Function promptForSystemTokenUnified

pkg/cli/engine_secrets.go:343–385

promptForSystemTokenUnified prompts the user for a system-level GitHub token (PAT) This uses PAT-specific wording instead of "API key" since system secrets are GitHub tokens

(req SecretRequirement, config EngineSecretConfig)

// promptForSystemTokenUnified prompts the user for a system-level GitHub token (PAT)
// This uses PAT-specific wording instead of "API key" since system secrets are GitHub tokens
func promptForSystemTokenUnified(req SecretRequirement, config EngineSecretConfig) error {
	engineSecretsLog.Printf("Prompting for system token: %s", req.Name)

	fmt.Fprintln(os.Stderr, "")
	fmt.Fprintf(os.Stderr, "%s requires a GitHub Personal Access Token (PAT).\n", req.Name)
	fmt.Fprintln(os.Stderr, "")
	fmt.Fprintln(os.Stderr, console.FormatInfoMessage("When needed: "+req.WhenNeeded))
	fmt.Fprintln(os.Stderr, console.FormatInfoMessage("Recommended scopes: "+req.Description))
	fmt.Fprintln(os.Stderr, "")
	fmt.Fprintln(os.Stderr, "Create a token at:")
	fmt.Fprintln(os.Stderr, console.FormatCommandMessage("  https://github.com/settings/personal-access-tokens/new"))
	fmt.Fprintln(os.Stderr, "")

	var token string
	form := huh.NewForm(
		huh.NewGroup(
			huh.NewInput().
				Title(fmt.Sprintf("Paste your %s token:", req.Name)).
				Description("The token will be stored securely as a repository secret").
				EchoMode(huh.EchoModePassword).
				Value(&token).
				Validate(func(s string) error {
					if len(s) < 10 {
						return errors.New("token appears to be too short")
					}
					return nil
				}),
		),
	).WithTheme(styles.HuhTheme).WithAccessible(console.IsAccessibleMode())

	if err := form.RunWithContext(config.ctx()); err != nil {
		return fmt.Errorf("failed to get %s token: %w", req.Name, err)
	}

	fmt.Fprintln(os.Stderr, console.FormatSuccessMessage(req.Name+" token received"))

	// Upload to repository if we have a repo slug
	if config.RepoSlug != "" {
		return uploadSecretToRepo(req.Name, token, config.RepoSlug, config.Verbose)
	}

	return nil
}

// promptForGenericAPIKeyUnified prompts the user for a generic API key
func promptForGenericAPIKeyUnified(req SecretRequirement, config EngineSecretConfig) error {