@homeflare/alchemy 0.24.0 → 0.25.1

package/dist/linux/unit-form.d.ts

@@ -62,6 +62,47 @@ export declare const UNIT_WRITE: {
 export declare const digestOf: (text: string) => string;
 /** The digests of everything outside the unit file that should restart it, as one value. */
 export declare const configDigest: (restartOn: readonly string[] | undefined) => string;
+/**
+ * Whether `activeState`/`subState` count as "the unit is running" against a declared `started` —
+ * the ONE place this decision is made, so `diffUnit` (unit-lifecycle.ts) and `settle`
+ * (unit-settle.ts) can never disagree about it.
+ *
+ * ⛔ WHY THIS EXISTS: a `Type=oneshot` service driven by a `.timer` (no `[Install]`, declared
+ *   `started: false, enabled: false` — its timer starts it, not this resource) reports
+ *   `ActiveState=activating` for the run's whole duration, not an instant. Written for the PVE
+ *   node-check unit that first hit this: ~1.2s, every 60s. A plan taken mid-run must not read that
+ *   run as drift, and a deploy must not `systemctl stop` a check that is already in flight.
+ * ★ systemd.service(5) §`Type=`, `oneshot` (man7.org mirror, read 2026-09-23): with no
+ *   `RemainAfterExit=`, the service manager holds the unit `activating` for as long as
+ *   `ExecStart=` runs, then moves it straight to `dead`/`inactive` (or `failed`) — it never passes
+ *   through `active`. So for `started: false`, `activating` is exactly a run in progress, and
+ *   `active` is the one state a oneshot never reaches on its own: that is the drift, and the only
+ *   thing settle stops.
+ * ⛔ CRASH-LOOP GUARD, added on adversarial review: `ActiveState=activating` is not only "starting
+ *   for the first time" — a service with `Restart=` waiting out its `RestartSec=` backoff between
+ *   crash attempts is ALSO `activating`, with `SubState=auto-restart` (or `auto-restart-queued`).
+ *   A unit declared `started: false` that is crash-looping sits there for nearly all of its
+ *   wall-clock time. Without this guard the oneshot exemption above would read that loop as
+ *   converged forever, and a deploy would never again issue the `stop` that ends it — silently
+ *   defeating `started: false` on exactly the unit that most needs it enforced. So only a genuine
+ *   start (`SubState` anything else — `start`, `start-pre`, `start-post`, …) gets the exemption;
+ *   an auto-restart substate counts as running regardless of `started`, same as `active` does.
+ * ★ SOURCE, not measured against a live host: systemd's own `service.c`
+ *   `state_translation_table` (github.com/systemd/systemd, read 2026-09-23) maps both
+ *   `SERVICE_AUTO_RESTART` and `SERVICE_AUTO_RESTART_QUEUED` to `UNIT_ACTIVATING`, and
+ *   `unit-def.c`'s `service_state_table` names their `SubState` strings `"auto-restart"` and
+ *   `"auto-restart-queued"`. ⚠️ REASONED NOT MEASURED: no unit was actually crash-looped and read
+ *   back with `systemctl show` for this change — the systemd source is the citation, unlike
+ *   systemctl.ts's own header, which is a live-host trace.
+ * ⚠️ THE TRADE-OFF THIS ACCEPTS: a `Type=notify` (or other long-running type) unit stuck in a
+ *   genuine `activating`/`start` with `started: false` — never reaching `active` and never
+ *   crash-looping either — reads as converged, not drift, until it reaches `active`. A unit hung
+ *   like that is exactly the case a human should look at, not one this predicate auto-corrects by
+ *   stopping it out from under whatever else depends on it.
+ * ★ `started: true` (the default, when omitted) is unchanged: `active` or `activating` (any
+ *   `subState`) both count as running, so a start already in flight is never started twice.
+ */
+export declare const isUnitRunning: (activeState: string, subState: string | undefined, started: boolean) => boolean;
 /** Sections → an INI unit file. ★ Keys and values pass through untouched; see the file header. */
 export declare const renderUnit: (sections: readonly UnitSection[]) => string;
 export declare const unitText: (props: SystemdUnitProps) => string;

package/dist/linux/unit-form.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"unit-form.d.ts","sourceRoot":"","sources":["../../src/linux/unit-form.ts"],"names":[],"mappings":"AAiBA,MAAM,MAAM,WAAW,GAAG;IACxB,yFAAyF;IACzF,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB;;;OAGG;IACH,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;CACpE,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,qFAAqF;IACrF,IAAI,EAAE,MAAM,CAAC;IACb,yEAAyE;IACzE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,iGAAiG;IACjG,QAAQ,CAAC,EAAE,SAAS,WAAW,EAAE,CAAC;IAClC,sEAAsE;IACtE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,oDAAoD;IACpD,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,gDAAgD;IAChD,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB;;;;;OAKG;IACH,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC/B,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,oDAAoD;IACpD,UAAU,EAAE,MAAM,CAAC;IACnB,4DAA4D;IAC5D,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,OAAO,CAAC;CACjB,CAAC;AAEF,iGAAiG;AACjG,eAAO,MAAM,sBAAsB,wBAAwB,CAAC;AAE5D;;;;;;;;GAQG;AACH,eAAO,MAAM,uBAAuB,YAClC,qBAAqB,EACrB,qBAAqB,EACrB,+BAA+B,EAC/B,yBAAyB,EACzB,qBAAqB,CACb,CAAC;AAEX,mGAAmG;AACnG,eAAO,MAAM,UAAU;aAAK,GAAG,EAAE,CAAC;aAAE,IAAI,EAAE,GAAK;aAAE,GAAG,EAAE,CAAC;CAAW,CAAC;AAEnE,eAAO,MAAM,QAAQ,SAAU,MAAM,KAAG,MAAmD,CAAC;AAE5F,4FAA4F;AAC5F,eAAO,MAAM,YAAY,cAAe,SAAS,MAAM,EAAE,GAAG,SAAS,KAAG,MAChC,CAAC;AAEzC,kGAAkG;AAClG,eAAO,MAAM,UAAU,aAAc,SAAS,WAAW,EAAE,KAAG,MAKzC,CAAC;AAEtB,eAAO,MAAM,QAAQ,UAAW,gBAAgB,KAAG,MACA,CAAC;AAEpD,eAAO,MAAM,WAAW,UAAW,gBAAgB,KAAG,MACQ,CAAC;AAoB/D;;;;;;;GAOG;AACH,eAAO,MAAM,YAAY,UAAW,gBAAgB,WAAW,MAAM,KAAG,MAAM,EAmC7E,CAAC"}
+{"version":3,"file":"unit-form.d.ts","sourceRoot":"","sources":["../../src/linux/unit-form.ts"],"names":[],"mappings":"AAiBA,MAAM,MAAM,WAAW,GAAG;IACxB,yFAAyF;IACzF,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB;;;OAGG;IACH,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;CACpE,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,qFAAqF;IACrF,IAAI,EAAE,MAAM,CAAC;IACb,yEAAyE;IACzE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,iGAAiG;IACjG,QAAQ,CAAC,EAAE,SAAS,WAAW,EAAE,CAAC;IAClC,sEAAsE;IACtE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,oDAAoD;IACpD,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,gDAAgD;IAChD,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB;;;;;OAKG;IACH,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC/B,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,oDAAoD;IACpD,UAAU,EAAE,MAAM,CAAC;IACnB,4DAA4D;IAC5D,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,OAAO,CAAC;CACjB,CAAC;AAEF,iGAAiG;AACjG,eAAO,MAAM,sBAAsB,wBAAwB,CAAC;AAE5D;;;;;;;;GAQG;AACH,eAAO,MAAM,uBAAuB,YAClC,qBAAqB,EACrB,qBAAqB,EACrB,+BAA+B,EAC/B,yBAAyB,EACzB,qBAAqB,CACb,CAAC;AAEX,mGAAmG;AACnG,eAAO,MAAM,UAAU;aAAK,GAAG,EAAE,CAAC;aAAE,IAAI,EAAE,GAAK;aAAE,GAAG,EAAE,CAAC;CAAW,CAAC;AAEnE,eAAO,MAAM,QAAQ,SAAU,MAAM,KAAG,MAAmD,CAAC;AAE5F,4FAA4F;AAC5F,eAAO,MAAM,YAAY,cAAe,SAAS,MAAM,EAAE,GAAG,SAAS,KAAG,MAChC,CAAC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AACH,eAAO,MAAM,aAAa,gBACX,MAAM,YACT,MAAM,GAAG,SAAS,WACnB,OAAO,KACf,OAKF,CAAC;AAEF,kGAAkG;AAClG,eAAO,MAAM,UAAU,aAAc,SAAS,WAAW,EAAE,KAAG,MAKzC,CAAC;AAEtB,eAAO,MAAM,QAAQ,UAAW,gBAAgB,KAAG,MACA,CAAC;AAEpD,eAAO,MAAM,WAAW,UAAW,gBAAgB,KAAG,MACQ,CAAC;AAoB/D;;;;;;;GAOG;AACH,eAAO,MAAM,YAAY,UAAW,gBAAgB,WAAW,MAAM,KAAG,MAAM,EAmC7E,CAAC"}

