@homeflare/alchemy 0.28.0 → 0.29.0

package/dist/caddy/local-admin.d.ts

@@ -1,45 +1,31 @@
-import { type CaddyAdmin, type CaddyAdminListener } from './admin.ts';
-export type LocalCaddyAdminOptions = {
+import type { CaddyTransport } from './admin.ts';
+import { type LocalHttpClientOptions } from './caddy-http-client.ts';
+export { DEFAULT_ADMIN_ADDRESS, parseAdminAddress } from './admin-address.ts';
+export { isUnreachable } from './caddy-http-client.ts';
+export type LocalCaddyAdminOptions = LocalHttpClientOptions & {
     /**
      * `http://<loopback>:<port>` or `unix:///absolute/path.sock`.
      * @default 'http://127.0.0.1:2019' — Caddy's default admin listener (`localhost:2019`).
      */
     readonly address?: string;
     /**
-     * The Host (and Origin) to send over TCP, when it is not the address's own: the Caddyfile
+     * The Host (and, over TCP, Origin) to send when it is not the address's own: the Caddyfile
      * narrowed `admin { origins … }`, or the port is an SSH forward of the real one (Caddy checks
-     * the Host against ITS port, not yours). Form `host:port`.
+     * the Host against ITS port, not yours). Form `host:port`. Over a unix socket this still sets
+     * the Host header `@distilled.cloud/caddy`'s protocol always sends (Caddy skips the Host check
+     * on unix listeners regardless — admin.go allowedOrigins) — defaults to `127.0.0.1`, matching
+     * the Caddy CLI's own unix-socket calls (cmd/commandfuncs.go AdminAPIRequest).
      */
     readonly hostHeader?: string;
-    /**
-     * Abort an exchange after this long. @default 60_000
-     * ⚠️ A `shutdown_delay` in the Caddyfile makes `/load` block that long (caddyhttp app.go Stop);
-     *   a timeout then fails the deploy while Caddy goes on to apply — the next plan converges.
-     */
-    readonly timeoutMs?: number;
-    /**
-     * Retries when the connection is REFUSED (nothing listening yet — a Caddy launchd job that was
-     * bootstrapped a moment ago). Only refusals: those never reached Caddy, so re-sending a
-     * `POST /load` cannot apply it twice. @default 2
-     */
-    readonly retries?: number;
-    /** @default 500 */
-    readonly retryDelayMs?: number;
-};
-export declare const DEFAULT_ADMIN_ADDRESS = "http://127.0.0.1:2019";
-type Target = {
-    readonly kind: 'tcp';
-    readonly host: string;
-    readonly port: number;
-} | {
-    readonly kind: 'unix';
-    readonly socketPath: string;
-};
-/** The dial target and listener for an address, or a refusal naming what is wrong with it. */
-export declare const parseAdminAddress: (address: string, hostHeader?: string) => {
-    target: Target;
-    listener: CaddyAdminListener;
 };
-export declare const localCaddyAdmin: (options?: LocalCaddyAdminOptions) => CaddyAdmin;
-export {};
+/**
+ * A transport to this machine's Caddy — feed it to `caddyProviders()`, or build the layer by hand
+ * with `CaddyConfigProvider().pipe(Layer.provideMerge(caddyAdminLayer(localCaddyAdmin())))` (never
+ * plain `Layer.provide` — admin.ts's own doc on `caddyAdminLayer` says why).
+ *
+ * ⛔ LOOPBACK OR A UNIX SOCKET, NOTHING ELSE. The admin API is unauthenticated plaintext; an
+ *   address off this machine means it is reachable from the network, which decision 23 forbids.
+ *   `parseAdminAddress` refuses anything else.
+ */
+export declare const localCaddyAdmin: (options?: LocalCaddyAdminOptions) => CaddyTransport;
 //# sourceMappingURL=local-admin.d.ts.map

package/dist/caddy/local-admin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"local-admin.d.ts","sourceRoot":"","sources":["../../src/caddy/local-admin.ts"],"names":[],"mappings":"AAkBA,OAAO,EACL,KAAK,UAAU,EACf,KAAK,kBAAkB,EAGxB,MAAM,YAAY,CAAC;AAEpB,MAAM,MAAM,sBAAsB,GAAG;IACnC;;;OAGG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B;;;;OAIG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B;;;;OAIG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B;;;;OAIG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,mBAAmB;IACnB,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;CAChC,CAAC;AAEF,eAAO,MAAM,qBAAqB,0BAA0B,CAAC;AAE7D,KAAK,MAAM,GACP;IAAE,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACtE;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC;AAW3D,8FAA8F;AAC9F,eAAO,MAAM,iBAAiB,YACnB,MAAM,eACF,MAAM,KAClB;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,kBAAkB,CAAA;CAsChD,CAAC;AAgDF,eAAO,MAAM,eAAe,aAAa,sBAAsB,KAAQ,UA8BtE,CAAC"}
+{"version":3,"file":"local-admin.d.ts","sourceRoot":"","sources":["../../src/caddy/local-admin.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAEjD,OAAO,EAAE,KAAK,sBAAsB,EAAuB,MAAM,wBAAwB,CAAC;AAE1F,OAAO,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAC9E,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAEvD,MAAM,MAAM,sBAAsB,GAAG,sBAAsB,GAAG;IAC5D;;;OAGG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B;;;;;;;OAOG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B,CAAC;AAEF;;;;;;;;GAQG;AACH,eAAO,MAAM,eAAe,aAAa,sBAAsB,KAAQ,cAqCtE,CAAC"}

package/dist/caddy/providers.d.ts

@@ -6,9 +6,25 @@
  * ★ launchdProviders() TOO when the stack uses caddyWithFile(): the file is a launchd-subpath
  *   HostFile, written through that subpath's HostRunner.
  * ⚠️ The default is localCaddyAdmin(): `http://127.0.0.1:2019`, Caddy's default admin listener.
- *   Pass another CaddyAdmin for a unix socket, a narrowed `admin { origins }`, or an SSH forward.
+ *   Pass another CaddyTransport for a unix socket, a narrowed `admin { origins }`, or an SSH
+ *   forward — `localCaddyAdmin({ address, hostHeader })` builds one; a consumer can provide any
+ *   other `{ endpoint, listener, layer }` reaching `@distilled.cloud/caddy`'s own `Credentials`
+ *   and `HttpClient.HttpClient`.
+ *
+ * ⚠️ `Layer.provideMerge`, NEVER PLAIN `Layer.provide`, for `caddyAdminLayer`. `CaddyConfigProvider()`'s
+ *   `read`/`diff`/`reconcile` handlers each still need `CaddyAdminService` and
+ *   `@distilled.cloud/caddy`'s `Credentials`/`HttpClient` — Alchemy's own `Provider.effect` types
+ *   those as part of the LAYER's overall requirement (`ProviderService`'s per-handler `Req` type
+ *   parameters, `alchemy/Provider.ts`), for exactly this reason. Plain `Layer.provide` SEALS a
+ *   layer — it satisfies `CaddyConfigProvider()`'s requirement only for BUILDING the `Provider`
+ *   value (the `admin` in its outer `Effect.gen`), then hides those services from anything that
+ *   runs LATER, when the returned `read`/`diff`/`reconcile` FUNCTIONS actually execute. MEASURED
+ *   2026-09-23: with plain `Layer.provide`, `caddyProviders()`'s own `reconcile` handler dies with
+ *   "Service not found: homeflare/caddy/CaddyAdmin" the moment the ENGINE calls it. `provideMerge`
+ *   feeds `caddyAdminLayer`'s output into `CaddyConfigProvider()`'s requirement AND keeps that same
+ *   output live in the result, so every later handler call still runs with it in context.
  */
 import * as Layer from 'effect/Layer';
-import { type CaddyAdmin } from './admin.ts';
-export declare const caddyProviders: (admin?: CaddyAdmin) => Layer.Layer<import("alchemy").Provider<import("./config.ts").CaddyConfig>, never, never>;
+import { type CaddyTransport } from './admin.ts';
+export declare const caddyProviders: (transport?: CaddyTransport) => Layer.Layer<import("./admin.ts").CaddyAdminService | import("@distilled.cloud/caddy").Credentials | import("effect/unstable/http/HttpClient").HttpClient | import("alchemy").Provider<import("./config.ts").CaddyConfig>, never, never>;
 //# sourceMappingURL=providers.d.ts.map

package/dist/caddy/providers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"providers.d.ts","sourceRoot":"","sources":["../../src/caddy/providers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,EAAE,KAAK,UAAU,EAAmB,MAAM,YAAY,CAAC;AAI9D,eAAO,MAAM,cAAc,WAAW,UAAU,6FACmB,CAAC"}
+{"version":3,"file":"providers.d.ts","sourceRoot":"","sources":["../../src/caddy/providers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,EAAE,KAAK,cAAc,EAAmB,MAAM,YAAY,CAAC;AAIlE,eAAO,MAAM,cAAc,eAAe,cAAc,4OACoB,CAAC"}

