org",
+ *   repository: "my-repo",
+ *   issueNumber: 456,
+ *   body: "## Deployment Status\n\nSuccessfully deployed to staging!",
+ * });
+ * ```
+ *
+ * @section Updating Comments
+ * Deploy with the same logical ID and a different `body` to update the
+ * existing comment in place rather than creating a new one.
+ *
+ * @example Update Comment Content
+ * ```typescript
+ * const comment = yield* GitHub.Comment("status-comment", {
+ *   owner: "my-org",
+ *   repository: "my-repo",
+ *   issueNumber: 789,
+ *   body: "Deployment completed successfully!",
+ * });
+ * ```
+ *
+ * @section Deleting Comments
+ * @example Allow Comment Deletion
+ * ```typescript
+ * const comment = yield* GitHub.Comment("temp-comment", {
+ *   owner: "my-org",
+ *   repository: "my-repo",
+ *   issueNumber: 123,
+ *   body: "This comment can be deleted",
+ *   allowDelete: true,
+ * });
+ * ```
+ *
+ * @section CI Preview Comments
+ * A common pattern is posting a preview-deployment URL on every pull request.
+ * The comment auto-updates on each push because the logical ID stays the same.
+ *
+ * @example PR Preview Comment
+ * ```typescript
+ * if (process.env.PULL_REQUEST) {
+ *   yield* GitHub.Comment("preview-comment", {
+ *     owner: "my-org",
+ *     repository: "my-repo",
+ *     issueNumber: Number(process.env.PULL_REQUEST),
+ *     body: Output.interpolate`
+ *       ## Preview Deployed
+ *
+ *       **URL:** ${website.url}
+ *     `,
+ *   });
+ * }
+ * ```
+ */
+export declare const Comment: import("../Resource.ts").ResourceClass<Comment>;
+export declare const CommentProvider: () => import("effect/Layer").Layer<Provider.Provider<Comment>, never, never>;
+//# sourceMappingURL=Comment.d.ts.map

package/lib/GitHub/Comment.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Comment.d.ts","sourceRoot":"","sources":["../../src/GitHub/Comment.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAE1C,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AAEzC,MAAM,WAAW,YAAY;IAC3B;;OAEG;IACH,KAAK,EAAE,MAAM,CAAC;IAEd;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;IAEnB;;OAEG;IACH,WAAW,EAAE,MAAM,CAAC;IAEpB;;;;;;;OAOG;IACH,IAAI,EAAE,MAAM,CAAC;IAEb;;;;OAIG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IAEtB;;;OAGG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,OAAQ,SAAQ,QAAQ,CACvC,gBAAgB,EAChB,YAAY,EACZ;IACE;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC;IAElB;;OAEG;IACH,OAAO,EAAE,MAAM,CAAC;IAEhB;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC;CACnB,EACD,KAAK,EACL,MAAM,CAAC,SAAS,CACjB;CAAG;AAEJ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8EG;AACH,eAAO,MAAM,OAAO,iDAAsC,CAAC;AAY3D,eAAO,MAAM,eAAe,8EAiExB,CAAC"}

