@homeflare/alchemy 0.31.1 → 0.32.0

package/dist/linux/providers.d.ts

@@ -13,5 +13,5 @@
  */
 import * as Layer from 'effect/Layer';
 import { type HostRunner } from '../launchd/runner.ts';
-export declare const linuxProviders: (runner: HostRunner) => Layer.Layer<import("alchemy").Provider<import("./directory.ts").HostDirectory> | import("alchemy").Provider<import("./remote-file.ts").RemoteFile> | import("alchemy").Provider<import("./unit.ts").SystemdTimer> | import("alchemy").Provider<import("./unit.ts").SystemdUnit>, never, never>;
+export declare const linuxProviders: (runner: HostRunner) => Layer.Layer<import("alchemy").Provider<import("./directory.ts").HostDirectory> | import("alchemy").Provider<import("./container.ts").PodmanContainer> | import("alchemy").Provider<import("./remote-file.ts").RemoteFile> | import("alchemy").Provider<import("./unit.ts").SystemdTimer> | import("alchemy").Provider<import("./unit.ts").SystemdUnit>, never, never>;
 //# sourceMappingURL=providers.d.ts.map

package/dist/linux/providers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"providers.d.ts","sourceRoot":"","sources":["../../src/linux/providers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,EAAE,KAAK,UAAU,EAAmB,MAAM,sBAAsB,CAAC;AAKxE,eAAO,MAAM,cAAc,WAAY,UAAU,mSAMD,CAAC"}
+{"version":3,"file":"providers.d.ts","sourceRoot":"","sources":["../../src/linux/providers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,EAAE,KAAK,UAAU,EAAmB,MAAM,sBAAsB,CAAC;AAMxE,eAAO,MAAM,cAAc,WAAY,UAAU,0WAOD,CAAC"}

package/dist/linux/systemctl.d.ts

@@ -26,11 +26,15 @@
  *   the state is read back with `show` afterwards rather than assumed.
  * ⛔ NEVER PUT `show` STDOUT WITH NO PROPERTY FILTER IN AN ERROR: the unfiltered property set
  *   carries the unit's whole environment block.
+ * ★ `SourcePath` ADDED 2026-09-24 for `Podman.Container` (container-generator.ts): a systemd
+ *   GENERATOR's output unit carries the source file it was generated from — MEASURED on CT100,
+ *   `systemctl show caddy.service -p SourcePath` -> `/etc/containers/systemd/caddy.container`. An
+ *   ordinary hand-written unit's `SourcePath` is empty, so this is additive for `Systemd.Unit`.
  */
 import type { HostRunner } from '../launchd/runner.ts';
 export declare const SYSTEMCTL = "systemctl";
 /** The properties every read asks for. ⛔ Never `Environment` — see the header. */
-export declare const SHOW_PROPERTIES: readonly ['Id', 'LoadState', 'ActiveState', 'SubState', 'UnitFileState', 'FragmentPath', 'NeedDaemonReload'];
+export declare const SHOW_PROPERTIES: readonly ['Id', 'LoadState', 'ActiveState', 'SubState', 'UnitFileState', 'FragmentPath', 'SourcePath', 'NeedDaemonReload'];
 export declare class SystemctlError extends Error {
     constructor(command: string, exitCode: number, stderr: string);
 }
@@ -45,6 +49,8 @@ export type UnitStatus = {
     readonly unitFileState?: string;
     /** The unit file systemd would read. Empty when there is none. */
     readonly fragmentPath?: string;
+    /** A GENERATOR's source file, e.g. Quadlet's `.container` file. Empty for a hand-written unit. */
+    readonly sourcePath?: string;
     /** systemd's own view that its on-disk unit files are newer than what it has loaded. */
     readonly needDaemonReload: boolean;
 };