package/dist/linux/unit-lifecycle.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"unit-lifecycle.d.ts","sourceRoot":"","sources":["../../src/linux/unit-lifecycle.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAEvD,OAAO,EACL,KAAK,qBAAqB,EAC1B,KAAK,gBAAgB,EAMtB,MAAM,gBAAgB,CAAC;AAOxB,oGAAoG;AACpG,eAAO,MAAM,QAAQ,WACX,UAAU,SACX,gBAAgB,KACtB,OAAO,CAAC,qBAAqB,GAAG,SAAS,CAK3C,CAAC;AAEF,eAAO,MAAM,QAAQ,WACX,UAAU,QACZ,gBAAgB,UACd,qBAAqB,WACpB,MAAM,KACd,OAAO,CAAC,IAAI,CA4Bd,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,aAAa,WAChB,UAAU,SACX,gBAAgB,UACf,qBAAqB,GAAG,SAAS,4BAEhC,MAAM,KACd,OAAO,CAAC,qBAAqB,CAqD/B,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,UAAU,WACb,UAAU,UACV,qBAAqB,KAC5B,OAAO,CAAC,IAAI,CAed,CAAC"}
+{"version":3,"file":"unit-lifecycle.d.ts","sourceRoot":"","sources":["../../src/linux/unit-lifecycle.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAEvD,OAAO,EACL,KAAK,qBAAqB,EAC1B,KAAK,gBAAgB,EAOtB,MAAM,gBAAgB,CAAC;AAOxB,oGAAoG;AACpG,eAAO,MAAM,QAAQ,WACX,UAAU,SACX,gBAAgB,KACtB,OAAO,CAAC,qBAAqB,GAAG,SAAS,CAK3C,CAAC;AAEF,eAAO,MAAM,QAAQ,WACX,UAAU,QACZ,gBAAgB,UACd,qBAAqB,WACpB,MAAM,KACd,OAAO,CAAC,IAAI,CAkCd,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,aAAa,WAChB,UAAU,SACX,gBAAgB,UACf,qBAAqB,GAAG,SAAS,4BAEhC,MAAM,KACd,OAAO,CAAC,qBAAqB,CAqD/B,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,UAAU,WACb,UAAU,UACV,qBAAqB,KAC5B,OAAO,CAAC,IAAI,CAed,CAAC"}

package/dist/linux/unit-settle.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"unit-settle.d.ts","sourceRoot":"","sources":["../../src/linux/unit-settle.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EACL,KAAK,qBAAqB,EAC1B,KAAK,gBAAgB,EAGtB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,KAAK,UAAU,EAQhB,MAAM,gBAAgB,CAAC;AAExB,eAAO,MAAM,MAAM,SAAU,MAAM,WAAW,MAAM,KAAG,KACR,CAAC;AAEhD,eAAO,MAAM,YAAY,UAChB,gBAAgB,cACX,MAAM,UACV,UAAU,KACjB,qBAUD,CAAC;AAEH,MAAM,MAAM,MAAM,GAAG;IACnB,QAAQ,CAAC,MAAM,EAAE,UAAU,GAAG,SAAS,CAAC;IACxC,mFAAmF;IACnF,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC;IAChC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;CAC7B,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,MAAM,WACT,UAAU,SACX,gBAAgB,QACjB,MAAM,KACX,OAAO,CAAC,qBAAqB,CA2C/B,CAAC"}
+{"version":3,"file":"unit-settle.d.ts","sourceRoot":"","sources":["../../src/linux/unit-settle.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EACL,KAAK,qBAAqB,EAC1B,KAAK,gBAAgB,EAItB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,KAAK,UAAU,EAQhB,MAAM,gBAAgB,CAAC;AAExB,eAAO,MAAM,MAAM,SAAU,MAAM,WAAW,MAAM,KAAG,KACR,CAAC;AAEhD,eAAO,MAAM,YAAY,UAChB,gBAAgB,cACX,MAAM,UACV,UAAU,KACjB,qBAUD,CAAC;AAEH,MAAM,MAAM,MAAM,GAAG;IACnB,QAAQ,CAAC,MAAM,EAAE,UAAU,GAAG,SAAS,CAAC;IACxC,mFAAmF;IACnF,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC;IAChC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;CAC7B,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,MAAM,WACT,UAAU,SACX,gBAAgB,QACjB,MAAM,KACX,OAAO,CAAC,qBAAqB,CA8C/B,CAAC"}