package/lib/GitHub/Comment.js

@@ -0,0 +1,146 @@
+import { Octokit } from "@octokit/rest";
+import * as Effect from "effect/Effect";
+import * as Provider from "../Provider.js";
+import { Resource } from "../Resource.js";
+import { dedent } from "../Util/dedent.js";
+import * as GitHub from "./Providers.js";
+/**
+ * A GitHub issue or pull request comment.
+ *
+ * `Comment` manages the lifecycle of a single comment on an issue or pull
+ * request. Comments are created on the first deploy and updated in place on
+ * subsequent deploys when the `body` changes. By default, comments are never
+ * deleted to preserve discussion history — set `allowDelete: true` to opt in.
+ *
+ * Authentication is resolved in order: explicit `token` prop,
+ * `GITHUB_ACCESS_TOKEN` env var, `GITHUB_TOKEN` env var. The token needs
+ * `repo` scope for private repositories or `public_repo` for public ones.
+ *
+ * @section Creating Comments
+ * @example Comment on an Issue
+ * ```typescript
+ * const comment = yield* GitHub.Comment("issue-comment", {
+ *   owner: "my-org",
+ *   repository: "my-repo",
+ *   issueNumber: 123,
+ *   body: "This is a comment created by Alchemy!",
+ * });
+ * ```
+ *
+ * @example Comment on a Pull Request
+ * ```typescript
+ * const prComment = yield* GitHub.Comment("pr-comment", {
+ *   owner: "my-org",
+ *   repository: "my-repo",
+ *   issueNumber: 456,
+ *   body: "## Deployment Status\n\nSuccessfully deployed to staging!",
+ * });
+ * ```
+ *
+ * @section Updating Comments
+ * Deploy with the same logical ID and a different `body` to update the
+ * existing comment in place rather than creating a new one.
+ *
+ * @example Update Comment Content
+ * ```typescript
+ * const comment = yield* GitHub.Comment("status-comment", {
+ *   owner: "my-org",
+ *   repository: "my-repo",
+ *   issueNumber: 789,
+ *   body: "Deployment completed successfully!",
+ * });
+ * ```
+ *
+ * @section Deleting Comments
+ * @example Allow Comment Deletion
+ * ```typescript
+ * const comment = yield* GitHub.Comment("temp-comment", {
+ *   owner: "my-org",
+ *   repository: "my-repo",
+ *   issueNumber: 123,
+ *   body: "This comment can be deleted",
+ *   allowDelete: true,
+ * });
+ * ```
+ *
+ * @section CI Preview Comments
+ * A common pattern is posting a preview-deployment URL on every pull request.
+ * The comment auto-updates on each push because the logical ID stays the same.
+ *
+ * @example PR Preview Comment
+ * ```typescript
+ * if (process.env.PULL_REQUEST) {
+ *   yield* GitHub.Comment("preview-comment", {
+ *     owner: "my-org",
+ *     repository: "my-repo",
+ *     issueNumber: Number(process.env.PULL_REQUEST),
+ *     body: Output.interpolate`
+ *       ## Preview Deployed
+ *
+ *       **URL:** ${website.url}
+ *     `,
+ *   });
+ * }
+ * ```
+ */
+export const Comment = Resource("GitHub.Comment");
+function resolveToken(props) {
+    return (props.token ?? process.env.GITHUB_ACCESS_TOKEN ?? process.env.GITHUB_TOKEN);
+}
+function createClient(props) {
+    return new Octokit({ auth: resolveToken(props) });
+}
+export const CommentProvider = () => Provider.succeed(Comment, {
+    stables: ["commentId"],
+    create: Effect.fn(function* ({ news }) {
+        const octokit = createClient(news);
+        const body = dedent(news.body);
+        const { data } = yield* Effect.tryPromise(() => octokit.rest.issues.createComment({
+            owner: news.owner,
+            repo: news.repository,
+            issue_number: news.issueNumber,
+            body,
+        }));
+        return {
+            commentId: data.id,
+            htmlUrl: data.html_url,
+            updatedAt: data.updated_at,
+        };
+    }),
+    update: Effect.fn(function* ({ news, output }) {
+        const octokit = createClient(news);
+        const body = dedent(news.body);
+        const { data } = yield* Effect.tryPromise(() => octokit.rest.issues.updateComment({
+            owner: news.owner,
+            repo: news.repository,
+            comment_id: output.commentId,
+            body,
+        }));
+        return {
+            commentId: data.id,
+            htmlUrl: data.html_url,
+            updatedAt: data.updated_at,
+        };
+    }),
+    delete: Effect.fn(function* ({ olds, output }) {
+        if (!olds.allowDelete) {
+            return;
+        }
+        const octokit = createClient(olds);
+        yield* Effect.tryPromise(async () => {
+            try {
+                await octokit.rest.issues.deleteComment({
+                    owner: olds.owner,
+                    repo: olds.repository,
+                    comment_id: output.commentId,
+                });
+            }
+            catch (error) {
+                if (error.status !== 404) {
+                    throw error;
+                }
+            }
+        });
+    }),
+});
+//# sourceMappingURL=Comment.js.map