package/dist/cloudflare/mesh-node-token.d.ts

@@ -19,5 +19,5 @@ export type MeshNodeRef = {
  *   success body IS the token. Other SDK errors pass through; they come only from non-2xx
  *   responses, which carry an error envelope, not a token.
  */
-export declare const fetchMeshNodeToken: (ref: MeshNodeRef) => Effect.Effect<Redacted.Redacted<string>, import("@distilled.cloud/core/errors").BadGateway | import("@distilled.cloud/cloudflare/Errors").CloudflareError | import("@distilled.cloud/cloudflare/Errors").CloudflareHttpError | import("@distilled.cloud/cloudflare/Errors").CloudflareParseError | import("@distilled.cloud/cloudflare/Errors").CloudflareRateLimited | import("@distilled.cloud/core/errors").ConfigError | zeroTrust.Forbidden | import("@distilled.cloud/core/errors").GatewayTimeout | import("effect/unstable/http/HttpClientError").HttpClientError | import("@distilled.cloud/core/errors").InternalServerError | import("@distilled.cloud/cloudflare/Errors").InvalidRoute | MeshNodeError | import("@distilled.cloud/cloudflare/Credentials").OAuthRefreshError | import("@distilled.cloud/core/errors").ServiceUnavailable | import("@distilled.cloud/core/errors").TooManyRequests | import("@distilled.cloud/core/errors").Unauthorized | import("@distilled.cloud/cloudflare/Errors").UnknownCloudflareError, zeroTrust.CloudflareOpContext>;
+export declare const fetchMeshNodeToken: (ref: MeshNodeRef) => Effect.Effect<Redacted.Redacted<string>, import("@distilled.cloud/caddy").BadGateway | import("@distilled.cloud/cloudflare/Errors").CloudflareError | import("@distilled.cloud/cloudflare/Errors").CloudflareHttpError | import("@distilled.cloud/cloudflare/Errors").CloudflareParseError | import("@distilled.cloud/cloudflare/Errors").CloudflareRateLimited | import("@distilled.cloud/caddy").ConfigError | zeroTrust.Forbidden | import("@distilled.cloud/caddy").GatewayTimeout | import("effect/unstable/http/HttpClientError").HttpClientError | import("@distilled.cloud/caddy").InternalServerError | import("@distilled.cloud/cloudflare/Errors").InvalidRoute | MeshNodeError | import("@distilled.cloud/cloudflare/Credentials").OAuthRefreshError | import("@distilled.cloud/caddy").ServiceUnavailable | import("@distilled.cloud/caddy").TooManyRequests | import("@distilled.cloud/caddy").Unauthorized | import("@distilled.cloud/cloudflare/Errors").UnknownCloudflareError, zeroTrust.CloudflareOpContext>;
 //# sourceMappingURL=mesh-node-token.d.ts.map

package/dist/cloudflare/mesh-node-token.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mesh-node-token.d.ts","sourceRoot":"","sources":["../../src/cloudflare/mesh-node-token.ts"],"names":[],"mappings":"AA4BA,OAAO,KAAK,SAAS,MAAM,wCAAwC,CAAC;AACpE,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAkB,MAAM,oBAAoB,CAAC;AAEnE,yEAAyE;AACzE,MAAM,MAAM,WAAW,GAAG;IAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAAG,CACvD;IAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,CAAA;CAAE,GAClD;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,SAAS,CAAA;CAAE,CACrD,CAAC;AAoDF;;;;;;GAMG;AACH,eAAO,MAAM,kBAAkB,QAAS,WAAW,8gCA4B/C,CAAC"}
+{"version":3,"file":"mesh-node-token.d.ts","sourceRoot":"","sources":["../../src/cloudflare/mesh-node-token.ts"],"names":[],"mappings":"AA4BA,OAAO,KAAK,SAAS,MAAM,wCAAwC,CAAC;AACpE,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAkB,MAAM,oBAAoB,CAAC;AAEnE,yEAAyE;AACzE,MAAM,MAAM,WAAW,GAAG;IAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAAG,CACvD;IAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,CAAA;CAAE,GAClD;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,SAAS,CAAA;CAAE,CACrD,CAAC;AAoDF;;;;;;GAMG;AACH,eAAO,MAAM,kBAAkB,QAAS,WAAW,o+BA4B/C,CAAC"}

package/dist/forgejo/branch-protection.d.ts

@@ -56,7 +56,7 @@ export declare const handlers: {
     list: () => Effect.Effect<never[], never, never>;
     read: ({ olds }: {
         olds: BranchProtectionProps;
-    }) => Effect.Effect<BranchProtectionAttributes | undefined, import("@distilled.cloud/core/errors").BadGateway | import("@distilled.cloud/core/errors").ConfigError | repository.Forbidden | import("@distilled.cloud/forgejo/Errors").ForgejoParseError | import("@distilled.cloud/core/errors").GatewayTimeout | import("effect/unstable/http/HttpClientError").HttpClientError | import("@distilled.cloud/core/errors").InternalServerError | repository.Locked | repository.NotFound | import("@distilled.cloud/core/errors").ServiceUnavailable | import("@distilled.cloud/core/errors").TooManyRequests | import("@distilled.cloud/core/errors").Unauthorized | import("@distilled.cloud/forgejo/Errors").UnknownForgejoError | repository.UnprocessableEntity, import("effect/unstable/http/HttpClient").HttpClient>;
+    }) => Effect.Effect<BranchProtectionAttributes | undefined, import("@distilled.cloud/caddy").BadGateway | import("@distilled.cloud/caddy").ConfigError | repository.Forbidden | import("@distilled.cloud/forgejo/Errors").ForgejoParseError | import("@distilled.cloud/caddy").GatewayTimeout | import("effect/unstable/http/HttpClientError").HttpClientError | import("@distilled.cloud/caddy").InternalServerError | repository.Locked | repository.NotFound | import("@distilled.cloud/caddy").ServiceUnavailable | import("@distilled.cloud/caddy").TooManyRequests | import("@distilled.cloud/caddy").Unauthorized | import("@distilled.cloud/forgejo/Errors").UnknownForgejoError | repository.UnprocessableEntity, import("effect/unstable/http/HttpClient").HttpClient>;
     diff: ({ news, output }: {
         news: import("alchemy").Input<BranchProtectionProps>;
         output: BranchProtectionAttributes | undefined;
@@ -66,13 +66,13 @@ export declare const handlers: {
         readonly action: 'noop';
     } | {
         readonly action: 'replace';
-    } | undefined, import("@distilled.cloud/core/errors").BadGateway | import("@distilled.cloud/core/errors").ConfigError | repository.Forbidden | import("@distilled.cloud/forgejo/Errors").ForgejoParseError | import("@distilled.cloud/core/errors").GatewayTimeout | import("effect/unstable/http/HttpClientError").HttpClientError | import("@distilled.cloud/core/errors").InternalServerError | repository.Locked | repository.NotFound | import("@distilled.cloud/core/errors").ServiceUnavailable | import("@distilled.cloud/core/errors").TooManyRequests | import("@distilled.cloud/core/errors").Unauthorized | import("@distilled.cloud/forgejo/Errors").UnknownForgejoError | repository.UnprocessableEntity, import("effect/unstable/http/HttpClient").HttpClient>;
+    } | undefined, import("@distilled.cloud/caddy").BadGateway | import("@distilled.cloud/caddy").ConfigError | repository.Forbidden | import("@distilled.cloud/forgejo/Errors").ForgejoParseError | import("@distilled.cloud/caddy").GatewayTimeout | import("effect/unstable/http/HttpClientError").HttpClientError | import("@distilled.cloud/caddy").InternalServerError | repository.Locked | repository.NotFound | import("@distilled.cloud/caddy").ServiceUnavailable | import("@distilled.cloud/caddy").TooManyRequests | import("@distilled.cloud/caddy").Unauthorized | import("@distilled.cloud/forgejo/Errors").UnknownForgejoError | repository.UnprocessableEntity, import("effect/unstable/http/HttpClient").HttpClient>;
     reconcile: ({ news }: {
         news: BranchProtectionProps;
-    }) => Effect.Effect<BranchProtectionAttributes, import("@distilled.cloud/core/errors").BadGateway | import("@distilled.cloud/core/errors").ConfigError | repository.Forbidden | import("@distilled.cloud/forgejo/Errors").ForgejoParseError | import("@distilled.cloud/core/errors").GatewayTimeout | import("effect/unstable/http/HttpClientError").HttpClientError | import("@distilled.cloud/core/errors").InternalServerError | repository.Locked | repository.NotFound | import("@distilled.cloud/core/errors").ServiceUnavailable | import("@distilled.cloud/core/errors").TooManyRequests | import("@distilled.cloud/core/errors").Unauthorized | import("@distilled.cloud/forgejo/Errors").UnknownForgejoError | repository.UnprocessableEntity, import("effect/unstable/http/HttpClient").HttpClient>;
+    }) => Effect.Effect<BranchProtectionAttributes, import("@distilled.cloud/caddy").BadGateway | import("@distilled.cloud/caddy").ConfigError | repository.Forbidden | import("@distilled.cloud/forgejo/Errors").ForgejoParseError | import("@distilled.cloud/caddy").GatewayTimeout | import("effect/unstable/http/HttpClientError").HttpClientError | import("@distilled.cloud/caddy").InternalServerError | repository.Locked | repository.NotFound | import("@distilled.cloud/caddy").ServiceUnavailable | import("@distilled.cloud/caddy").TooManyRequests | import("@distilled.cloud/caddy").Unauthorized | import("@distilled.cloud/forgejo/Errors").UnknownForgejoError | repository.UnprocessableEntity, import("effect/unstable/http/HttpClient").HttpClient>;
     delete: ({ olds }: {
         olds: BranchProtectionProps;
-    }) => Effect.Effect<void, import("@distilled.cloud/core/errors").BadGateway | import("@distilled.cloud/core/errors").ConfigError | repository.Forbidden | import("@distilled.cloud/forgejo/Errors").ForgejoParseError | import("@distilled.cloud/core/errors").GatewayTimeout | import("effect/unstable/http/HttpClientError").HttpClientError | import("@distilled.cloud/core/errors").InternalServerError | repository.Locked | repository.NotFound | import("@distilled.cloud/core/errors").ServiceUnavailable | import("@distilled.cloud/core/errors").TooManyRequests | import("@distilled.cloud/core/errors").Unauthorized | import("@distilled.cloud/forgejo/Errors").UnknownForgejoError | repository.UnprocessableEntity, import("effect/unstable/http/HttpClient").HttpClient>;
+    }) => Effect.Effect<void, import("@distilled.cloud/caddy").BadGateway | import("@distilled.cloud/caddy").ConfigError | repository.Forbidden | import("@distilled.cloud/forgejo/Errors").ForgejoParseError | import("@distilled.cloud/caddy").GatewayTimeout | import("effect/unstable/http/HttpClientError").HttpClientError | import("@distilled.cloud/caddy").InternalServerError | repository.Locked | repository.NotFound | import("@distilled.cloud/caddy").ServiceUnavailable | import("@distilled.cloud/caddy").TooManyRequests | import("@distilled.cloud/caddy").Unauthorized | import("@distilled.cloud/forgejo/Errors").UnknownForgejoError | repository.UnprocessableEntity, import("effect/unstable/http/HttpClient").HttpClient>;
 };
 export declare const ForgejoBranchProtectionProvider: () => import("effect/Layer").Layer<Provider.Provider<ForgejoBranchProtection>, never, import("effect/unstable/http/HttpClient").HttpClient>;
 //# sourceMappingURL=branch-protection.d.ts.map