package/dist/linux/systemctl.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"systemctl.d.ts","sourceRoot":"","sources":["../../src/linux/systemctl.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAEvD,eAAO,MAAM,SAAS,cAAc,CAAC;AAErC,kFAAkF;AAClF,eAAO,MAAM,eAAe,YAC1B,IAAI,EACJ,WAAW,EACX,aAAa,EACb,UAAU,EACV,eAAe,EACf,cAAc,EACd,kBAAkB,CACV,CAAC;AAEX,qBAAa,cAAe,SAAQ,KAAK;IACvC,YAAY,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAG5D;CACF;AAED,MAAM,MAAM,UAAU,GAAG;IACvB,6FAA6F;IAC7F,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,gEAAgE;IAChE,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,uFAAuF;IACvF,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,kEAAkE;IAClE,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,wFAAwF;IACxF,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;CACpC,CAAC;AAEF,wGAAwG;AACxG,eAAO,MAAM,SAAS,WAAY,MAAM,KAAG,GAAG,CAAC,MAAM,EAAE,MAAM,CAS5D,CAAC;AAEF,eAAO,MAAM,QAAQ,WAAY,MAAM,KAAG,UAiBzC,CAAC;AAEF,eAAO,MAAM,QAAQ,WAAkB,UAAU,QAAQ,MAAM,KAAG,OAAO,CAAC,UAAU,CAgBnF,CAAC;AAUF,kFAAkF;AAClF,eAAO,MAAM,YAAY,WAAY,UAAU,KAAG,OAAO,CAAC,IAAI,CAAmC,CAAC;AAElG,eAAO,MAAM,UAAU,WAAY,UAAU,QAAQ,MAAM,KAAG,OAAO,CAAC,IAAI,CACrC,CAAC;AAEtC,eAAO,MAAM,WAAW,WAAY,UAAU,QAAQ,MAAM,KAAG,OAAO,CAAC,IAAI,CACrC,CAAC;AAEvC,eAAO,MAAM,SAAS,WAAY,UAAU,QAAQ,MAAM,KAAG,OAAO,CAAC,IAAI,CACrC,CAAC;AAErC,eAAO,MAAM,QAAQ,WAAY,UAAU,QAAQ,MAAM,KAAG,OAAO,CAAC,IAAI,CACrC,CAAC;AAEpC;;;;GAIG;AACH,eAAO,MAAM,WAAW,WAAY,UAAU,QAAQ,MAAM,KAAG,OAAO,CAAC,IAAI,CACrC,CAAC"}
+{"version":3,"file":"systemctl.d.ts","sourceRoot":"","sources":["../../src/linux/systemctl.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAEvD,eAAO,MAAM,SAAS,cAAc,CAAC;AAErC,kFAAkF;AAClF,eAAO,MAAM,eAAe,YAC1B,IAAI,EACJ,WAAW,EACX,aAAa,EACb,UAAU,EACV,eAAe,EACf,cAAc,EACd,YAAY,EACZ,kBAAkB,CACV,CAAC;AAEX,qBAAa,cAAe,SAAQ,KAAK;IACvC,YAAY,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAG5D;CACF;AAED,MAAM,MAAM,UAAU,GAAG;IACvB,6FAA6F;IAC7F,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,gEAAgE;IAChE,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,uFAAuF;IACvF,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,kEAAkE;IAClE,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,kGAAkG;IAClG,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,wFAAwF;IACxF,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;CACpC,CAAC;AAEF,wGAAwG;AACxG,eAAO,MAAM,SAAS,WAAY,MAAM,KAAG,GAAG,CAAC,MAAM,EAAE,MAAM,CAS5D,CAAC;AAEF,eAAO,MAAM,QAAQ,WAAY,MAAM,KAAG,UAmBzC,CAAC;AAEF,eAAO,MAAM,QAAQ,WAAkB,UAAU,QAAQ,MAAM,KAAG,OAAO,CAAC,UAAU,CAgBnF,CAAC;AAUF,kFAAkF;AAClF,eAAO,MAAM,YAAY,WAAY,UAAU,KAAG,OAAO,CAAC,IAAI,CAAmC,CAAC;AAElG,eAAO,MAAM,UAAU,WAAY,UAAU,QAAQ,MAAM,KAAG,OAAO,CAAC,IAAI,CACrC,CAAC;AAEtC,eAAO,MAAM,WAAW,WAAY,UAAU,QAAQ,MAAM,KAAG,OAAO,CAAC,IAAI,CACrC,CAAC;AAEvC,eAAO,MAAM,SAAS,WAAY,UAAU,QAAQ,MAAM,KAAG,OAAO,CAAC,IAAI,CACrC,CAAC;AAErC,eAAO,MAAM,QAAQ,WAAY,UAAU,QAAQ,MAAM,KAAG,OAAO,CAAC,IAAI,CACrC,CAAC;AAEpC;;;;GAIG;AACH,eAAO,MAAM,WAAW,WAAY,UAAU,QAAQ,MAAM,KAAG,OAAO,CAAC,IAAI,CACrC,CAAC"}