package/lib/GitHub/Comment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Comment.js","sourceRoot":"","sources":["../../src/GitHub/Comment.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC1C,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC3C,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AAiEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8EG;AACH,MAAM,CAAC,MAAM,OAAO,GAAG,QAAQ,CAAU,gBAAgB,CAAC,CAAC;AAE3D,SAAS,YAAY,CAAC,KAAmB;IACvC,OAAO,CACL,KAAK,CAAC,KAAK,IAAI,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,CAC3E,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,KAAmB;IACvC,OAAO,IAAI,OAAO,CAAC,EAAE,IAAI,EAAE,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;AACpD,CAAC;AAED,MAAM,CAAC,MAAM,eAAe,GAAG,GAAG,EAAE,CAClC,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE;IACxB,OAAO,EAAE,CAAC,WAAW,CAAC;IAEtB,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE;QACnC,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAE/B,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,EAAE,CAC7C,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC;YAChC,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,IAAI,EAAE,IAAI,CAAC,UAAU;YACrB,YAAY,EAAE,IAAI,CAAC,WAAW;YAC9B,IAAI;SACL,CAAC,CACH,CAAC;QAEF,OAAO;YACL,SAAS,EAAE,IAAI,CAAC,EAAE;YAClB,OAAO,EAAE,IAAI,CAAC,QAAQ;YACtB,SAAS,EAAE,IAAI,CAAC,UAAU;SAC3B,CAAC;IACJ,CAAC,CAAC;IAEF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;QAC3C,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAE/B,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,EAAE,CAC7C,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC;YAChC,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,IAAI,EAAE,IAAI,CAAC,UAAU;YACrB,UAAU,EAAE,MAAM,CAAC,SAAS;YAC5B,IAAI;SACL,CAAC,CACH,CAAC;QAEF,OAAO;YACL,SAAS,EAAE,IAAI,CAAC,EAAE;YAClB,OAAO,EAAE,IAAI,CAAC,QAAQ;YACtB,SAAS,EAAE,IAAI,CAAC,UAAU;SAC3B,CAAC;IACJ,CAAC,CAAC;IAEF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;QAC3C,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACtB,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QAEnC,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,IAAI,EAAE;YAClC,IAAI,CAAC;gBACH,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC;oBACtC,KAAK,EAAE,IAAI,CAAC,KAAK;oBACjB,IAAI,EAAE,IAAI,CAAC,UAAU;oBACrB,UAAU,EAAE,MAAM,CAAC,SAAS;iBAC7B,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAU,EAAE,CAAC;gBACpB,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;oBACzB,MAAM,KAAK,CAAC;gBACd,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;CACH,CAAC,CAAC"}

package/lib/GitHub/Credentials.d.ts

@@ -0,0 +1,29 @@
+import { Octokit } from "@octokit/rest";
+import * as Context from "effect/Context";
+import * as Layer from "effect/Layer";
+import * as Redacted from "effect/Redacted";
+export interface GitHubCredentialsService {
+    readonly token: Redacted.Redacted<string>;
+    readonly octokit: () => Octokit;
+}
+declare const GitHubCredentials_base: Context.ServiceClass<GitHubCredentials, "GitHub::Credentials", GitHubCredentialsService>;
+export declare class GitHubCredentials extends GitHubCredentials_base {
+}
+/**
+ * Build a `GitHubCredentials` layer from a literal token. Useful for
+ * tests or when callers already have a PAT in hand.
+ */
+export declare const fromToken: (token: string | Redacted.Redacted<string>) => Layer.Layer<GitHubCredentials, never, never>;
+/**
+ * Build a `GitHubCredentials` layer that reads the token from
+ * `GITHUB_ACCESS_TOKEN` or `GITHUB_TOKEN` at layer build time.
+ */
+export declare const fromEnv: () => Layer.Layer<GitHubCredentials, never, never>;
+/**
+ * Build a `GitHubCredentials` layer that resolves a token via the
+ * Alchemy AuthProvider for the configured profile (defaults to
+ * `default`, overridable with `ALCHEMY_PROFILE`).
+ */
+export declare const fromAuthProvider: () => Layer.Layer<GitHubCredentials, never, import("effect/FileSystem").FileSystem | import("../Auth/AuthProvider.ts").AuthProviders>;
+export {};
+//# sourceMappingURL=Credentials.d.ts.map

package/lib/GitHub/Credentials.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Credentials.d.ts","sourceRoot":"","sources":["../../src/GitHub/Credentials.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAExC,OAAO,KAAK,OAAO,MAAM,gBAAgB,CAAC;AAE1C,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAS5C,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC1C,QAAQ,CAAC,OAAO,EAAE,MAAM,OAAO,CAAC;CACjC;;AAED,qBAAa,iBAAkB,SAAQ,sBAGb;CAAG;AAO7B;;;GAGG;AACH,eAAO,MAAM,SAAS,GAAI,OAAO,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,iDAIhE,CAAC;AAEJ;;;GAGG;AACH,eAAO,MAAM,OAAO,oDAsBjB,CAAC;AAEJ;;;;GAIG;AACH,eAAO,MAAM,gBAAgB,uIA0B1B,CAAC"}