package/dist/forgejo/org-actions-secrets.d.ts

@@ -52,7 +52,7 @@ export declare const handlers: {
     list: () => Effect.Effect<never[], never, never>;
     read: ({ olds }: {
         olds: OrgSecretProps;
-    }) => Effect.Effect<OrgSecretAttributes | undefined, import("@distilled.cloud/core/errors").BadGateway | organization.BadRequest | import("@distilled.cloud/core/errors").ConfigError | organization.Forbidden | import("@distilled.cloud/forgejo/Errors").ForgejoParseError | ForgejoSecretEnvUnsetError | import("@distilled.cloud/core/errors").GatewayTimeout | import("effect/unstable/http/HttpClientError").HttpClientError | import("@distilled.cloud/core/errors").InternalServerError | organization.NotFound | import("@distilled.cloud/core/errors").ServiceUnavailable | import("@distilled.cloud/core/errors").TooManyRequests | import("@distilled.cloud/core/errors").Unauthorized | import("@distilled.cloud/forgejo/Errors").UnknownForgejoError, import("effect/unstable/http/HttpClient").HttpClient>;
+    }) => Effect.Effect<OrgSecretAttributes | undefined, import("@distilled.cloud/caddy").BadGateway | organization.BadRequest | import("@distilled.cloud/caddy").ConfigError | organization.Forbidden | import("@distilled.cloud/forgejo/Errors").ForgejoParseError | ForgejoSecretEnvUnsetError | import("@distilled.cloud/caddy").GatewayTimeout | import("effect/unstable/http/HttpClientError").HttpClientError | import("@distilled.cloud/caddy").InternalServerError | organization.NotFound | import("@distilled.cloud/caddy").ServiceUnavailable | import("@distilled.cloud/caddy").TooManyRequests | import("@distilled.cloud/caddy").Unauthorized | import("@distilled.cloud/forgejo/Errors").UnknownForgejoError, import("effect/unstable/http/HttpClient").HttpClient>;
     diff: ({ news, output }: {
         news: import("alchemy").Input<OrgSecretProps>;
         output: OrgSecretAttributes | undefined;
@@ -62,13 +62,13 @@ export declare const handlers: {
         readonly action: 'noop';
     } | {
         readonly action: 'replace';
-    } | undefined, import("@distilled.cloud/core/errors").BadGateway | organization.BadRequest | import("@distilled.cloud/core/errors").ConfigError | organization.Forbidden | import("@distilled.cloud/forgejo/Errors").ForgejoParseError | ForgejoSecretEnvUnsetError | import("@distilled.cloud/core/errors").GatewayTimeout | import("effect/unstable/http/HttpClientError").HttpClientError | import("@distilled.cloud/core/errors").InternalServerError | organization.NotFound | import("@distilled.cloud/core/errors").ServiceUnavailable | import("@distilled.cloud/core/errors").TooManyRequests | import("@distilled.cloud/core/errors").Unauthorized | import("@distilled.cloud/forgejo/Errors").UnknownForgejoError, import("effect/unstable/http/HttpClient").HttpClient>;
+    } | undefined, import("@distilled.cloud/caddy").BadGateway | organization.BadRequest | import("@distilled.cloud/caddy").ConfigError | organization.Forbidden | import("@distilled.cloud/forgejo/Errors").ForgejoParseError | ForgejoSecretEnvUnsetError | import("@distilled.cloud/caddy").GatewayTimeout | import("effect/unstable/http/HttpClientError").HttpClientError | import("@distilled.cloud/caddy").InternalServerError | organization.NotFound | import("@distilled.cloud/caddy").ServiceUnavailable | import("@distilled.cloud/caddy").TooManyRequests | import("@distilled.cloud/caddy").Unauthorized | import("@distilled.cloud/forgejo/Errors").UnknownForgejoError, import("effect/unstable/http/HttpClient").HttpClient>;
     reconcile: ({ news }: {
         news: OrgSecretProps;
-    }) => Effect.Effect<OrgSecretAttributes, import("@distilled.cloud/core/errors").BadGateway | organization.BadRequest | import("@distilled.cloud/core/errors").ConfigError | organization.Forbidden | import("@distilled.cloud/forgejo/Errors").ForgejoParseError | ForgejoSecretEnvUnsetError | import("@distilled.cloud/core/errors").GatewayTimeout | import("effect/unstable/http/HttpClientError").HttpClientError | import("@distilled.cloud/core/errors").InternalServerError | organization.NotFound | import("@distilled.cloud/core/errors").ServiceUnavailable | import("@distilled.cloud/core/errors").TooManyRequests | import("@distilled.cloud/core/errors").Unauthorized | import("@distilled.cloud/forgejo/Errors").UnknownForgejoError, import("effect/unstable/http/HttpClient").HttpClient>;
+    }) => Effect.Effect<OrgSecretAttributes, import("@distilled.cloud/caddy").BadGateway | organization.BadRequest | import("@distilled.cloud/caddy").ConfigError | organization.Forbidden | import("@distilled.cloud/forgejo/Errors").ForgejoParseError | ForgejoSecretEnvUnsetError | import("@distilled.cloud/caddy").GatewayTimeout | import("effect/unstable/http/HttpClientError").HttpClientError | import("@distilled.cloud/caddy").InternalServerError | organization.NotFound | import("@distilled.cloud/caddy").ServiceUnavailable | import("@distilled.cloud/caddy").TooManyRequests | import("@distilled.cloud/caddy").Unauthorized | import("@distilled.cloud/forgejo/Errors").UnknownForgejoError, import("effect/unstable/http/HttpClient").HttpClient>;
     delete: ({ olds }: {
         olds: OrgSecretProps;
-    }) => Effect.Effect<void, import("@distilled.cloud/core/errors").BadGateway | organization.BadRequest | import("@distilled.cloud/core/errors").ConfigError | organization.Forbidden | import("@distilled.cloud/forgejo/Errors").ForgejoParseError | ForgejoSecretEnvUnsetError | import("@distilled.cloud/core/errors").GatewayTimeout | import("effect/unstable/http/HttpClientError").HttpClientError | import("@distilled.cloud/core/errors").InternalServerError | organization.NotFound | import("@distilled.cloud/core/errors").ServiceUnavailable | import("@distilled.cloud/core/errors").TooManyRequests | import("@distilled.cloud/core/errors").Unauthorized | import("@distilled.cloud/forgejo/Errors").UnknownForgejoError, import("effect/unstable/http/HttpClient").HttpClient>;
+    }) => Effect.Effect<void, import("@distilled.cloud/caddy").BadGateway | organization.BadRequest | import("@distilled.cloud/caddy").ConfigError | organization.Forbidden | import("@distilled.cloud/forgejo/Errors").ForgejoParseError | ForgejoSecretEnvUnsetError | import("@distilled.cloud/caddy").GatewayTimeout | import("effect/unstable/http/HttpClientError").HttpClientError | import("@distilled.cloud/caddy").InternalServerError | organization.NotFound | import("@distilled.cloud/caddy").ServiceUnavailable | import("@distilled.cloud/caddy").TooManyRequests | import("@distilled.cloud/caddy").Unauthorized | import("@distilled.cloud/forgejo/Errors").UnknownForgejoError, import("effect/unstable/http/HttpClient").HttpClient>;
 };
 export declare const ForgejoOrgSecretProvider: () => import("effect/Layer").Layer<Provider.Provider<ForgejoOrgSecret>, never, import("effect/unstable/http/HttpClient").HttpClient>;
 export {};