package/dist/paperless/client.d.ts

@@ -0,0 +1,37 @@
+/**
+ * One authenticated call to the Paperless-ngx REST API at `/api`.
+ *
+ * ⚠️ `Authorization: Token <value>`, NOT `Bearer`. Paperless-ngx's `securitySchemes.tokenAuth`
+ *   (the v3.1.1 served schema) states the "Token" prefix explicitly — the same DRF
+ *   `TokenAuthentication` NetBox uses (netbox/client.ts), a different vendor, same convention.
+ *
+ * ⛔ `Accept: application/json; version=10` ON EVERY CALL. Paperless-ngx versions its API with
+ *   DRF's `AcceptHeaderVersioning` (`REST_FRAMEWORK.DEFAULT_VERSION = '10'`, measured against the
+ *   v3.1.1 source). Omitting the header still answers — DRF falls back to `DEFAULT_VERSION` — but
+ *   pinning it here means an estate upgrade that moves the default cannot silently change what
+ *   this package receives without a version bump of its own noticing.
+ *
+ * ⚠️ A LIST IS WRAPPED, A DETAIL IS NOT: `{count, next, previous, results: […]}` vs. the bare
+ *   object — the same DRF pagination shape NetBox uses.
+ */
+import * as Effect from 'effect/Effect';
+import * as HttpClient from 'effect/unstable/http/HttpClient';
+import { PaperlessCredentials, type PaperlessCredentialsError } from './credentials.ts';
+import { type PaperlessError } from './errors.ts';
+export interface PaperlessList<T> {
+    readonly count: number;
+    readonly next: string | null;
+    readonly previous: string | null;
+    readonly results: readonly T[];
+}
+export type PaperlessRow = Record<string, unknown>;
+/**
+ * ⚠️ `PaperlessCredentials` IS PART OF THIS, NOT JUST `HttpClient`. `paperless()` reads the lazy
+ *   credentials service (`yield* yield* PaperlessCredentials`), so a stack that wires the
+ *   providers without also providing a credentials layer should fail to TYPECHECK, not fail at
+ *   the first call. `providers.ts` supplies `environmentLayer` by default for exactly this.
+ */
+export type PaperlessRequirements = HttpClient.HttpClient | PaperlessCredentials;
+/** One JSON call. Returns the parsed body, or `undefined` for an empty response (DELETE). */
+export declare const paperless: <T>(method: 'GET' | 'POST' | 'PUT' | 'PATCH' | 'DELETE', path: string, body?: Record<string, unknown>) => Effect.Effect<T, PaperlessError | PaperlessCredentialsError, PaperlessRequirements>;
+//# sourceMappingURL=client.d.ts.map

package/dist/paperless/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/paperless/client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,UAAU,MAAM,iCAAiC,CAAC;AAE9D,OAAO,EAAE,oBAAoB,EAAE,KAAK,yBAAyB,EAAE,MAAM,kBAAkB,CAAC;AACxF,OAAO,EAAE,KAAK,cAAc,EAAuC,MAAM,aAAa,CAAC;AAKvF,MAAM,WAAW,aAAa,CAAC,CAAC;IAC9B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE,CAAC;CAChC;AAED,MAAM,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAEnD;;;;;GAKG;AACH,MAAM,MAAM,qBAAqB,GAAG,UAAU,CAAC,UAAU,GAAG,oBAAoB,CAAC;AAEjF,6FAA6F;AAC7F,eAAO,MAAM,SAAS,GAAI,CAAC,UACjB,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,OAAO,GAAG,QAAQ,QAC7C,MAAM,SACL,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAC7B,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,cAAc,GAAG,yBAAyB,EAAE,qBAAqB,CAwCjF,CAAC"}

package/dist/paperless/constraint-guard.d.ts

@@ -0,0 +1,19 @@
+/**
+ * The generated tables, looked up by endpoint, and the refusal that stops a plan.
+ *
+ * ⛔ AN UNKNOWN KEY IS A DEFECT, NOT A REASON TO SKIP THE CHECK — the generator resolves every key
+ *   in its source scan against the vendor document, so a key absent here means the tables were
+ *   not regenerated, which the message says. Same posture as `../netbox/constraint-guard.ts`.
+ */
+import * as Effect from 'effect/Effect';
+import { type EndpointConstraints, type EndpointKey, type PaperlessBody } from './constraints.ts';
+import { PAPERLESS_CONSTRAINTS } from './generated/constraints/index.ts';
+export { PAPERLESS_CONSTRAINTS };
+export declare const constraintsFor: (key: EndpointKey) => EndpointConstraints;
+export declare const bodyViolations: (key: EndpointKey, body: PaperlessBody, presence: boolean) => readonly string[];
+/**
+ * ⛔ `Effect.die`, NOT `Effect.fail`. A declaration the vendor would reject is a DEFECT in the
+ *   stack file, not a recoverable condition.
+ */
+export declare const guardBody: (key: EndpointKey | undefined, body: PaperlessBody, presence: boolean) => Effect.Effect<void>;
+//# sourceMappingURL=constraint-guard.d.ts.map

package/dist/paperless/constraint-guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constraint-guard.d.ts","sourceRoot":"","sources":["../../src/paperless/constraint-guard.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EACL,KAAK,mBAAmB,EACxB,KAAK,WAAW,EAChB,KAAK,aAAa,EAGnB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,qBAAqB,EAAE,MAAM,kCAAkC,CAAC;AAEzE,OAAO,EAAE,qBAAqB,EAAE,CAAC;AAEjC,eAAO,MAAM,cAAc,QAAS,WAAW,KAAG,mBASjD,CAAC;AAEF,eAAO,MAAM,cAAc,QACpB,WAAW,QACV,aAAa,YACT,OAAO,KAChB,SAAS,MAAM,EAAyD,CAAC;AAE5E;;;GAGG;AACH,eAAO,MAAM,SAAS,QACf,WAAW,GAAG,SAAS,QACtB,aAAa,YACT,OAAO,KAChB,MAAM,CAAC,MAAM,CAAC,IAAI,CAKjB,CAAC"}