package/lib/GitHub/Credentials.js

@@ -0,0 +1,54 @@
+import { Octokit } from "@octokit/rest";
+import * as Config from "effect/Config";
+import * as Context from "effect/Context";
+import * as Effect from "effect/Effect";
+import * as Layer from "effect/Layer";
+import * as Redacted from "effect/Redacted";
+import { AuthError, getAuthProvider } from "../Auth/AuthProvider.js";
+import { ALCHEMY_PROFILE, loadOrConfigure } from "../Auth/Profile.js";
+import { GITHUB_AUTH_PROVIDER_NAME, } from "./AuthProvider.js";
+export class GitHubCredentials extends Context.Service()("GitHub::Credentials") {
+}
+const make = (token) => ({
+    token,
+    octokit: () => new Octokit({ auth: Redacted.value(token) }),
+});
+/**
+ * Build a `GitHubCredentials` layer from a literal token. Useful for
+ * tests or when callers already have a PAT in hand.
+ */
+export const fromToken = (token) => Layer.succeed(GitHubCredentials, make(typeof token === "string" ? Redacted.make(token) : token));
+/**
+ * Build a `GitHubCredentials` layer that reads the token from
+ * `GITHUB_ACCESS_TOKEN` or `GITHUB_TOKEN` at layer build time.
+ */
+export const fromEnv = () => Layer.effect(GitHubCredentials, Effect.gen(function* () {
+    const access = yield* Config.redacted("GITHUB_ACCESS_TOKEN").pipe(Config.option);
+    const token = yield* Config.redacted("GITHUB_TOKEN").pipe(Config.option);
+    const value = access._tag === "Some"
+        ? access.value
+        : token._tag === "Some"
+            ? token.value
+            : undefined;
+    if (value == null) {
+        return yield* new AuthError({
+            message: "GitHub credentials not found. Set GITHUB_ACCESS_TOKEN or GITHUB_TOKEN.",
+        });
+    }
+    return make(value);
+}).pipe(Effect.orDie));
+/**
+ * Build a `GitHubCredentials` layer that resolves a token via the
+ * Alchemy AuthProvider for the configured profile (defaults to
+ * `default`, overridable with `ALCHEMY_PROFILE`).
+ */
+export const fromAuthProvider = () => Layer.effect(GitHubCredentials, Effect.gen(function* () {
+    const auth = yield* getAuthProvider(GITHUB_AUTH_PROVIDER_NAME);
+    const profileName = yield* ALCHEMY_PROFILE;
+    const ci = yield* Config.boolean("CI").pipe(Config.withDefault(false));
+    const ctx = yield* Effect.context();
+    return yield* loadOrConfigure(auth, profileName, { ci }).pipe(Effect.flatMap((config) => auth.read(profileName, config)), Effect.map((creds) => make(creds.token)), Effect.mapError((e) => new AuthError({
+        message: `Failed to resolve GitHub credentials for profile '${profileName}': ${e.message ?? String(e)}`,
+    })), Effect.provide(ctx));
+}).pipe(Effect.orDie));
+//# sourceMappingURL=Credentials.js.map

package/lib/GitHub/Credentials.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Credentials.js","sourceRoot":"","sources":["../../src/GitHub/Credentials.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,OAAO,MAAM,gBAAgB,CAAC;AAC1C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AACrE,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACtE,OAAO,EACL,yBAAyB,GAG1B,MAAM,mBAAmB,CAAC;AAO3B,MAAM,OAAO,iBAAkB,SAAQ,OAAO,CAAC,OAAO,EAGnD,CAAC,qBAAqB,CAAC;CAAG;AAE7B,MAAM,IAAI,GAAG,CAAC,KAAgC,EAA4B,EAAE,CAAC,CAAC;IAC5E,KAAK;IACL,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,OAAO,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;CAC5D,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,KAAyC,EAAE,EAAE,CACrE,KAAK,CAAC,OAAO,CACX,iBAAiB,EACjB,IAAI,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAC/D,CAAC;AAEJ;;;GAGG;AACH,MAAM,CAAC,MAAM,OAAO,GAAG,GAAG,EAAE,CAC1B,KAAK,CAAC,MAAM,CACV,iBAAiB,EACjB,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAAC,IAAI,CAC/D,MAAM,CAAC,MAAM,CACd,CAAC;IACF,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACzE,MAAM,KAAK,GACT,MAAM,CAAC,IAAI,KAAK,MAAM;QACpB,CAAC,CAAC,MAAM,CAAC,KAAK;QACd,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM;YACrB,CAAC,CAAC,KAAK,CAAC,KAAK;YACb,CAAC,CAAC,SAAS,CAAC;IAClB,IAAI,KAAK,IAAI,IAAI,EAAE,CAAC;QAClB,OAAO,KAAK,CAAC,CAAC,IAAI,SAAS,CAAC;YAC1B,OAAO,EACL,wEAAwE;SAC3E,CAAC,CAAC;IACL,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC;AACrB,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CACtB,CAAC;AAEJ;;;;GAIG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,GAAG,EAAE,CACnC,KAAK,CAAC,MAAM,CACV,iBAAiB,EACjB,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,eAAe,CAGjC,yBAAyB,CAAC,CAAC;IAC7B,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,eAAe,CAAC;IAC3C,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC;IACvE,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,EAAS,CAAC;IAE3C,OAAO,KAAK,CAAC,CAAC,eAAe,CAAC,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,IAAI,CAC3D,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CACxB,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,MAA0B,CAAC,CACnD,EACD,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EACxC,MAAM,CAAC,QAAQ,CACb,CAAC,CAAC,EAAE,EAAE,CACJ,IAAI,SAAS,CAAC;QACZ,OAAO,EAAE,qDAAqD,WAAW,MAAO,CAA0B,CAAC,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE;KAClI,CAAC,CACL,EACD,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CACpB,CAAC;AACJ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CACtB,CAAC"}