package/dist/forgejo/org-label.d.ts

@@ -51,7 +51,7 @@ export declare const handlers: {
     list: () => Effect.Effect<never[], never, never>;
     read: ({ olds }: {
         olds: OrgLabelProps;
-    }) => Effect.Effect<OrgLabelAttributes | undefined, import("@distilled.cloud/core/errors").BadGateway | import("@distilled.cloud/core/errors").ConfigError | import("@distilled.cloud/forgejo/Errors").ForgejoParseError | import("@distilled.cloud/core/errors").GatewayTimeout | import("effect/unstable/http/HttpClientError").HttpClientError | import("@distilled.cloud/core/errors").InternalServerError | organization.NotFound | import("@distilled.cloud/core/errors").ServiceUnavailable | import("@distilled.cloud/core/errors").TooManyRequests | import("@distilled.cloud/core/errors").Unauthorized | import("@distilled.cloud/forgejo/Errors").UnknownForgejoError | organization.UnprocessableEntity, import("effect/unstable/http/HttpClient").HttpClient>;
+    }) => Effect.Effect<OrgLabelAttributes | undefined, import("@distilled.cloud/caddy").BadGateway | import("@distilled.cloud/caddy").ConfigError | import("@distilled.cloud/forgejo/Errors").ForgejoParseError | import("@distilled.cloud/caddy").GatewayTimeout | import("effect/unstable/http/HttpClientError").HttpClientError | import("@distilled.cloud/caddy").InternalServerError | organization.NotFound | import("@distilled.cloud/caddy").ServiceUnavailable | import("@distilled.cloud/caddy").TooManyRequests | import("@distilled.cloud/caddy").Unauthorized | import("@distilled.cloud/forgejo/Errors").UnknownForgejoError | organization.UnprocessableEntity, import("effect/unstable/http/HttpClient").HttpClient>;
     diff: ({ news, output }: {
         news: import("alchemy").Input<OrgLabelProps>;
         output: OrgLabelAttributes | undefined;
@@ -61,13 +61,13 @@ export declare const handlers: {
         readonly action: 'noop';
     } | {
         readonly action: 'replace';
-    } | undefined, import("@distilled.cloud/core/errors").BadGateway | import("@distilled.cloud/core/errors").ConfigError | import("@distilled.cloud/forgejo/Errors").ForgejoParseError | import("@distilled.cloud/core/errors").GatewayTimeout | import("effect/unstable/http/HttpClientError").HttpClientError | import("@distilled.cloud/core/errors").InternalServerError | organization.NotFound | import("@distilled.cloud/core/errors").ServiceUnavailable | import("@distilled.cloud/core/errors").TooManyRequests | import("@distilled.cloud/core/errors").Unauthorized | import("@distilled.cloud/forgejo/Errors").UnknownForgejoError | organization.UnprocessableEntity, import("effect/unstable/http/HttpClient").HttpClient>;
+    } | undefined, import("@distilled.cloud/caddy").BadGateway | import("@distilled.cloud/caddy").ConfigError | import("@distilled.cloud/forgejo/Errors").ForgejoParseError | import("@distilled.cloud/caddy").GatewayTimeout | import("effect/unstable/http/HttpClientError").HttpClientError | import("@distilled.cloud/caddy").InternalServerError | organization.NotFound | import("@distilled.cloud/caddy").ServiceUnavailable | import("@distilled.cloud/caddy").TooManyRequests | import("@distilled.cloud/caddy").Unauthorized | import("@distilled.cloud/forgejo/Errors").UnknownForgejoError | organization.UnprocessableEntity, import("effect/unstable/http/HttpClient").HttpClient>;
     reconcile: ({ news }: {
         news: OrgLabelProps;
-    }) => Effect.Effect<OrgLabelAttributes, import("@distilled.cloud/core/errors").BadGateway | import("@distilled.cloud/core/errors").ConfigError | import("@distilled.cloud/forgejo/Errors").ForgejoParseError | import("@distilled.cloud/core/errors").GatewayTimeout | import("effect/unstable/http/HttpClientError").HttpClientError | import("@distilled.cloud/core/errors").InternalServerError | organization.NotFound | import("@distilled.cloud/core/errors").ServiceUnavailable | import("@distilled.cloud/core/errors").TooManyRequests | import("@distilled.cloud/core/errors").Unauthorized | import("@distilled.cloud/forgejo/Errors").UnknownForgejoError | organization.UnprocessableEntity, import("effect/unstable/http/HttpClient").HttpClient>;
+    }) => Effect.Effect<OrgLabelAttributes, import("@distilled.cloud/caddy").BadGateway | import("@distilled.cloud/caddy").ConfigError | import("@distilled.cloud/forgejo/Errors").ForgejoParseError | import("@distilled.cloud/caddy").GatewayTimeout | import("effect/unstable/http/HttpClientError").HttpClientError | import("@distilled.cloud/caddy").InternalServerError | organization.NotFound | import("@distilled.cloud/caddy").ServiceUnavailable | import("@distilled.cloud/caddy").TooManyRequests | import("@distilled.cloud/caddy").Unauthorized | import("@distilled.cloud/forgejo/Errors").UnknownForgejoError | organization.UnprocessableEntity, import("effect/unstable/http/HttpClient").HttpClient>;
     delete: ({ olds }: {
         olds: OrgLabelProps;
-    }) => Effect.Effect<void, import("@distilled.cloud/core/errors").BadGateway | import("@distilled.cloud/core/errors").ConfigError | import("@distilled.cloud/forgejo/Errors").ForgejoParseError | import("@distilled.cloud/core/errors").GatewayTimeout | import("effect/unstable/http/HttpClientError").HttpClientError | import("@distilled.cloud/core/errors").InternalServerError | organization.NotFound | import("@distilled.cloud/core/errors").ServiceUnavailable | import("@distilled.cloud/core/errors").TooManyRequests | import("@distilled.cloud/core/errors").Unauthorized | import("@distilled.cloud/forgejo/Errors").UnknownForgejoError | organization.UnprocessableEntity, import("effect/unstable/http/HttpClient").HttpClient>;
+    }) => Effect.Effect<void, import("@distilled.cloud/caddy").BadGateway | import("@distilled.cloud/caddy").ConfigError | import("@distilled.cloud/forgejo/Errors").ForgejoParseError | import("@distilled.cloud/caddy").GatewayTimeout | import("effect/unstable/http/HttpClientError").HttpClientError | import("@distilled.cloud/caddy").InternalServerError | organization.NotFound | import("@distilled.cloud/caddy").ServiceUnavailable | import("@distilled.cloud/caddy").TooManyRequests | import("@distilled.cloud/caddy").Unauthorized | import("@distilled.cloud/forgejo/Errors").UnknownForgejoError | organization.UnprocessableEntity, import("effect/unstable/http/HttpClient").HttpClient>;
 };
 export declare const ForgejoOrgLabelProvider: () => import("effect/Layer").Layer<Provider.Provider<ForgejoOrgLabel>, never, import("effect/unstable/http/HttpClient").HttpClient>;
 //# sourceMappingURL=org-label.d.ts.map

package/dist/forgejo/org-team.d.ts

@@ -53,7 +53,7 @@ export declare const handlers: {
     list: () => Effect.Effect<never[], never, never>;
     read: ({ olds }: {
         olds: OrgTeamProps;
-    }) => Effect.Effect<OrgTeamAttributes | undefined, import("@distilled.cloud/core/errors").BadGateway | import("@distilled.cloud/core/errors").ConfigError | organization.Forbidden | import("@distilled.cloud/forgejo/Errors").ForgejoParseError | import("@distilled.cloud/core/errors").GatewayTimeout | import("effect/unstable/http/HttpClientError").HttpClientError | import("@distilled.cloud/core/errors").InternalServerError | organization.NotFound | import("@distilled.cloud/core/errors").ServiceUnavailable | import("@distilled.cloud/core/errors").TooManyRequests | import("@distilled.cloud/core/errors").Unauthorized | import("@distilled.cloud/forgejo/Errors").UnknownForgejoError | organization.UnprocessableEntity, import("effect/unstable/http/HttpClient").HttpClient>;
+    }) => Effect.Effect<OrgTeamAttributes | undefined, import("@distilled.cloud/caddy").BadGateway | import("@distilled.cloud/caddy").ConfigError | organization.Forbidden | import("@distilled.cloud/forgejo/Errors").ForgejoParseError | import("@distilled.cloud/caddy").GatewayTimeout | import("effect/unstable/http/HttpClientError").HttpClientError | import("@distilled.cloud/caddy").InternalServerError | organization.NotFound | import("@distilled.cloud/caddy").ServiceUnavailable | import("@distilled.cloud/caddy").TooManyRequests | import("@distilled.cloud/caddy").Unauthorized | import("@distilled.cloud/forgejo/Errors").UnknownForgejoError | organization.UnprocessableEntity, import("effect/unstable/http/HttpClient").HttpClient>;
     diff: ({ news, output }: {
         news: import("alchemy").Input<OrgTeamProps>;
         output: OrgTeamAttributes | undefined;
@@ -63,13 +63,13 @@ export declare const handlers: {
         readonly action: 'noop';
     } | {
         readonly action: 'replace';
-    } | undefined, import("@distilled.cloud/core/errors").BadGateway | import("@distilled.cloud/core/errors").ConfigError | organization.Forbidden | import("@distilled.cloud/forgejo/Errors").ForgejoParseError | import("@distilled.cloud/core/errors").GatewayTimeout | import("effect/unstable/http/HttpClientError").HttpClientError | import("@distilled.cloud/core/errors").InternalServerError | organization.NotFound | import("@distilled.cloud/core/errors").ServiceUnavailable | import("@distilled.cloud/core/errors").TooManyRequests | import("@distilled.cloud/core/errors").Unauthorized | import("@distilled.cloud/forgejo/Errors").UnknownForgejoError | organization.UnprocessableEntity, import("effect/unstable/http/HttpClient").HttpClient>;
+    } | undefined, import("@distilled.cloud/caddy").BadGateway | import("@distilled.cloud/caddy").ConfigError | organization.Forbidden | import("@distilled.cloud/forgejo/Errors").ForgejoParseError | import("@distilled.cloud/caddy").GatewayTimeout | import("effect/unstable/http/HttpClientError").HttpClientError | import("@distilled.cloud/caddy").InternalServerError | organization.NotFound | import("@distilled.cloud/caddy").ServiceUnavailable | import("@distilled.cloud/caddy").TooManyRequests | import("@distilled.cloud/caddy").Unauthorized | import("@distilled.cloud/forgejo/Errors").UnknownForgejoError | organization.UnprocessableEntity, import("effect/unstable/http/HttpClient").HttpClient>;
     reconcile: ({ news }: {
         news: OrgTeamProps;
-    }) => Effect.Effect<OrgTeamAttributes, import("@distilled.cloud/core/errors").BadGateway | import("@distilled.cloud/core/errors").ConfigError | organization.Forbidden | import("@distilled.cloud/forgejo/Errors").ForgejoParseError | import("@distilled.cloud/core/errors").GatewayTimeout | import("effect/unstable/http/HttpClientError").HttpClientError | import("@distilled.cloud/core/errors").InternalServerError | organization.NotFound | import("@distilled.cloud/core/errors").ServiceUnavailable | import("@distilled.cloud/core/errors").TooManyRequests | import("@distilled.cloud/core/errors").Unauthorized | import("@distilled.cloud/forgejo/Errors").UnknownForgejoError | organization.UnprocessableEntity, import("effect/unstable/http/HttpClient").HttpClient>;
+    }) => Effect.Effect<OrgTeamAttributes, import("@distilled.cloud/caddy").BadGateway | import("@distilled.cloud/caddy").ConfigError | organization.Forbidden | import("@distilled.cloud/forgejo/Errors").ForgejoParseError | import("@distilled.cloud/caddy").GatewayTimeout | import("effect/unstable/http/HttpClientError").HttpClientError | import("@distilled.cloud/caddy").InternalServerError | organization.NotFound | import("@distilled.cloud/caddy").ServiceUnavailable | import("@distilled.cloud/caddy").TooManyRequests | import("@distilled.cloud/caddy").Unauthorized | import("@distilled.cloud/forgejo/Errors").UnknownForgejoError | organization.UnprocessableEntity, import("effect/unstable/http/HttpClient").HttpClient>;
     delete: ({ olds }: {
         olds: OrgTeamProps;
-    }) => Effect.Effect<void, import("@distilled.cloud/core/errors").BadGateway | import("@distilled.cloud/core/errors").ConfigError | organization.Forbidden | import("@distilled.cloud/forgejo/Errors").ForgejoParseError | import("@distilled.cloud/core/errors").GatewayTimeout | import("effect/unstable/http/HttpClientError").HttpClientError | import("@distilled.cloud/core/errors").InternalServerError | organization.NotFound | import("@distilled.cloud/core/errors").ServiceUnavailable | import("@distilled.cloud/core/errors").TooManyRequests | import("@distilled.cloud/core/errors").Unauthorized | import("@distilled.cloud/forgejo/Errors").UnknownForgejoError | organization.UnprocessableEntity, import("effect/unstable/http/HttpClient").HttpClient>;
+    }) => Effect.Effect<void, import("@distilled.cloud/caddy").BadGateway | import("@distilled.cloud/caddy").ConfigError | organization.Forbidden | import("@distilled.cloud/forgejo/Errors").ForgejoParseError | import("@distilled.cloud/caddy").GatewayTimeout | import("effect/unstable/http/HttpClientError").HttpClientError | import("@distilled.cloud/caddy").InternalServerError | organization.NotFound | import("@distilled.cloud/caddy").ServiceUnavailable | import("@distilled.cloud/caddy").TooManyRequests | import("@distilled.cloud/caddy").Unauthorized | import("@distilled.cloud/forgejo/Errors").UnknownForgejoError | organization.UnprocessableEntity, import("effect/unstable/http/HttpClient").HttpClient>;
 };
 export declare const ForgejoOrgTeamProvider: () => import("effect/Layer").Layer<Provider.Provider<ForgejoOrgTeam>, never, import("effect/unstable/http/HttpClient").HttpClient>;
 //# sourceMappingURL=org-team.d.ts.map