package/dist/paperless/constraints.d.ts

@@ -0,0 +1,50 @@
+/**
+ * Paperless-ngx's own rules, checked here, before the request is built.
+ *
+ * ★ THE SAME READER SHAPE AS `../netbox/constraints.ts`, AND FOR THE SAME REASON: both vendors
+ *   send a JSON body where a number stays a number and a boolean stays a boolean, so `String(v)`
+ *   at the door would be the exact mangling that incident (codegen/README.md) exists to prevent.
+ *   The table itself is generated by `bun codegen/paperless.ts` from the vendor's own OpenAPI
+ *   document — nothing here is hand-typed.
+ *
+ * ⚠️ WHAT THIS DELIBERATELY DOES NOT ENFORCE: a `format` name (a DRF validator run server-side); a
+ *   pattern the generator could not carry faithfully (codegen/py-pattern.ts), recorded verbatim as
+ *   `patternSource`; the `(name, owner)` uniqueness constraint (models.py) — that is `matching.ts`'s
+ *   job, not a per-field rule; and `CustomField.select_options`, which is not in the schema at all
+ *   (groundTruth: the serializer's own rule is unverified at 3.1.1 and this table cannot state a
+ *   rule the vendor document does not carry).
+ */
+export interface ParamConstraint {
+    readonly type?: string;
+    /** From the schema's `required` array. ⚠️ Checked on CREATE only. */
+    readonly required?: boolean;
+    readonly maxLength?: number;
+    readonly minLength?: number;
+    readonly minimum?: number;
+    readonly maximum?: number;
+    /** ⚠️ `(string | number)[]` — `matching_algorithm`'s enum is numeric (`DataTypeEnum`'s is not). */
+    readonly enum?: readonly (string | number)[];
+    readonly pattern?: string;
+    readonly patternSource?: string;
+    readonly format?: string;
+    readonly default?: string;
+}
+export type EndpointConstraints = Readonly<Record<string, ParamConstraint>>;
+/** `paperless:POST /api/tags/` — exactly how the generated tables key an endpoint. */
+export type EndpointKey = string;
+export type PaperlessBody = Record<string, unknown>;
+export interface ViolationOptions {
+    /** ⛔ CREATE ONLY. A PATCH is deliberately partial, so presence there refuses every ordinary edit. */
+    readonly presence?: boolean;
+}
+/**
+ * Every vendor rule this body breaks. Pure — no network, no clock, no environment.
+ *
+ * ⚠️ `null` IS A VALUE, NOT AN ABSENCE — Paperless uses explicit `null` to clear a nullable
+ *   foreign key (`owner`, `parent`), so it must not trip the presence check, and no string/number
+ *   rule applies to it.
+ */
+export declare const violations: (table: EndpointConstraints, body: PaperlessBody, options?: ViolationOptions) => readonly string[];
+/** The message a plan dies with. */
+export declare const refusal: (endpoint: EndpointKey, found: readonly string[]) => string;
+//# sourceMappingURL=constraints.d.ts.map

package/dist/paperless/constraints.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constraints.d.ts","sourceRoot":"","sources":["../../src/paperless/constraints.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,qEAAqE;IACrE,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,mGAAmG;IACnG,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC,MAAM,GAAG,MAAM,CAAC,EAAE,CAAC;IAC7C,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,MAAM,mBAAmB,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC,CAAC;AAE5E,sFAAsF;AACtF,MAAM,MAAM,WAAW,GAAG,MAAM,CAAC;AAEjC,MAAM,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAEpD,MAAM,WAAW,gBAAgB;IAC/B,qGAAqG;IACrG,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;CAC7B;AAsCD;;;;;;GAMG;AACH,eAAO,MAAM,UAAU,UACd,mBAAmB,QACpB,aAAa,YACV,gBAAgB,KACxB,SAAS,MAAM,EAYjB,CAAC;AAEF,oCAAoC;AACpC,eAAO,MAAM,OAAO,aAAc,WAAW,SAAS,SAAS,MAAM,EAAE,KAAG,MAGM,CAAC"}

package/dist/paperless/credentials.d.ts

@@ -0,0 +1,40 @@
+/**
+ * Where the Paperless URL and token come from — S24's shape (alchemy-provider-standard): a lazy
+ * `Context.Service` whose VALUE is itself an `Effect`, resolved inside each operation with
+ * `yield* yield* PaperlessCredentials`. Resolving twice, not once at layer build, is what keeps a
+ * token out of any state the engine might persist and lets a consumer swap the source (an env var
+ * today, an OpenBao mint tomorrow) without touching a resource file.
+ *
+ * ⛔ NO DEFAULT HOST, AND NO DEFAULT TOKEN. A published package that fell back to a loopback
+ *   address would let a consumer who forgot the variable watch every call fail against a machine
+ *   that is not theirs, instead of being told which variable is missing.
+ * ⛔ THE TOKEN IS NEVER A PROP, NEVER AN ATTRIBUTE. Alchemy persists attributes unencrypted
+ *   (S25); nothing this family returns from `read`/`reconcile` may carry it.
+ */
+import * as Context from 'effect/Context';
+import * as Effect from 'effect/Effect';
+import * as Layer from 'effect/Layer';
+declare const PaperlessCredentialsError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "PaperlessCredentialsError";
+} & Readonly<A>;
+export declare class PaperlessCredentialsError extends PaperlessCredentialsError_base<{
+    readonly message: string;
+}> {
+}
+export interface PaperlessCredentialValue {
+    /** Trailing slash stripped, e.g. `https://paperless.example.com`. */
+    readonly url: string;
+    readonly token: string;
+}
+declare const PaperlessCredentials_base: Context.ServiceClass<PaperlessCredentials, "PaperlessCredentials", Effect.Effect<PaperlessCredentialValue, PaperlessCredentialsError, never>>;
+/**
+ * The lazy service. ⚠️ `Layer.succeed` registers the EFFECT, not its result — `readEnvironment`
+ *   runs once per `yield* yield*`, so a call after the variables are exported sees them even if
+ *   the layer itself was built before that (true in `fake-paperless.test.ts`, which sets the env
+ *   vars right before each call).
+ */
+export declare class PaperlessCredentials extends PaperlessCredentials_base {
+}
+export declare const environmentLayer: Layer.Layer<PaperlessCredentials>;
+export {};
+//# sourceMappingURL=credentials.d.ts.map

package/dist/paperless/credentials.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials.d.ts","sourceRoot":"","sources":["../../src/paperless/credentials.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,KAAK,OAAO,MAAM,gBAAgB,CAAC;AAE1C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;;;;AAEtC,qBAAa,yBAA0B,SAAQ,+BAA8C;IAC3F,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B,CAAC;CAAG;AAEL,MAAM,WAAW,wBAAwB;IACvC,qEAAqE;IACrE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;;AA4BD;;;;;GAKG;AACH,qBAAa,oBAAqB,SAAQ,yBAGf;CAAG;AAE9B,eAAO,MAAM,gBAAgB,EAAE,KAAK,CAAC,KAAK,CAAC,oBAAoB,CAG9D,CAAC"}