package/dist/opnsense/alias-form.d.ts

@@ -0,0 +1,29 @@
+/**
+ * `Opnsense.Firewall.Alias`'s wire shape: how a live `AliasItem` becomes attributes, and the
+ * comparison that decides whether a declaration already matches it. Split out of alias.ts to
+ * keep that file under the house's 250-line cap, mirroring `../proxmox/user-wire.ts`.
+ *
+ * ⛔ SCOPE, STATED ONCE. `AliasItem` (firewall_alias.ts) carries far more fields than this props
+ *   type declares — three groups are left out on purpose:
+ *     1. Runtime counters (`current_items`, `last_updated`, `eval_nomatch`, `eval_match`,
+ *        `in_block_p`/`_b`, `in_pass_p`/`_b`, `out_block_p`/`_b`, `out_pass_p`/`_b`) — these are
+ *        the alias's hit/block statistics, not configuration, exactly the "stats" the task that
+ *        opened this family says to exclude.
+ *     2. `path_expression` — only meaningful for the `urljson` alias type; a niche field this
+ *        first import pass leaves for a later one rather than modelling one type's one field.
+ *     3. `password`/`username`/`authtype`/`expire` — the URL-fetch credential fields for the
+ *        `url`/`urltable`/`urljson` alias types. S25 (secrets stay out of props/attributes):
+ *        `password` is a literal stored credential and Alchemy persists Attributes unencrypted,
+ *        the same reasoning `../proxmox/user.ts` gives for shipping no `password` prop at all.
+ */
+import type { AliasAttributes, AliasProps } from './alias.ts';
+import type * as alias from '@distilled.cloud/opnsense/firewall_alias';
+/**
+ * ★ ATTRIBUTES AND THE DECLARATION RENDERER ARE ONE FUNCTION. Attributes ARE exactly the props a
+ *   noop declaration needs — see the exported `propsFromLive` alias in alias.ts's barrel and
+ *   `alias-form.test.ts`'s round-trip test (`matches(attributesOf(uuid, live), attributesOf(uuid,
+ *   live))` is always true by construction, and so is the general case).
+ */
+export declare const attributesOf: (uuid: string, live: alias.AliasItem) => AliasAttributes;
+export declare const matches: (attributes: AliasAttributes, props: AliasProps) => boolean;
+//# sourceMappingURL=alias-form.d.ts.map

package/dist/opnsense/alias-form.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"alias-form.d.ts","sourceRoot":"","sources":["../../src/opnsense/alias-form.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,KAAK,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAC9D,OAAO,KAAK,KAAK,KAAK,MAAM,0CAA0C,CAAC;AAGvE;;;;;GAKG;AACH,eAAO,MAAM,YAAY,SAAU,MAAM,QAAQ,KAAK,CAAC,SAAS,KAAG,eAYjE,CAAC;AAEH,eAAO,MAAM,OAAO,eAAgB,eAAe,SAAS,UAAU,KAAG,OAUC,CAAC"}