package/dist/forgejo/repo-webhook.d.ts

@@ -56,7 +56,7 @@ export declare const handlers: {
     list: () => Effect.Effect<never[], never, never>;
     read: ({ olds }: {
         olds: RepoWebhookProps;
-    }) => Effect.Effect<RepoWebhookAttributes | undefined, import("@distilled.cloud/core/errors").BadGateway | import("@distilled.cloud/core/errors").ConfigError | repository.Forbidden | import("@distilled.cloud/forgejo/Errors").ForgejoParseError | import("@distilled.cloud/core/errors").GatewayTimeout | import("effect/unstable/http/HttpClientError").HttpClientError | import("@distilled.cloud/core/errors").InternalServerError | repository.NotFound | import("@distilled.cloud/core/errors").ServiceUnavailable | import("@distilled.cloud/core/errors").TooManyRequests | import("@distilled.cloud/core/errors").Unauthorized | import("@distilled.cloud/forgejo/Errors").UnknownForgejoError, import("effect/unstable/http/HttpClient").HttpClient>;
+    }) => Effect.Effect<RepoWebhookAttributes | undefined, import("@distilled.cloud/caddy").BadGateway | import("@distilled.cloud/caddy").ConfigError | repository.Forbidden | import("@distilled.cloud/forgejo/Errors").ForgejoParseError | import("@distilled.cloud/caddy").GatewayTimeout | import("effect/unstable/http/HttpClientError").HttpClientError | import("@distilled.cloud/caddy").InternalServerError | repository.NotFound | import("@distilled.cloud/caddy").ServiceUnavailable | import("@distilled.cloud/caddy").TooManyRequests | import("@distilled.cloud/caddy").Unauthorized | import("@distilled.cloud/forgejo/Errors").UnknownForgejoError, import("effect/unstable/http/HttpClient").HttpClient>;
     diff: ({ news, output }: {
         news: import("alchemy").Input<RepoWebhookProps>;
         output: RepoWebhookAttributes | undefined;
@@ -66,13 +66,13 @@ export declare const handlers: {
         readonly action: 'noop';
     } | {
         readonly action: 'replace';
-    } | undefined, import("@distilled.cloud/core/errors").BadGateway | import("@distilled.cloud/core/errors").ConfigError | repository.Forbidden | import("@distilled.cloud/forgejo/Errors").ForgejoParseError | import("@distilled.cloud/core/errors").GatewayTimeout | import("effect/unstable/http/HttpClientError").HttpClientError | import("@distilled.cloud/core/errors").InternalServerError | repository.NotFound | import("@distilled.cloud/core/errors").ServiceUnavailable | import("@distilled.cloud/core/errors").TooManyRequests | import("@distilled.cloud/core/errors").Unauthorized | import("@distilled.cloud/forgejo/Errors").UnknownForgejoError, import("effect/unstable/http/HttpClient").HttpClient>;
+    } | undefined, import("@distilled.cloud/caddy").BadGateway | import("@distilled.cloud/caddy").ConfigError | repository.Forbidden | import("@distilled.cloud/forgejo/Errors").ForgejoParseError | import("@distilled.cloud/caddy").GatewayTimeout | import("effect/unstable/http/HttpClientError").HttpClientError | import("@distilled.cloud/caddy").InternalServerError | repository.NotFound | import("@distilled.cloud/caddy").ServiceUnavailable | import("@distilled.cloud/caddy").TooManyRequests | import("@distilled.cloud/caddy").Unauthorized | import("@distilled.cloud/forgejo/Errors").UnknownForgejoError, import("effect/unstable/http/HttpClient").HttpClient>;
     reconcile: ({ news }: {
         news: RepoWebhookProps;
-    }) => Effect.Effect<RepoWebhookAttributes, import("@distilled.cloud/core/errors").BadGateway | import("@distilled.cloud/core/errors").ConfigError | repository.Forbidden | import("@distilled.cloud/forgejo/Errors").ForgejoParseError | import("@distilled.cloud/core/errors").GatewayTimeout | import("effect/unstable/http/HttpClientError").HttpClientError | import("@distilled.cloud/core/errors").InternalServerError | repository.NotFound | import("@distilled.cloud/core/errors").ServiceUnavailable | import("@distilled.cloud/core/errors").TooManyRequests | import("@distilled.cloud/core/errors").Unauthorized | import("@distilled.cloud/forgejo/Errors").UnknownForgejoError, import("effect/unstable/http/HttpClient").HttpClient>;
+    }) => Effect.Effect<RepoWebhookAttributes, import("@distilled.cloud/caddy").BadGateway | import("@distilled.cloud/caddy").ConfigError | repository.Forbidden | import("@distilled.cloud/forgejo/Errors").ForgejoParseError | import("@distilled.cloud/caddy").GatewayTimeout | import("effect/unstable/http/HttpClientError").HttpClientError | import("@distilled.cloud/caddy").InternalServerError | repository.NotFound | import("@distilled.cloud/caddy").ServiceUnavailable | import("@distilled.cloud/caddy").TooManyRequests | import("@distilled.cloud/caddy").Unauthorized | import("@distilled.cloud/forgejo/Errors").UnknownForgejoError, import("effect/unstable/http/HttpClient").HttpClient>;
     delete: ({ olds }: {
         olds: RepoWebhookProps;
-    }) => Effect.Effect<void, import("@distilled.cloud/core/errors").BadGateway | import("@distilled.cloud/core/errors").ConfigError | repository.Forbidden | import("@distilled.cloud/forgejo/Errors").ForgejoParseError | import("@distilled.cloud/core/errors").GatewayTimeout | import("effect/unstable/http/HttpClientError").HttpClientError | import("@distilled.cloud/core/errors").InternalServerError | repository.NotFound | import("@distilled.cloud/core/errors").ServiceUnavailable | import("@distilled.cloud/core/errors").TooManyRequests | import("@distilled.cloud/core/errors").Unauthorized | import("@distilled.cloud/forgejo/Errors").UnknownForgejoError, import("effect/unstable/http/HttpClient").HttpClient>;
+    }) => Effect.Effect<void, import("@distilled.cloud/caddy").BadGateway | import("@distilled.cloud/caddy").ConfigError | repository.Forbidden | import("@distilled.cloud/forgejo/Errors").ForgejoParseError | import("@distilled.cloud/caddy").GatewayTimeout | import("effect/unstable/http/HttpClientError").HttpClientError | import("@distilled.cloud/caddy").InternalServerError | repository.NotFound | import("@distilled.cloud/caddy").ServiceUnavailable | import("@distilled.cloud/caddy").TooManyRequests | import("@distilled.cloud/caddy").Unauthorized | import("@distilled.cloud/forgejo/Errors").UnknownForgejoError, import("effect/unstable/http/HttpClient").HttpClient>;
 };
 export declare const ForgejoRepoWebhookProvider: () => import("effect/Layer").Layer<Provider.Provider<ForgejoRepoWebhook>, never, import("effect/unstable/http/HttpClient").HttpClient>;
 //# sourceMappingURL=repo-webhook.d.ts.map