package/dist/paperless/custom-field.d.ts

@@ -0,0 +1,75 @@
+/**
+ * `Paperless.CustomField` — a Paperless-ngx custom field, create-or-update and never deleted.
+ *
+ * ⛔ `dataType` IS CREATE-ONLY, ENFORCED AT PLAN TIME, NEVER A PATCH AND NEVER A REPLACE. A
+ *   replace would delete this id and create a new one — and Paperless deletes the field's VALUE
+ *   on every document when its custom field is deleted. `matching.ts`'s `immutable` hook carries
+ *   this refusal generically; `dataType` is simply never listed in `fields`, so nothing in
+ *   `matching.ts` ever builds a PATCH body that includes it.
+ *
+ * ⛔ NO `owner` FIELD. Unlike `Tag`/`DocumentType`/`StoragePath`, `CustomField` does not extend
+ *   Paperless-ngx's `OwnedObjectSerializer` — its wire body is exactly `{name, data_type,
+ *   extra_data}` (measured against the v3.1.1 schema). `owned: false` stops `matching.ts`
+ *   sending a field the vendor's serializer does not declare.
+ *
+ * ⚠️ `CustomField.select_options` (the vendor's own rule for a `select` field's option list) is
+ *   not in the served schema at all, so it is recorded here and NOT enforced (groundTruth).
+ */
+import { Resource } from 'alchemy';
+import * as Provider from 'alchemy/Provider';
+import * as Effect from 'effect/Effect';
+import type { PaperlessCustomFieldRequest } from './generated/types/custom-fields.ts';
+import type { PaperlessRow } from './client.ts';
+import { type MatchingRequirements } from './matching.ts';
+export interface CustomFieldProps {
+    /** ⚠️ maxLength 128 (generated constraint table). The locate key — CustomField's name is globally unique (models.py:1169), with no owner to further scope it. */
+    name: string;
+    /**
+     * ⛔ CREATE-ONLY — see this file's header. `select`'s own option list
+     *   (`select_options`) is not in the vendor schema and is unenforced here.
+     */
+    dataType: PaperlessCustomFieldRequest['data_type'];
+    /** Arbitrary JSON the vendor attaches no schema to (e.g. a `select` field's option list). */
+    extraData?: unknown;
+}
+export interface CustomFieldAttributes {
+    id: number;
+    name: string;
+    dataType: string;
+    extraData: unknown;
+}
+export interface CustomField extends Resource<'Paperless.CustomField', CustomFieldProps, CustomFieldAttributes, never, MatchingRequirements> {
+}
+export declare const CustomField: import("alchemy").ResourceClass<CustomField>;
+/**
+ * ⛔ EXTRACTED SO IT CAN BE TESTED WITHOUT A SERVER (custom-field.test.ts) — the same reason
+ *   `../netbox/prefix-form.ts` pulls its body/matches functions out of `prefix.ts`.
+ */
+export declare const dataTypeImmutable: (live: PaperlessRow, props: CustomFieldProps) => string | undefined;
+/** ⚠️ Exported (not through index.ts) so custom-field.test.ts can drive the real lifecycle. */
+export declare const customFieldHandlers: {
+    list: () => Effect.Effect<never[], never, never>;
+    read: ({ olds }: {
+        olds: CustomFieldProps;
+    }) => Effect.Effect<CustomFieldAttributes | undefined, import("./credentials.ts").PaperlessCredentialsError | import("./errors.ts").PaperlessUnauthorized | import("./errors.ts").PaperlessUnavailable | import("./errors.ts").PaperlessValidation, import("./client.ts").PaperlessRequirements>;
+    diff: ({ news, output }: {
+        news: import("alchemy").Input<CustomFieldProps>;
+        output: CustomFieldAttributes | undefined;
+    }) => Effect.Effect<{
+        readonly action: 'update';
+    } | {
+        readonly action: 'noop';
+    } | {
+        readonly action: 'replace';
+    } | undefined, import("./credentials.ts").PaperlessCredentialsError | import("./errors.ts").PaperlessUnauthorized | import("./errors.ts").PaperlessUnavailable | import("./errors.ts").PaperlessValidation, import("./client.ts").PaperlessRequirements>;
+    reconcile: ({ news, output }: {
+        news: CustomFieldProps;
+        output?: CustomFieldAttributes | undefined;
+    }) => Effect.Effect<CustomFieldAttributes, import("./credentials.ts").PaperlessCredentialsError | import("./errors.ts").PaperlessError, import("./client.ts").PaperlessRequirements>;
+    delete: ({ olds, output }: {
+        olds: CustomFieldProps;
+        output?: CustomFieldAttributes | undefined;
+    }) => Effect.Effect<void, import("./credentials.ts").PaperlessCredentialsError | import("./errors.ts").PaperlessUnauthorized | import("./errors.ts").PaperlessUnavailable | import("./errors.ts").PaperlessValidation, import("./client.ts").PaperlessRequirements>;
+};
+export declare const CustomFieldProvider: () => import("effect/Layer").Layer<Provider.Provider<CustomField>, never, import("./client.ts").PaperlessRequirements>;
+//# sourceMappingURL=custom-field.d.ts.map

package/dist/paperless/custom-field.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"custom-field.d.ts","sourceRoot":"","sources":["../../src/paperless/custom-field.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,KAAK,QAAQ,MAAM,kBAAkB,CAAC;AAC7C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,oCAAoC,CAAC;AACtF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,KAAK,oBAAoB,EAAoB,MAAM,eAAe,CAAC;AAE5E,MAAM,WAAW,gBAAgB;IAC/B,iKAAiK;IACjK,IAAI,EAAE,MAAM,CAAC;IACb;;;OAGG;IACH,QAAQ,EAAE,2BAA2B,CAAC,WAAW,CAAC,CAAC;IACnD,6FAA6F;IAC7F,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED,MAAM,WAAW,qBAAqB;IACpC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,WAAY,SAAQ,QAAQ,CAC3C,uBAAuB,EACvB,gBAAgB,EAChB,qBAAqB,EACrB,KAAK,EACL,oBAAoB,CACrB;CAAG;AAEJ,eAAO,MAAM,WAAW,8CAEtB,CAAC;AAEH;;;GAGG;AACH,eAAO,MAAM,iBAAiB,SACtB,YAAY,SACX,gBAAgB,KACtB,MAAM,GAAG,SAKG,CAAC;AAEhB,+FAA+F;AAC/F,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;CAqB9B,CAAC;AAEH,eAAO,MAAM,mBAAmB,wHAC4D,CAAC"}

