Add "gh secret {list,create}" commands

Author: alexarchambault

build.sc

@@ -392,6 +392,9 @@ class Core(val crossScalaVersion: String) extends BuildLikeModule {
          |  def defaultGraalVMVersion = "${deps.graalVmVersion}"
          |
          |  def scalaCliSigningVersion = "${Deps.signingCli.dep.version}"
+         |
+         |  def libsodiumVersion = "${deps.libsodiumVersion}"
+         |  def libsodiumjniVersion = "${Deps.libsodiumjni.dep.version}"
          |}
          |""".stripMargin
     if (!os.isFile(dest) || os.read(dest) != code)
@@ -620,10 +623,12 @@ trait Cli extends SbtModule with ProtoBuildModule with CliLaunchers
     Deps.jimfs, // scalaJsEnvNodeJs pulls jimfs:1.1, whose class path seems borked (bin compat issue with the guava version it depends on)
     Deps.jniUtils,
     Deps.jsoniterCore,
+    Deps.libsodiumjni,
     Deps.metaconfigTypesafe,
     Deps.scalaPackager,
     Deps.signingCli,
-    Deps.slf4jNop // to silence jgit
+    Deps.slf4jNop, // to silence jgit
+    Deps.sttp
   )
   def compileIvyDeps = super.compileIvyDeps() ++ Agg(
     Deps.jsoniterMacros,
@@ -700,9 +705,11 @@ trait CliIntegrationBase extends SbtModule with ScalaCliPublishModule with HasTe
   trait Tests extends super.Tests with ScalaCliScalafixModule {
     def ivyDeps = super.ivyDeps() ++ Agg(
       Deps.bsp4j,
+      Deps.coursier,
       Deps.dockerClient,
       Deps.jsoniterCore,
       Deps.jsoniterMacros,
+      Deps.libsodiumjni,
       Deps.pprint,
       Deps.scalaAsync,
       Deps.slf4jNop
@@ -764,6 +771,7 @@ trait CliIntegrationBase extends SbtModule with ScalaCliPublishModule with HasTe
            |  def mostlyStaticDockerfile = "${mostlyStaticDockerfile.toString.replace("\\", "\\\\")}"
            |  def cs = "${settings.cs().replace("\\", "\\\\")}"
            |  def workspaceDirName = "$workspaceDirName"
+           |  def libsodiumVersion = "${deps.libsodiumVersion}"
            |}
            |""".stripMargin
       if (!os.isFile(dest) || os.read(dest) != code)

modules/build/src/main/scala/scala/build/PersistentDiagnosticLogger.scala

@@ -35,4 +35,6 @@ class PersistentDiagnosticLogger(parent: Logger) extends Logger {
   def scalaNativeCliInternalLoggerOptions: List[String] = parent.scalaNativeCliInternalLoggerOptions
 
   def compilerOutputStream: PrintStream = parent.compilerOutputStream
+
+  def verbosity: Int = parent.verbosity
 }

modules/build/src/test/scala/scala/build/tests/BuildProjectTests.scala

@@ -55,6 +55,8 @@ class BuildProjectTests extends munit.FunSuite {
 
     override def compilerOutputStream: PrintStream = ???
 
+    override def verbosity = ???
+
   }
 
   val bloopJavaPath = Position.Bloop("/home/empty/jvm/8/")

modules/build/src/test/scala/scala/build/tests/TestLogger.scala

@@ -55,4 +55,9 @@ case class TestLogger(info: Boolean = true, debug: Boolean = false) extends Logg
   def bloopCliInheritStderr = false
 
   def compilerOutputStream = System.err
+
+  def verbosity =
+    if (debug) 2
+    else if (info) 0
+    else -1
 }

modules/cli-options/src/main/scala/scala/cli/commands/github/SecretCreateOptions.scala

@@ -0,0 +1,25 @@
+package scala.cli.commands.github
+
+import caseapp._
+
+import scala.cli.commands.CoursierOptions
+
+// format: off
+final case class SecretCreateOptions(
+  @Recurse
+    shared: SharedSecretOptions = SharedSecretOptions(),
+  @Recurse
+    coursier: CoursierOptions = CoursierOptions(),
+  @ExtraName("pubKey")
+    publicKey: Option[String] = None,
+  @ExtraName("n")
+    dummy: Boolean = false,
+  @Hidden
+    printRequest: Boolean = false
+)
+// format: on
+
+object SecretCreateOptions {
+  implicit lazy val parser: Parser[SecretCreateOptions] = Parser.derive
+  implicit lazy val help: Help[SecretCreateOptions]     = Help.derive
+}

modules/cli-options/src/main/scala/scala/cli/commands/github/SecretListOptions.scala