package/dist/forgejo/repository.d.ts

@@ -68,7 +68,7 @@ export declare const handlers: {
     list: () => Effect.Effect<never[], never, never>;
     read: ({ olds }: {
         olds: RepositoryProps;
-    }) => Effect.Effect<RepositoryAttributes | undefined, import("@distilled.cloud/core/errors").BadGateway | organization.BadRequest | import("@distilled.cloud/core/errors").ConfigError | organization.Conflict | repository.Forbidden | organization.Forbidden | import("@distilled.cloud/forgejo/Errors").ForgejoParseError | import("@distilled.cloud/core/errors").GatewayTimeout | import("effect/unstable/http/HttpClientError").HttpClientError | import("@distilled.cloud/core/errors").InternalServerError | repository.NotFound | organization.NotFound | import("@distilled.cloud/core/errors").ServiceUnavailable | import("@distilled.cloud/core/errors").TooManyRequests | import("@distilled.cloud/core/errors").Unauthorized | import("@distilled.cloud/forgejo/Errors").UnknownForgejoError | repository.UnprocessableEntity, import("effect/unstable/http/HttpClient").HttpClient>;
+    }) => Effect.Effect<RepositoryAttributes | undefined, import("@distilled.cloud/caddy").BadGateway | organization.BadRequest | import("@distilled.cloud/caddy").ConfigError | organization.Conflict | repository.Forbidden | organization.Forbidden | import("@distilled.cloud/forgejo/Errors").ForgejoParseError | import("@distilled.cloud/caddy").GatewayTimeout | import("effect/unstable/http/HttpClientError").HttpClientError | import("@distilled.cloud/caddy").InternalServerError | repository.NotFound | organization.NotFound | import("@distilled.cloud/caddy").ServiceUnavailable | import("@distilled.cloud/caddy").TooManyRequests | import("@distilled.cloud/caddy").Unauthorized | import("@distilled.cloud/forgejo/Errors").UnknownForgejoError | repository.UnprocessableEntity, import("effect/unstable/http/HttpClient").HttpClient>;
     diff: ({ news, output }: {
         news: import("alchemy").Input<RepositoryProps>;
         output: RepositoryAttributes | undefined;
@@ -78,13 +78,13 @@ export declare const handlers: {
         readonly action: 'noop';
     } | {
         readonly action: 'replace';
-    } | undefined, import("@distilled.cloud/core/errors").BadGateway | organization.BadRequest | import("@distilled.cloud/core/errors").ConfigError | organization.Conflict | repository.Forbidden | organization.Forbidden | import("@distilled.cloud/forgejo/Errors").ForgejoParseError | import("@distilled.cloud/core/errors").GatewayTimeout | import("effect/unstable/http/HttpClientError").HttpClientError | import("@distilled.cloud/core/errors").InternalServerError | repository.NotFound | organization.NotFound | import("@distilled.cloud/core/errors").ServiceUnavailable | import("@distilled.cloud/core/errors").TooManyRequests | import("@distilled.cloud/core/errors").Unauthorized | import("@distilled.cloud/forgejo/Errors").UnknownForgejoError | repository.UnprocessableEntity, import("effect/unstable/http/HttpClient").HttpClient>;
+    } | undefined, import("@distilled.cloud/caddy").BadGateway | organization.BadRequest | import("@distilled.cloud/caddy").ConfigError | organization.Conflict | repository.Forbidden | organization.Forbidden | import("@distilled.cloud/forgejo/Errors").ForgejoParseError | import("@distilled.cloud/caddy").GatewayTimeout | import("effect/unstable/http/HttpClientError").HttpClientError | import("@distilled.cloud/caddy").InternalServerError | repository.NotFound | organization.NotFound | import("@distilled.cloud/caddy").ServiceUnavailable | import("@distilled.cloud/caddy").TooManyRequests | import("@distilled.cloud/caddy").Unauthorized | import("@distilled.cloud/forgejo/Errors").UnknownForgejoError | repository.UnprocessableEntity, import("effect/unstable/http/HttpClient").HttpClient>;
     reconcile: ({ news }: {
         news: RepositoryProps;
-    }) => Effect.Effect<RepositoryAttributes, import("@distilled.cloud/core/errors").BadGateway | organization.BadRequest | import("@distilled.cloud/core/errors").ConfigError | organization.Conflict | repository.Forbidden | organization.Forbidden | import("@distilled.cloud/forgejo/Errors").ForgejoParseError | import("@distilled.cloud/core/errors").GatewayTimeout | import("effect/unstable/http/HttpClientError").HttpClientError | import("@distilled.cloud/core/errors").InternalServerError | repository.NotFound | organization.NotFound | import("@distilled.cloud/core/errors").ServiceUnavailable | import("@distilled.cloud/core/errors").TooManyRequests | import("@distilled.cloud/core/errors").Unauthorized | import("@distilled.cloud/forgejo/Errors").UnknownForgejoError | repository.UnprocessableEntity, import("effect/unstable/http/HttpClient").HttpClient>;
+    }) => Effect.Effect<RepositoryAttributes, import("@distilled.cloud/caddy").BadGateway | organization.BadRequest | import("@distilled.cloud/caddy").ConfigError | organization.Conflict | repository.Forbidden | organization.Forbidden | import("@distilled.cloud/forgejo/Errors").ForgejoParseError | import("@distilled.cloud/caddy").GatewayTimeout | import("effect/unstable/http/HttpClientError").HttpClientError | import("@distilled.cloud/caddy").InternalServerError | repository.NotFound | organization.NotFound | import("@distilled.cloud/caddy").ServiceUnavailable | import("@distilled.cloud/caddy").TooManyRequests | import("@distilled.cloud/caddy").Unauthorized | import("@distilled.cloud/forgejo/Errors").UnknownForgejoError | repository.UnprocessableEntity, import("effect/unstable/http/HttpClient").HttpClient>;
     delete: ({ olds }: {
         olds: RepositoryProps;
-    }) => Effect.Effect<void, import("@distilled.cloud/core/errors").BadGateway | organization.BadRequest | import("@distilled.cloud/core/errors").ConfigError | organization.Conflict | repository.Forbidden | organization.Forbidden | import("@distilled.cloud/forgejo/Errors").ForgejoParseError | import("@distilled.cloud/core/errors").GatewayTimeout | import("effect/unstable/http/HttpClientError").HttpClientError | import("@distilled.cloud/core/errors").InternalServerError | repository.NotFound | organization.NotFound | import("@distilled.cloud/core/errors").ServiceUnavailable | import("@distilled.cloud/core/errors").TooManyRequests | import("@distilled.cloud/core/errors").Unauthorized | import("@distilled.cloud/forgejo/Errors").UnknownForgejoError | repository.UnprocessableEntity, import("effect/unstable/http/HttpClient").HttpClient>;
+    }) => Effect.Effect<void, import("@distilled.cloud/caddy").BadGateway | organization.BadRequest | import("@distilled.cloud/caddy").ConfigError | organization.Conflict | repository.Forbidden | organization.Forbidden | import("@distilled.cloud/forgejo/Errors").ForgejoParseError | import("@distilled.cloud/caddy").GatewayTimeout | import("effect/unstable/http/HttpClientError").HttpClientError | import("@distilled.cloud/caddy").InternalServerError | repository.NotFound | organization.NotFound | import("@distilled.cloud/caddy").ServiceUnavailable | import("@distilled.cloud/caddy").TooManyRequests | import("@distilled.cloud/caddy").Unauthorized | import("@distilled.cloud/forgejo/Errors").UnknownForgejoError | repository.UnprocessableEntity, import("effect/unstable/http/HttpClient").HttpClient>;
 };
 export declare const ForgejoRepositoryProvider: () => import("effect/Layer").Layer<Provider.Provider<ForgejoRepository>, never, import("effect/unstable/http/HttpClient").HttpClient>;
 //# sourceMappingURL=repository.d.ts.map