package/lib/GitHub/Providers.d.ts

@@ -0,0 +1,14 @@
+import * as Layer from "effect/Layer";
+import * as Provider from "../Provider.ts";
+import * as Credentials from "./Credentials.ts";
+export { GitHubCredentials } from "./Credentials.ts";
+declare const Providers_base: Provider.ProviderCollection<Providers, "GitHub">;
+export declare class Providers extends Providers_base {
+}
+export type ProviderRequirements = Layer.Services<ReturnType<typeof providers>>;
+/**
+ * GitHub providers (Secret, Variable) plus the GitHub AuthProvider that
+ * `alchemy login` discovers.
+ */
+export declare const providers: () => Layer.Layer<Credentials.GitHubCredentials | Providers, never, import("effect/FileSystem").FileSystem | import("../Auth/AuthProvider.ts").AuthProviders>;
+//# sourceMappingURL=Providers.d.ts.map

package/lib/GitHub/Providers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Providers.d.ts","sourceRoot":"","sources":["../../src/GitHub/Providers.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAG3C,OAAO,KAAK,WAAW,MAAM,kBAAkB,CAAC;AAIhD,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;;AAErD,qBAAa,SAAU,SAAQ,cAE9B;CAAG;AAEJ,MAAM,MAAM,oBAAoB,GAAG,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,OAAO,SAAS,CAAC,CAAC,CAAC;AAEhF;;;GAGG;AACH,eAAO,MAAM,SAAS,+JAWnB,CAAC"}

package/lib/GitHub/Providers.js

@@ -0,0 +1,16 @@
+import * as Layer from "effect/Layer";
+import * as Provider from "../Provider.js";
+import { GitHubAuth } from "./AuthProvider.js";
+import { Comment, CommentProvider } from "./Comment.js";
+import * as Credentials from "./Credentials.js";
+import { Secret, SecretProvider } from "./Secret.js";
+import { Variable, VariableProvider } from "./Variable.js";
+export { GitHubCredentials } from "./Credentials.js";
+export class Providers extends Provider.ProviderCollection()("GitHub") {
+}
+/**
+ * GitHub providers (Secret, Variable) plus the GitHub AuthProvider that
+ * `alchemy login` discovers.
+ */
+export const providers = () => Layer.effect(Providers, Provider.collection([Comment, Secret, Variable])).pipe(Layer.provide(Layer.mergeAll(CommentProvider(), SecretProvider(), VariableProvider())), Layer.provideMerge(Credentials.fromAuthProvider()), Layer.provideMerge(GitHubAuth), Layer.orDie);
+//# sourceMappingURL=Providers.js.map

package/lib/GitHub/Providers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Providers.js","sourceRoot":"","sources":["../../src/GitHub/Providers.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AACxD,OAAO,KAAK,WAAW,MAAM,kBAAkB,CAAC;AAChD,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAE3D,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAErD,MAAM,OAAO,SAAU,SAAQ,QAAQ,CAAC,kBAAkB,EAAa,CACrE,QAAQ,CACT;CAAG;AAIJ;;;GAGG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,GAAG,EAAE,CAC5B,KAAK,CAAC,MAAM,CACV,SAAS,EACT,QAAQ,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,CACjD,CAAC,IAAI,CACJ,KAAK,CAAC,OAAO,CACX,KAAK,CAAC,QAAQ,CAAC,eAAe,EAAE,EAAE,cAAc,EAAE,EAAE,gBAAgB,EAAE,CAAC,CACxE,EACD,KAAK,CAAC,YAAY,CAAC,WAAW,CAAC,gBAAgB,EAAE,CAAC,EAClD,KAAK,CAAC,YAAY,CAAC,UAAU,CAAC,EAC9B,KAAK,CAAC,KAAK,CACZ,CAAC"}