@@ -0,0 +1,15 @@
+package scala.cli.commands.github
+
+import caseapp._
+
+// format: off
+final case class ListSecretsOptions(
+  @Recurse
+    shared: SharedSecretOptions
+)
+// format: on
+
+object ListSecretsOptions {
+  implicit lazy val parser: Parser[ListSecretsOptions] = Parser.derive
+  implicit lazy val help: Help[ListSecretsOptions]     = Help.derive
+}

modules/cli-options/src/main/scala/scala/cli/commands/github/SharedSecretOptions.scala

@@ -0,0 +1,32 @@
+package scala.cli.commands.github
+
+import caseapp._
+
+import scala.cli.internal.PasswordOptionParsers._
+import scala.cli.signing.shared.PasswordOption
+import scala.cli.commands.LoggingOptions
+import scala.cli.signing.shared.Secret
+
+// format: off
+final case class SharedSecretOptions(
+  @Recurse
+    logging: LoggingOptions = LoggingOptions(),
+  token: PasswordOption = PasswordOption.Value(Secret("")),
+  @ExtraName("repo")
+    repository: String = ""
+) {
+  // format: on
+
+  lazy val (repoOrg, repoName) =
+    repository.split('/') match {
+      case Array(org, name) => (org, name)
+      case _ =>
+        sys.error(s"Malformed repository: '$repository' (expected 'org/name')")
+    }
+}
+
+object SharedSecretOptions {
+  lazy val parser: Parser[SharedSecretOptions]                           = Parser.derive
+  implicit lazy val parserAux: Parser.Aux[SharedSecretOptions, parser.D] = parser
+  implicit lazy val help: Help[SharedSecretOptions]                      = Help.derive
+}

modules/cli/src/main/java/scala/cli/internal/LibsodiumjniFeature.java

@@ -0,0 +1,24 @@
+package scala.cli.internal;
+
+import com.oracle.svm.core.annotate.AutomaticFeature;
+import com.oracle.svm.core.jdk.NativeLibrarySupport;
+import com.oracle.svm.core.jdk.PlatformNativeLibrarySupport;
+import com.oracle.svm.hosted.FeatureImpl;
+import com.oracle.svm.hosted.c.NativeLibraries;
+import org.graalvm.nativeimage.hosted.Feature;
+import org.graalvm.nativeimage.Platform;
+import org.graalvm.nativeimage.Platforms;
+
+@AutomaticFeature
+@Platforms({Platform.WINDOWS.class})
+public class LibsodiumjniFeature implements Feature {
+
+    @Override
+    public void beforeAnalysis(BeforeAnalysisAccess access) {
+        NativeLibrarySupport.singleton().preregisterUninitializedBuiltinLibrary("sodiumjni");
+        PlatformNativeLibrarySupport.singleton().addBuiltinPkgNativePrefix("libsodiumjni_");
+        NativeLibraries nativeLibraries = ((FeatureImpl.BeforeAnalysisAccessImpl) access).getNativeLibraries();
+        nativeLibraries.addStaticJniLibrary("sodiumjni");
+        nativeLibraries.addDynamicNonJniLibrary("sodium");
+    }
+}

modules/cli/src/main/scala/scala/cli/ScalaCliCommands.scala

@@ -6,6 +6,7 @@ import caseapp.core.help.{Help, RuntimeCommandsHelp}
 import java.nio.file.InvalidPathException
 
 import scala.cli.commands._
+import scala.cli.commands.github.{SecretCreate, SecretList}
 import scala.cli.commands.pgp.PgpCommands
 
 class ScalaCliCommands(
@@ -37,6 +38,8 @@ class ScalaCliCommands(
     Package,
     Publish,
     Run,
+    SecretCreate,
+    SecretList,
     SetupIde,
     Shebang,
     Test,

modules/cli/src/main/scala/scala/cli/commands/github/GitHubApi.scala

@@ -0,0 +1,43 @@
+package scala.cli.commands.github
+
+import com.github.plokhotnyuk.jsoniter_scala.core._
+import com.github.plokhotnyuk.jsoniter_scala.macros._
+
+import java.util.Base64
+
+object GitHubApi {
+
+  final case class Secret(
+    name: String,
+    created_at: String,
+    updated_at: String
+  )
+
+  final case class SecretList(
+    total_count: Int,
+    secrets: List[Secret]
+  )
+
+  implicit val secretListCodec: JsonValueCodec[SecretList] =
+    JsonCodecMaker.make
+
+  final case class PublicKey(
+    key_id: String,
+    key: String
+  ) {
+    def decodedKey: Array[Byte] =
+      Base64.getDecoder().decode(key)
+  }
+
+  implicit val publicKeyCodec: JsonValueCodec[PublicKey] =
+    JsonCodecMaker.make
+
+  final case class EncryptedSecret(
+    encrypted_value: String,
+    key_id: String
+  )
+
+  implicit val encryptedSecretCodec: JsonValueCodec[EncryptedSecret] =
+    JsonCodecMaker.make
+
+}