package/dist/forgejo/team-member.d.ts

@@ -60,7 +60,7 @@ export declare const handlers: {
     list: () => Effect.Effect<never[], never, never>;
     read: ({ olds }: {
         olds: TeamMemberProps;
-    }) => Effect.Effect<TeamMemberAttributes | undefined, import("@distilled.cloud/core/errors").BadGateway | import("@distilled.cloud/core/errors").ConfigError | organization.Forbidden | import("@distilled.cloud/forgejo/Errors").ForgejoParseError | ForgejoTeamNotFoundError | import("@distilled.cloud/core/errors").GatewayTimeout | import("effect/unstable/http/HttpClientError").HttpClientError | import("@distilled.cloud/core/errors").InternalServerError | organization.NotFound | import("@distilled.cloud/core/errors").ServiceUnavailable | import("@distilled.cloud/core/errors").TooManyRequests | import("@distilled.cloud/core/errors").Unauthorized | import("@distilled.cloud/forgejo/Errors").UnknownForgejoError, import("effect/unstable/http/HttpClient").HttpClient>;
+    }) => Effect.Effect<TeamMemberAttributes | undefined, import("@distilled.cloud/caddy").BadGateway | import("@distilled.cloud/caddy").ConfigError | organization.Forbidden | import("@distilled.cloud/forgejo/Errors").ForgejoParseError | ForgejoTeamNotFoundError | import("@distilled.cloud/caddy").GatewayTimeout | import("effect/unstable/http/HttpClientError").HttpClientError | import("@distilled.cloud/caddy").InternalServerError | organization.NotFound | import("@distilled.cloud/caddy").ServiceUnavailable | import("@distilled.cloud/caddy").TooManyRequests | import("@distilled.cloud/caddy").Unauthorized | import("@distilled.cloud/forgejo/Errors").UnknownForgejoError, import("effect/unstable/http/HttpClient").HttpClient>;
     diff: ({ news, output }: {
         news: import("alchemy").Input<TeamMemberProps>;
         output: TeamMemberAttributes | undefined;
@@ -70,13 +70,13 @@ export declare const handlers: {
         readonly action: 'noop';
     } | {
         readonly action: 'replace';
-    } | undefined, import("@distilled.cloud/core/errors").BadGateway | import("@distilled.cloud/core/errors").ConfigError | organization.Forbidden | import("@distilled.cloud/forgejo/Errors").ForgejoParseError | ForgejoTeamNotFoundError | import("@distilled.cloud/core/errors").GatewayTimeout | import("effect/unstable/http/HttpClientError").HttpClientError | import("@distilled.cloud/core/errors").InternalServerError | organization.NotFound | import("@distilled.cloud/core/errors").ServiceUnavailable | import("@distilled.cloud/core/errors").TooManyRequests | import("@distilled.cloud/core/errors").Unauthorized | import("@distilled.cloud/forgejo/Errors").UnknownForgejoError, import("effect/unstable/http/HttpClient").HttpClient>;
+    } | undefined, import("@distilled.cloud/caddy").BadGateway | import("@distilled.cloud/caddy").ConfigError | organization.Forbidden | import("@distilled.cloud/forgejo/Errors").ForgejoParseError | ForgejoTeamNotFoundError | import("@distilled.cloud/caddy").GatewayTimeout | import("effect/unstable/http/HttpClientError").HttpClientError | import("@distilled.cloud/caddy").InternalServerError | organization.NotFound | import("@distilled.cloud/caddy").ServiceUnavailable | import("@distilled.cloud/caddy").TooManyRequests | import("@distilled.cloud/caddy").Unauthorized | import("@distilled.cloud/forgejo/Errors").UnknownForgejoError, import("effect/unstable/http/HttpClient").HttpClient>;
     reconcile: ({ news }: {
         news: TeamMemberProps;
-    }) => Effect.Effect<TeamMemberAttributes, import("@distilled.cloud/core/errors").BadGateway | import("@distilled.cloud/core/errors").ConfigError | organization.Forbidden | import("@distilled.cloud/forgejo/Errors").ForgejoParseError | ForgejoTeamNotFoundError | import("@distilled.cloud/core/errors").GatewayTimeout | import("effect/unstable/http/HttpClientError").HttpClientError | import("@distilled.cloud/core/errors").InternalServerError | organization.NotFound | import("@distilled.cloud/core/errors").ServiceUnavailable | import("@distilled.cloud/core/errors").TooManyRequests | import("@distilled.cloud/core/errors").Unauthorized | import("@distilled.cloud/forgejo/Errors").UnknownForgejoError, import("effect/unstable/http/HttpClient").HttpClient>;
+    }) => Effect.Effect<TeamMemberAttributes, import("@distilled.cloud/caddy").BadGateway | import("@distilled.cloud/caddy").ConfigError | organization.Forbidden | import("@distilled.cloud/forgejo/Errors").ForgejoParseError | ForgejoTeamNotFoundError | import("@distilled.cloud/caddy").GatewayTimeout | import("effect/unstable/http/HttpClientError").HttpClientError | import("@distilled.cloud/caddy").InternalServerError | organization.NotFound | import("@distilled.cloud/caddy").ServiceUnavailable | import("@distilled.cloud/caddy").TooManyRequests | import("@distilled.cloud/caddy").Unauthorized | import("@distilled.cloud/forgejo/Errors").UnknownForgejoError, import("effect/unstable/http/HttpClient").HttpClient>;
     delete: ({ olds }: {
         olds: TeamMemberProps;
-    }) => Effect.Effect<void, import("@distilled.cloud/core/errors").BadGateway | import("@distilled.cloud/core/errors").ConfigError | organization.Forbidden | import("@distilled.cloud/forgejo/Errors").ForgejoParseError | ForgejoTeamNotFoundError | import("@distilled.cloud/core/errors").GatewayTimeout | import("effect/unstable/http/HttpClientError").HttpClientError | import("@distilled.cloud/core/errors").InternalServerError | organization.NotFound | import("@distilled.cloud/core/errors").ServiceUnavailable | import("@distilled.cloud/core/errors").TooManyRequests | import("@distilled.cloud/core/errors").Unauthorized | import("@distilled.cloud/forgejo/Errors").UnknownForgejoError, import("effect/unstable/http/HttpClient").HttpClient>;
+    }) => Effect.Effect<void, import("@distilled.cloud/caddy").BadGateway | import("@distilled.cloud/caddy").ConfigError | organization.Forbidden | import("@distilled.cloud/forgejo/Errors").ForgejoParseError | ForgejoTeamNotFoundError | import("@distilled.cloud/caddy").GatewayTimeout | import("effect/unstable/http/HttpClientError").HttpClientError | import("@distilled.cloud/caddy").InternalServerError | organization.NotFound | import("@distilled.cloud/caddy").ServiceUnavailable | import("@distilled.cloud/caddy").TooManyRequests | import("@distilled.cloud/caddy").Unauthorized | import("@distilled.cloud/forgejo/Errors").UnknownForgejoError, import("effect/unstable/http/HttpClient").HttpClient>;
 };
 export declare const ForgejoTeamMemberProvider: () => import("effect/Layer").Layer<Provider.Provider<ForgejoTeamMember>, never, import("effect/unstable/http/HttpClient").HttpClient>;
 export {};

package/dist/github/declare-repo-baseline.d.ts

@@ -7,5 +7,5 @@ export interface DeclareRepoBaselineOptions extends RepoBaselineInput {
 export declare const declareRepoBaseline: (id: string, options: DeclareRepoBaselineOptions) => Effect.Effect<{
     repository: GitHub.Repository;
     ruleset: RepositoryRuleset;
-}, never, GitHub.GitHubCredentials | GitHub.Providers>;
+}, never, import("alchemy").Provider<RepositoryRuleset> | GitHub.Providers>;
 //# sourceMappingURL=declare-repo-baseline.d.ts.map

package/dist/github/declare-repo-baseline.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"declare-repo-baseline.d.ts","sourceRoot":"","sources":["../../src/github/declare-repo-baseline.ts"],"names":[],"mappings":"AAsBA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AAEzC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EACL,KAAK,iBAAiB,EAGvB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAE5D,MAAM,WAAW,0BAA2B,SAAQ,iBAAiB;CAAG;AAExE,eAAO,MAAM,mBAAmB,OAAQ,MAAM,WAAW,0BAA0B;;;sDAO/E,CAAC"}
+{"version":3,"file":"declare-repo-baseline.d.ts","sourceRoot":"","sources":["../../src/github/declare-repo-baseline.ts"],"names":[],"mappings":"AAsBA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AAEzC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EACL,KAAK,iBAAiB,EAGvB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAE5D,MAAM,WAAW,0BAA2B,SAAQ,iBAAiB;CAAG;AAExE,eAAO,MAAM,mBAAmB,OAAQ,MAAM,WAAW,0BAA0B;;;2EAO/E,CAAC"}

package/dist/github/index.d.ts

@@ -3,10 +3,13 @@
  * one bridge resource this house builds atop upstream GitHub: `GitHub.RepositoryRuleset`.
  *
  * ⚠️ `declareRepoPolicy`/`declareRepoBaseline` COMPOSE UPSTREAM `GitHub.Repository` PLUS THIS
- *   SUBPATH'S OWN `RepositoryRulesetProvider()` — provide BOTH `GitHub.providers()` and
- *   `RepositoryRulesetProvider()`. Before 2026-09-23 this subpath shipped no provider at all,
- *   composing only vendor resources; `RepositoryRuleset` is the one exception, and
- *   repository-ruleset.ts's header says why upstream's own `Ruleset` cannot fill the gap.
+ *   SUBPATH'S OWN `RepositoryRulesetProvider()` — provide `repoPolicyProviders()`
+ *   (repository-ruleset-providers.ts), the composed `GitHub.providers()` +
+ *   `RepositoryRulesetProvider()` layer that actually typechecks (2026-09-24: writing the two
+ *   side by side leaves `RepositoryRulesetProvider()`'s own `GitHubCredentials` requirement
+ *   unfed). Before 2026-09-23 this subpath shipped no provider at all, composing only vendor
+ *   resources; `RepositoryRuleset` is the one exception, and repository-ruleset.ts's header
+ *   says why upstream's own `Ruleset` cannot fill the gap.
  * ★ WHY THE POLICY HELPERS EXIST. "Open a pull request, let auto-merge land it" is safe only
  *   when five repository properties and four ruleset rules all agree, and every way of getting
  *   one of them wrong is silent — an auto-merge that lands on red, a force push that rewrites
@@ -22,6 +25,7 @@ export { type DeclareRepoPolicyOptions, declareRepoPolicy } from './repo-policy.
 export { type RepoBaselineInput, PUBLIC_ONLY_UNDECLARABLE, repoBaselineRuleset, repoBaselineSettings, } from './repo-baseline-data.ts';
 export { type DeclareRepoBaselineOptions, declareRepoBaseline } from './declare-repo-baseline.ts';
 export { RepositoryRuleset, RepositoryRulesetProvider, type RepositoryRulesetAttributes, type RepositoryRulesetProps, type RepositoryRulesetPullRequestRule, type RepositoryRulesetReviewerRule, type RepositoryRulesetRules, type RepositoryRulesetStatusChecksRule, } from './repository-ruleset.ts';
+export { repoPolicyProviders } from './repository-ruleset-providers.ts';
 export { RULE_TYPE_COVERAGE, type RepositoryRuleType } from './repository-ruleset-constraints.ts';
 export { BypassActorNarrowed, BypassActorWidened, DuplicateRuleset, NeverReportedContext, ReadbackMismatch, RequiredChecksOmitted, RuleNarrowed, RulesetConstraintRefused, UndeclaredLiveRule, type RepositoryRulesetError, } from './repository-ruleset-errors.ts';
 //# sourceMappingURL=index.d.ts.map