package/dist/paperless/document-type.d.ts

@@ -0,0 +1,30 @@
+/**
+ * `Paperless.DocumentType` — a Paperless-ngx document type, create-or-update and never deleted.
+ * Same shape as `tag.ts` minus `color`/`isInboxTag`/`parent` — see that file's header for why
+ * `matchingAlgorithm`'s type comes off the generated request type rather than being retyped.
+ */
+import { Resource } from 'alchemy';
+import * as Provider from 'alchemy/Provider';
+import type { PaperlessDocumentTypeRequest } from './generated/types/document-types.ts';
+import { type MatchingProps, type MatchingRequirements } from './matching.ts';
+export interface DocumentTypeProps extends MatchingProps {
+    /** ⚠️ maxLength 128 (generated constraint table). The locate key. */
+    name: string;
+    /** ⚠️ maxLength 256. */
+    match?: string;
+    matchingAlgorithm?: PaperlessDocumentTypeRequest['matching_algorithm'];
+    isInsensitive?: boolean;
+}
+export interface DocumentTypeAttributes {
+    id: number;
+    name: string;
+    match: string;
+    matchingAlgorithm: number;
+    isInsensitive: boolean;
+    owner: number | undefined;
+}
+export interface DocumentType extends Resource<'Paperless.DocumentType', DocumentTypeProps, DocumentTypeAttributes, never, MatchingRequirements> {
+}
+export declare const DocumentType: import("alchemy").ResourceClass<DocumentType>;
+export declare const DocumentTypeProvider: () => import("effect/Layer").Layer<Provider.Provider<DocumentType>, never, import("./client.ts").PaperlessRequirements>;
+//# sourceMappingURL=document-type.d.ts.map

package/dist/paperless/document-type.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"document-type.d.ts","sourceRoot":"","sources":["../../src/paperless/document-type.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,KAAK,QAAQ,MAAM,kBAAkB,CAAC;AAE7C,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,qCAAqC,CAAC;AACxF,OAAO,EAAE,KAAK,aAAa,EAAE,KAAK,oBAAoB,EAAoB,MAAM,eAAe,CAAC;AAEhG,MAAM,WAAW,iBAAkB,SAAQ,aAAa;IACtD,qEAAqE;IACrE,IAAI,EAAE,MAAM,CAAC;IACb,wBAAwB;IACxB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,iBAAiB,CAAC,EAAE,4BAA4B,CAAC,oBAAoB,CAAC,CAAC;IACvE,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,MAAM,WAAW,sBAAsB;IACrC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,iBAAiB,EAAE,MAAM,CAAC;IAC1B,aAAa,EAAE,OAAO,CAAC;IACvB,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;CAC3B;AAED,MAAM,WAAW,YAAa,SAAQ,QAAQ,CAC5C,wBAAwB,EACxB,iBAAiB,EACjB,sBAAsB,EACtB,KAAK,EACL,oBAAoB,CACrB;CAAG;AAEJ,eAAO,MAAM,YAAY,+CAEvB,CAAC;AAiCH,eAAO,MAAM,oBAAoB,yHACkD,CAAC"}

package/dist/paperless/errors.d.ts

@@ -0,0 +1,49 @@
+declare const PaperlessNotFound_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "PaperlessNotFound";
+} & Readonly<A>;
+/** No object at that path. The only tag `matching.ts` folds to "absent". */
+export declare class PaperlessNotFound extends PaperlessNotFound_base<{
+    readonly method: string;
+    readonly path: string;
+}> {
+}
+declare const PaperlessUnauthorized_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "PaperlessUnauthorized";
+} & Readonly<A>;
+/** 401 (no/bad token) or 403 (token valid, forbidden) — NEVER read as "the object is absent". */
+export declare class PaperlessUnauthorized extends PaperlessUnauthorized_base<{
+    readonly status: 401 | 403;
+    readonly method: string;
+    readonly path: string;
+}> {
+}
+declare const PaperlessValidation_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "PaperlessValidation";
+} & Readonly<A>;
+/** 400 — the vendor rejected the body. Carries it, so the message quotes Paperless's own words. */
+export declare class PaperlessValidation extends PaperlessValidation_base<{
+    readonly method: string;
+    readonly path: string;
+    readonly body: string;
+}> {
+}
+declare const PaperlessUnavailable_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "PaperlessUnavailable";
+} & Readonly<A>;
+/** 5xx, or a status this family's endpoints do not otherwise document. */
+export declare class PaperlessUnavailable extends PaperlessUnavailable_base<{
+    readonly status: number;
+    readonly method: string;
+    readonly path: string;
+    readonly detail: string;
+}> {
+}
+export type PaperlessError = PaperlessNotFound | PaperlessUnauthorized | PaperlessValidation | PaperlessUnavailable;
+/**
+ * The one place a status code is read. ⚠️ Anything outside {400,401,403,404,5xx} — 405, 409, 429
+ *   — is not documented for these four endpoints, so it falls to `PaperlessValidation` rather than
+ *   inventing a fifth tag for a case that was never measured.
+ */
+export declare const statusToError: (status: number, method: string, path: string, body: string) => PaperlessError;
+export {};
+//# sourceMappingURL=errors.d.ts.map

package/dist/paperless/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/paperless/errors.ts"],"names":[],"mappings":";;;AAYA,4EAA4E;AAC5E,qBAAa,iBAAkB,SAAQ,uBAAsC;IAC3E,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB,CAAC;CAAG;;;;AAEL,iGAAiG;AACjG,qBAAa,qBAAsB,SAAQ,2BAA0C;IACnF,QAAQ,CAAC,MAAM,EAAE,GAAG,GAAG,GAAG,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB,CAAC;CAAG;;;;AAEL,mGAAmG;AACnG,qBAAa,mBAAoB,SAAQ,yBAAwC;IAC/E,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB,CAAC;CAAG;;;;AAEL,0EAA0E;AAC1E,qBAAa,oBAAqB,SAAQ,0BAAyC;IACjF,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB,CAAC;CAAG;AAEL,MAAM,MAAM,cAAc,GACtB,iBAAiB,GACjB,qBAAqB,GACrB,mBAAmB,GACnB,oBAAoB,CAAC;AAEzB;;;;GAIG;AACH,eAAO,MAAM,aAAa,WAChB,MAAM,UACN,MAAM,QACR,MAAM,QACN,MAAM,KACX,cAKF,CAAC"}