package/dist/github/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/github/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,EACL,KAAK,UAAU,EACf,KAAK,qBAAqB,EAC1B,KAAK,iBAAiB,EACtB,KAAK,4BAA4B,EACjC,UAAU,GACX,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,KAAK,wBAAwB,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACpF,OAAO,EACL,KAAK,iBAAiB,EACtB,wBAAwB,EACxB,mBAAmB,EACnB,oBAAoB,GACrB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,KAAK,0BAA0B,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AAClG,OAAO,EACL,iBAAiB,EACjB,yBAAyB,EACzB,KAAK,2BAA2B,EAChC,KAAK,sBAAsB,EAC3B,KAAK,gCAAgC,EACrC,KAAK,6BAA6B,EAClC,KAAK,sBAAsB,EAC3B,KAAK,iCAAiC,GACvC,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,kBAAkB,EAAE,KAAK,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AAClG,OAAO,EACL,mBAAmB,EACnB,kBAAkB,EAClB,gBAAgB,EAChB,oBAAoB,EACpB,gBAAgB,EAChB,qBAAqB,EACrB,YAAY,EACZ,wBAAwB,EACxB,kBAAkB,EAClB,KAAK,sBAAsB,GAC5B,MAAM,gCAAgC,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/github/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,OAAO,EACL,KAAK,UAAU,EACf,KAAK,qBAAqB,EAC1B,KAAK,iBAAiB,EACtB,KAAK,4BAA4B,EACjC,UAAU,GACX,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,KAAK,wBAAwB,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACpF,OAAO,EACL,KAAK,iBAAiB,EACtB,wBAAwB,EACxB,mBAAmB,EACnB,oBAAoB,GACrB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,KAAK,0BAA0B,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AAClG,OAAO,EACL,iBAAiB,EACjB,yBAAyB,EACzB,KAAK,2BAA2B,EAChC,KAAK,sBAAsB,EAC3B,KAAK,gCAAgC,EACrC,KAAK,6BAA6B,EAClC,KAAK,sBAAsB,EAC3B,KAAK,iCAAiC,GACvC,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AACxE,OAAO,EAAE,kBAAkB,EAAE,KAAK,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AAClG,OAAO,EACL,mBAAmB,EACnB,kBAAkB,EAClB,gBAAgB,EAChB,oBAAoB,EACpB,gBAAgB,EAChB,qBAAqB,EACrB,YAAY,EACZ,wBAAwB,EACxB,kBAAkB,EAClB,KAAK,sBAAsB,GAC5B,MAAM,gCAAgC,CAAC"}

package/dist/github/index.js

@@ -234,7 +234,7 @@ class RequiredChecksOmitted extends Data.TaggedError("RequiredChecksOmitted") {
 
 class NeverReportedContext extends Data.TaggedError("NeverReportedContext") {
   get message() {
-    return `GitHub.RepositoryRuleset: "${this.context}" has never reported success on ` + `${this.owner}/${this.repository}'s default branch. Requiring it now would leave every ` + "pull request waiting on a check that has never once reported — refused before any write.";
+    return `GitHub.RepositoryRuleset: "${this.context}" has never reported success on ` + `${this.owner}/${this.repository}'s default branch tip or any of its recent merged pull ` + "requests. Requiring it now would leave every pull request waiting on a check that has " + "never once reported — refused before any write.";
   }
 }
 
@@ -259,6 +259,53 @@ var octokitFor = (baseUrl) => Effect.gen(function* () {
   return baseUrl === undefined ? creds.octokit() : creds.octokit({ baseUrl });
 }).pipe(Effect.mapError(asError));
 var is404 = (e) => e?.status === 404;
+var RECENT_MERGED_PR_LIMIT = 10;
+var RECENT_CLOSED_PR_PAGE_SIZE = 100;
+var hasRefReportedSuccess = (octokit, owner, repo, ref, context) => Effect.gen(function* () {
+  const [checkRuns, statuses] = yield* Effect.all([
+    Effect.tryPromise({
+      try: () => octokit.rest.checks.listForRef({ owner, repo, ref, check_name: context }),
+      catch: asError
+    }),
+    Effect.tryPromise({
+      try: () => octokit.rest.repos.listCommitStatusesForRef({ owner, repo, ref }),
+      catch: asError
+    })
+  ]);
+  const checkReported = checkRuns.data.check_runs.some((run) => run.name === context && run.conclusion === "success");
+  const statusReported = statuses.data.some((status) => status.context === context && status.state === "success");
+  return checkReported || statusReported;
+});
+var recentMergedHeadShas = (octokit, owner, repo, base) => Effect.gen(function* () {
+  const closed = yield* Effect.tryPromise({
+    try: () => octokit.rest.pulls.list({
+      owner,
+      repo,
+      state: "closed",
+      base,
+      sort: "updated",
+      direction: "desc",
+      per_page: RECENT_CLOSED_PR_PAGE_SIZE
+    }),
+    catch: asError
+  });
+  return closed.data.filter((pr) => pr.merged_at !== null).slice(0, RECENT_MERGED_PR_LIMIT).map((pr) => pr.head.sha);
+});
+var contextReportedSuccess = (octokit, owner, repo, context) => Effect.gen(function* () {
+  const repository = yield* Effect.tryPromise({
+    try: () => octokit.rest.repos.get({ owner, repo }),
+    catch: asError
+  });
+  const ref = repository.data.default_branch;
+  if (yield* hasRefReportedSuccess(octokit, owner, repo, ref, context))
+    return true;
+  const heads = yield* recentMergedHeadShas(octokit, owner, repo, ref);
+  for (const sha of heads) {
+    if (yield* hasRefReportedSuccess(octokit, owner, repo, sha, context))
+      return true;
+  }
+  return false;
+});
 var makeRulesetOctokit = (baseUrl) => ({
   list: ({ owner, repo }) => Effect.gen(function* () {
     const octokit = yield* octokitFor(baseUrl);
@@ -314,24 +361,7 @@ var makeRulesetOctokit = (baseUrl) => ({
   }),
   hasContextReportedSuccess: ({ owner, repo, context }) => Effect.gen(function* () {
     const octokit = yield* octokitFor(baseUrl);
-    const repository = yield* Effect.tryPromise({
-      try: () => octokit.rest.repos.get({ owner, repo }),
-      catch: asError
-    });
-    const ref = repository.data.default_branch;
-    const [checkRuns, statuses] = yield* Effect.all([
-      Effect.tryPromise({
-        try: () => octokit.rest.checks.listForRef({ owner, repo, ref, check_name: context }),
-        catch: asError
-      }),
-      Effect.tryPromise({
-        try: () => octokit.rest.repos.listCommitStatusesForRef({ owner, repo, ref }),
-        catch: asError
-      })
-    ]);
-    const checkReported = checkRuns.data.check_runs.some((run) => run.name === context && run.conclusion === "success");
-    const statusReported = statuses.data.some((status) => status.context === context && status.state === "success");
-    return checkReported || statusReported;
+    return yield* contextReportedSuccess(octokit, owner, repo, context);
   })
 });
 
@@ -383,7 +413,9 @@ function buildPullRequestRule(rule) {
         minimum_approvals: r.minimumApprovals,
         reviewer: { id: r.reviewer.actorId, type: r.reviewer.actorType }
       })),
-      ...rule.extraApprovalForUnattributedChanges === undefined ? {} : { require_extra_approval_for_unattributed_changes: false }
+      ...rule.extraApprovalForUnattributedChanges === undefined ? {} : {
+        require_extra_approval_for_unattributed_changes: rule.extraApprovalForUnattributedChanges
+      }
     }
   };
 }
@@ -890,7 +922,7 @@ function repoBaselineSettings(input) {
     allowSquashMerge: true,
     allowMergeCommit: false,
     allowRebaseMerge: false,
-    allowAutoMerge: true,
+    allowAutoMerge: input.checks.length > 0,
     deleteBranchOnMerge: true,
     hasWiki: false
   };
@@ -943,6 +975,13 @@ var declareRepoBaseline = (id, options) => Effect7.gen(function* () {
   const ruleset = yield* owned(RepositoryRuleset(`${id}-ruleset`, repoBaselineRuleset(options)));
   return { repository, ruleset };
 });
+// src/github/repository-ruleset-providers.ts
+import * as GitHub3 from "alchemy/GitHub";
+import * as Layer from "effect/Layer";
+var repoPolicyProviders = (options) => {
+  const github = GitHub3.providers(options);
+  return Layer.mergeAll(github, RepositoryRulesetProvider().pipe(Layer.provideMerge(github)));
+};
 export {
   BypassActorNarrowed,
   BypassActorWidened,
@@ -961,8 +1000,9 @@ export {
   declareRepoPolicy,
   repoBaselineRuleset,
   repoBaselineSettings,
-  repoPolicy
+  repoPolicy,
+  repoPolicyProviders
 };
 
-//# debugId=92F34291743D117E64756E2164756E21
+//# debugId=4642631C8C22EC1064756E2164756E21
 //# sourceMappingURL=index.js.map