package/dist/paperless/fake-paperless.d.ts

@@ -0,0 +1,39 @@
+/**
+ * A fake Paperless-ngx for the tests beside it — `Bun.serve` on an ephemeral 127.0.0.1 port, the
+ * same shape `../openbao/fake-bao.ts` and `../caddy/fake-caddy.ts` use.
+ *
+ * ⛔ TEST-ONLY. No provider imports this file. It stores rows in memory for exactly the four
+ *   taxonomy collections and answers `name__iexact` the way Django does — case-insensitive,
+ *   never collapsing two differently-cased rows into one.
+ */
+import * as Effect from 'effect/Effect';
+import type { PaperlessRequirements } from './client.ts';
+import { type PaperlessCredentialsError } from './credentials.ts';
+import type { PaperlessError } from './errors.ts';
+export declare const FAKE_TOKEN = "fake-token-not-real";
+export interface Seen {
+    readonly method: string;
+    readonly path: string;
+    readonly headers: Headers;
+    readonly body: string;
+}
+export type Row = Record<string, unknown> & {
+    id: number;
+};
+declare const COLLECTIONS: readonly ['tags', 'document_types', 'storage_paths', 'custom_fields'];
+export interface FakePaperless {
+    readonly url: string;
+    readonly seen: Seen[];
+    readonly rows: (collection: (typeof COLLECTIONS)[number]) => readonly Row[];
+    /** `undefined` to answer normally; a status to force it once per subsequent call. */
+    forceStatus: number | undefined;
+    stop(): void;
+}
+export declare const fakePaperless: () => FakePaperless;
+/** Run `body` against a fresh fake, `PAPERLESS_URL`/`PAPERLESS_TOKEN` set only for its duration. */
+export declare const withFake: (body: (fake: FakePaperless) => Promise<void>) => Promise<void>;
+/** Run an effect through the real `FetchHttpClient` and the real environment credentials layer. */
+export declare const run: <A>(effect: Effect.Effect<A, PaperlessError | PaperlessCredentialsError, PaperlessRequirements>) => Promise<A>;
+export declare const runFailure: <A>(effect: Effect.Effect<A, PaperlessError | PaperlessCredentialsError, PaperlessRequirements>) => Promise<PaperlessCredentialsError | PaperlessError>;
+export {};
+//# sourceMappingURL=fake-paperless.d.ts.map

package/dist/paperless/fake-paperless.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fake-paperless.d.ts","sourceRoot":"","sources":["../../src/paperless/fake-paperless.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAExC,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AACzD,OAAO,EAAE,KAAK,yBAAyB,EAAoB,MAAM,kBAAkB,CAAC;AACpF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAElD,eAAO,MAAM,UAAU,wBAAwB,CAAC;AAEhD,MAAM,WAAW,IAAI;IACnB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE,CAAC;AAE3D,QAAA,MAAM,WAAW,YAAI,MAAM,EAAE,gBAAgB,EAAE,eAAe,EAAE,eAAe,CAAU,CAAC;AAE1F,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,CAAC,UAAU,EAAE,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,CAAC,KAAK,SAAS,GAAG,EAAE,CAAC;IAC5E,qFAAqF;IACrF,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,IAAI,IAAI,IAAI,CAAC;CACd;AAKD,eAAO,MAAM,aAAa,QAAO,aA0EhC,CAAC;AAQF,oGAAoG;AACpG,eAAO,MAAM,QAAQ,SAAgB,CAAC,IAAI,EAAE,aAAa,KAAK,OAAO,CAAC,IAAI,CAAC,KAAG,OAAO,CAAC,IAAI,CAezF,CAAC;AAEF,mGAAmG;AACnG,eAAO,MAAM,GAAG,GAAI,CAAC,UACX,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,cAAc,GAAG,yBAAyB,EAAE,qBAAqB,CAAC,eAI1F,CAAC;AAEJ,eAAO,MAAM,UAAU,GAAI,CAAC,UAClB,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,cAAc,GAAG,yBAAyB,EAAE,qBAAqB,CAAC,wDAO1F,CAAC"}

package/dist/paperless/generated/constraints/index.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Every generated Paperless constraint table, merged — DO NOT EDIT BY HAND.
+ *
+ * Run: bun codegen/paperless.ts
+ *
+ * ⚠️ EVERY KEY IS PREFIXED `paperless:`, so one estate running several vendors' readers cannot
+ *   collide on an unprefixed `POST /api/…`.
+ */
+import type { EndpointConstraints } from '../../constraints.ts';
+export declare const PAPERLESS_CONSTRAINTS: Readonly<Record<string, EndpointConstraints>>;
+/** sha256 of the merged table, truncated — a digest of the DATA, not the file text. */
+export declare const PAPERLESS_CONSTRAINTS_DIGEST = "66e61dce8c099d7d";
+//# sourceMappingURL=index.d.ts.map

package/dist/paperless/generated/constraints/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/paperless/generated/constraints/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAMhE,eAAO,MAAM,qBAAqB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAK/E,CAAC;AAEF,uFAAuF;AACvF,eAAO,MAAM,4BAA4B,qBAAqB,CAAC"}

package/dist/paperless/generated/constraints/paperless-custom_fields.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Generated Paperless-ngx REST API (OpenAPI 3.0.3) request-body constraints for `/api/custom_fields/` — DO NOT EDIT BY HAND.
+ *
+ * Run: bun codegen/paperless.ts
+ * Manifest entry: `paperless-openapi` — Paperless-ngx REST API (OpenAPI 3.0.3) 3.1.1
+ *   sha256 d0fe550d2135e37b, Paperless-ngx web service, loopback
+ *   /api/schema/?format=json
+ *
+ * 8 of this product's 100 POST/PUT/PATCH/DELETE endpoints are tabled across all
+ * areas: the ones this package writes to, named in its own source. Every other vendor write
+ * endpoint is UNTABLED and therefore unchecked at plan time.
+ *
+ * ⚠️ A `patternSource` with no `pattern` beside it could NOT be carried into a JavaScript
+ *   RegExp faithfully — Django/DRF's `\w` is Unicode and JavaScript's is ASCII
+ *   (codegen/py-pattern.ts). It is recorded and NOT enforced.
+ * ⚠️ `data_type` on a custom field is CREATE-ONLY: enforced here as a value rule, never as a
+ *   reason to allow a PATCH — the refusal on change lives in the provider (custom-field.ts).
+ */
+import type { EndpointConstraints } from '../../constraints.ts';
+export declare const PAPERLESS_CUSTOM_FIELDS_CONSTRAINTS: Readonly<Record<string, EndpointConstraints>>;
+//# sourceMappingURL=paperless-custom_fields.d.ts.map

package/dist/paperless/generated/constraints/paperless-custom_fields.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"paperless-custom_fields.d.ts","sourceRoot":"","sources":["../../../../src/paperless/generated/constraints/paperless-custom_fields.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAEhE,eAAO,MAAM,mCAAmC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAQ7F,CAAC"}

package/dist/paperless/generated/constraints/paperless-document_types.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Generated Paperless-ngx REST API (OpenAPI 3.0.3) request-body constraints for `/api/document_types/` — DO NOT EDIT BY HAND.
+ *
+ * Run: bun codegen/paperless.ts
+ * Manifest entry: `paperless-openapi` — Paperless-ngx REST API (OpenAPI 3.0.3) 3.1.1
+ *   sha256 d0fe550d2135e37b, Paperless-ngx web service, loopback
+ *   /api/schema/?format=json
+ *
+ * 8 of this product's 100 POST/PUT/PATCH/DELETE endpoints are tabled across all
+ * areas: the ones this package writes to, named in its own source. Every other vendor write
+ * endpoint is UNTABLED and therefore unchecked at plan time.
+ *
+ * ⚠️ A `patternSource` with no `pattern` beside it could NOT be carried into a JavaScript
+ *   RegExp faithfully — Django/DRF's `\w` is Unicode and JavaScript's is ASCII
+ *   (codegen/py-pattern.ts). It is recorded and NOT enforced.
+ * ⚠️ `data_type` on a custom field is CREATE-ONLY: enforced here as a value rule, never as a
+ *   reason to allow a PATCH — the refusal on change lives in the provider (custom-field.ts).
+ */
+import type { EndpointConstraints } from '../../constraints.ts';
+export declare const PAPERLESS_DOCUMENT_TYPES_CONSTRAINTS: Readonly<Record<string, EndpointConstraints>>;
+//# sourceMappingURL=paperless-document_types.d.ts.map

package/dist/paperless/generated/constraints/paperless-document_types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"paperless-document_types.d.ts","sourceRoot":"","sources":["../../../../src/paperless/generated/constraints/paperless-document_types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAEhE,eAAO,MAAM,oCAAoC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAW9F,CAAC"}

package/dist/paperless/generated/constraints/paperless-storage_paths.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Generated Paperless-ngx REST API (OpenAPI 3.0.3) request-body constraints for `/api/storage_paths/` — DO NOT EDIT BY HAND.
+ *
+ * Run: bun codegen/paperless.ts
+ * Manifest entry: `paperless-openapi` — Paperless-ngx REST API (OpenAPI 3.0.3) 3.1.1
+ *   sha256 d0fe550d2135e37b, Paperless-ngx web service, loopback
+ *   /api/schema/?format=json
+ *
+ * 8 of this product's 100 POST/PUT/PATCH/DELETE endpoints are tabled across all
+ * areas: the ones this package writes to, named in its own source. Every other vendor write
+ * endpoint is UNTABLED and therefore unchecked at plan time.
+ *
+ * ⚠️ A `patternSource` with no `pattern` beside it could NOT be carried into a JavaScript
+ *   RegExp faithfully — Django/DRF's `\w` is Unicode and JavaScript's is ASCII
+ *   (codegen/py-pattern.ts). It is recorded and NOT enforced.
+ * ⚠️ `data_type` on a custom field is CREATE-ONLY: enforced here as a value rule, never as a
+ *   reason to allow a PATCH — the refusal on change lives in the provider (custom-field.ts).
+ */
+import type { EndpointConstraints } from '../../constraints.ts';
+export declare const PAPERLESS_STORAGE_PATHS_CONSTRAINTS: Readonly<Record<string, EndpointConstraints>>;
+//# sourceMappingURL=paperless-storage_paths.d.ts.map

package/dist/paperless/generated/constraints/paperless-storage_paths.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"paperless-storage_paths.d.ts","sourceRoot":"","sources":["../../../../src/paperless/generated/constraints/paperless-storage_paths.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAEhE,eAAO,MAAM,mCAAmC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAa7F,CAAC"}

package/dist/paperless/generated/constraints/paperless-tags.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Generated Paperless-ngx REST API (OpenAPI 3.0.3) request-body constraints for `/api/tags/` — DO NOT EDIT BY HAND.
+ *
+ * Run: bun codegen/paperless.ts
+ * Manifest entry: `paperless-openapi` — Paperless-ngx REST API (OpenAPI 3.0.3) 3.1.1
+ *   sha256 d0fe550d2135e37b, Paperless-ngx web service, loopback
+ *   /api/schema/?format=json
+ *
+ * 8 of this product's 100 POST/PUT/PATCH/DELETE endpoints are tabled across all
+ * areas: the ones this package writes to, named in its own source. Every other vendor write
+ * endpoint is UNTABLED and therefore unchecked at plan time.
+ *
+ * ⚠️ A `patternSource` with no `pattern` beside it could NOT be carried into a JavaScript
+ *   RegExp faithfully — Django/DRF's `\w` is Unicode and JavaScript's is ASCII
+ *   (codegen/py-pattern.ts). It is recorded and NOT enforced.
+ * ⚠️ `data_type` on a custom field is CREATE-ONLY: enforced here as a value rule, never as a
+ *   reason to allow a PATCH — the refusal on change lives in the provider (custom-field.ts).
+ */
+import type { EndpointConstraints } from '../../constraints.ts';
+export declare const PAPERLESS_TAGS_CONSTRAINTS: Readonly<Record<string, EndpointConstraints>>;
+//# sourceMappingURL=paperless-tags.d.ts.map

package/dist/paperless/generated/constraints/paperless-tags.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"paperless-tags.d.ts","sourceRoot":"","sources":["../../../../src/paperless/generated/constraints/paperless-tags.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAEhE,eAAO,MAAM,0BAA0B,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAapF,CAAC"}

package/dist/paperless/generated/types/custom-fields.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Generated Paperless-ngx REST API (OpenAPI 3.0.3) request/response types for `/api/custom_fields/` — DO NOT EDIT BY HAND.
+ *
+ * Run: bun codegen/paperless.ts
+ * Manifest entry: `paperless-openapi` — Paperless-ngx REST API (OpenAPI 3.0.3) 3.1.1, sha256 d0fe550d2135e37b
+ *
+ * 8 of Paperless-ngx REST API (OpenAPI 3.0.3)'s 100 write endpoints are used by this family; this file covers only /api/custom_fields/.
+ *
+ * ⛔ `set_permissions` (writeOnly) is not modelled in this slice — no property here writes it.
+ */
+export interface PaperlessCustomFieldRequest {
+    name: string;
+    data_type: "string" | "url" | "date" | "boolean" | "integer" | "float" | "monetary" | "documentlink" | "select" | "longtext";
+    extra_data?: unknown | null;
+}
+export interface PaperlessCustomField {
+    readonly id: number;
+    name: string;
+    data_type: "string" | "url" | "date" | "boolean" | "integer" | "float" | "monetary" | "documentlink" | "select" | "longtext";
+    extra_data?: unknown | null;
+    readonly document_count: number;
+}
+//# sourceMappingURL=custom-fields.d.ts.map

package/dist/paperless/generated/types/custom-fields.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"custom-fields.d.ts","sourceRoot":"","sources":["../../../../src/paperless/generated/types/custom-fields.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,MAAM,WAAW,2BAA2B;IAC1C,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,QAAQ,GAAG,KAAK,GAAG,MAAM,GAAG,SAAS,GAAG,SAAS,GAAG,OAAO,GAAG,UAAU,GAAG,cAAc,GAAG,QAAQ,GAAG,UAAU,CAAC;IAC7H,UAAU,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;CAC7B;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,QAAQ,GAAG,KAAK,GAAG,MAAM,GAAG,SAAS,GAAG,SAAS,GAAG,OAAO,GAAG,UAAU,GAAG,cAAc,GAAG,QAAQ,GAAG,UAAU,CAAC;IAC7H,UAAU,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;IAC5B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC"}