package/dist/opnsense/alias.d.ts

@@ -0,0 +1,81 @@
+import { Resource } from 'alchemy';
+import * as Provider from 'alchemy/Provider';
+import * as Alias from '@distilled.cloud/opnsense/firewall_alias';
+import type { OpnsenseOpError } from '@distilled.cloud/opnsense/Protocol';
+import * as Effect from 'effect/Effect';
+import { attributesOf } from './alias-form.ts';
+import type { OpnsenseRequirements, OpnsenseSpec } from './resource.ts';
+export interface AliasProps {
+    /** OPNsense-assigned uuid — see the file header on why this is the only identity to declare by. */
+    readonly uuid: string;
+    readonly name: string;
+    /** e.g. `host`, `network`, `port`, `url`, `geoip`, `networkgroup` — OPNsense's own alias types. */
+    readonly type: string;
+    /** Default true, matching OPNsense's own `enabled=1`. */
+    readonly enabled?: boolean;
+    /** The alias's members — a host list, a CIDR, a URL, depending on `type`. */
+    readonly content?: string;
+    readonly interface?: string;
+    /** `IPv4` or `IPv6`, for a `geoip`/`networkgroup` alias; comma-joined on the wire (wire.ts). */
+    readonly proto?: string;
+    readonly counters?: boolean;
+    /** Minutes between refreshes, for a `url`/`urltable` alias. */
+    readonly updatefreq?: number;
+    readonly categories?: readonly string[];
+    readonly description?: string;
+}
+export interface AliasAttributes {
+    readonly uuid: string;
+    readonly name: string;
+    readonly type: string;
+    readonly enabled: boolean;
+    readonly content: string;
+    readonly interface: string;
+    readonly proto: string;
+    readonly counters: boolean;
+    readonly updatefreq: number;
+    readonly categories: readonly string[];
+    readonly description: string;
+}
+export interface OpnsenseFirewallAlias extends Resource<'Opnsense.Firewall.Alias', AliasProps, AliasAttributes, never, OpnsenseRequirements> {
+}
+export declare const OpnsenseFirewallAlias: import("alchemy").ResourceClass<OpnsenseFirewallAlias>;
+export declare const isOpnsenseFirewallAlias: (value: unknown) => value is OpnsenseFirewallAlias;
+/** Exported for direct testing against `fake-opnsense.ts` — the same seam `../discord/*.ts` uses. */
+export declare const spec: OpnsenseSpec<AliasProps, Alias.AliasItem, AliasAttributes, OpnsenseOpError>;
+/**
+ * The pure declaration renderer: given the uuid `get()`'s map key names and the `AliasItem`
+ * decoded at that key, return the props a declaration needs so `firewallAlias.spec.matches`
+ * reports noop against it. A later import script iterates `Object.entries(map)` and calls this
+ * once per row to generate an `alchemy.run.ts` row — see `alias-form.test.ts`'s round-trip test.
+ */
+export declare const propsFromLive: typeof attributesOf;
+export declare const handlers: {
+    list: () => Effect.Effect<never[], never, never>;
+    nuke: {
+        skip: boolean;
+    };
+    read: ({ olds, output }: {
+        olds: AliasProps;
+        output: AliasAttributes | undefined;
+    }) => Effect.Effect<AliasAttributes | undefined, OpnsenseOpError, import("effect/unstable/http/HttpClient").HttpClient>;
+    diff: ({ news, output }: {
+        news: import("alchemy").Input<AliasProps>;
+        output: AliasAttributes | undefined;
+    }) => Effect.Effect<{
+        readonly action: 'update';
+    } | {
+        readonly action: 'noop';
+    } | undefined, OpnsenseOpError, import("effect/unstable/http/HttpClient").HttpClient>;
+    reconcile: ({ news }: {
+        news: AliasProps;
+    }) => Effect.Effect<never, import("./policy.ts").OpnsenseWriteRefused | OpnsenseOpError, import("effect/unstable/http/HttpClient").HttpClient>;
+    delete: ({ olds }: {
+        olds: AliasProps;
+    }) => Effect.Effect<never, import("./policy.ts").OpnsenseWriteRefused, never>;
+};
+export declare const OpnsenseFirewallAliasProvider: () => import("effect/Layer").Layer<Provider.Provider<OpnsenseFirewallAlias>, never, import("effect/unstable/http/HttpClient").HttpClient>;
+/** `firewallAlias('name-alias', { uuid, name, type })` — `adopt(true)` piped by default (H5), so
+ * declaring a live alias's own uuid takes it over silently instead of failing `OwnedBySomeoneElse`. */
+export declare const firewallAlias: (id: string, props: AliasProps) => Effect.Effect<OpnsenseFirewallAlias, never, import("effect/unstable/http/HttpClient").HttpClient>;
+//# sourceMappingURL=alias.d.ts.map

package/dist/opnsense/alias.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"alias.d.ts","sourceRoot":"","sources":["../../src/opnsense/alias.ts"],"names":[],"mappings":"AA2BA,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,KAAK,QAAQ,MAAM,kBAAkB,CAAC;AAC7C,OAAO,KAAK,KAAK,MAAM,0CAA0C,CAAC;AAClE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,YAAY,EAAW,MAAM,iBAAiB,CAAC;AACxD,OAAO,KAAK,EAAE,oBAAoB,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAGxE,MAAM,WAAW,UAAU;IACzB,mGAAmG;IACnG,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,mGAAmG;IACnG,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,yDAAyD;IACzD,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAC3B,6EAA6E;IAC7E,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,gGAAgG;IAChG,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAC5B,+DAA+D;IAC/D,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACxC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,qBAAsB,SAAQ,QAAQ,CACrD,yBAAyB,EACzB,UAAU,EACV,eAAe,EACf,KAAK,EACL,oBAAoB,CACrB;CAAG;AAEJ,eAAO,MAAM,qBAAqB,wDAGhC,CAAC;AAEH,eAAO,MAAM,uBAAuB,UAAW,OAAO,KAAG,KAAK,IAAI,qBAGA,CAAC;AAEnE,qGAAqG;AACrG,eAAO,MAAM,IAAI,EAAE,YAAY,CAAC,UAAU,EAAE,KAAK,CAAC,SAAS,EAAE,eAAe,EAAE,eAAe,CAM5F,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,aAAa,qBAAe,CAAC;AAE1C,eAAO,MAAM,QAAQ;;;;;;;;;;;;;;;;;;;;;;;CAAyB,CAAC;AAE/C,eAAO,MAAM,6BAA6B,2IAIvC,CAAC;AAEJ;uGACuG;AACvG,eAAO,MAAM,aAAa,OAAQ,MAAM,SAAS,UAAU,sGACP,CAAC"}

package/dist/opnsense/category-form.d.ts

@@ -0,0 +1,10 @@
+/**
+ * `Opnsense.Firewall.Category`'s wire shape: how a live `CategoryItem` becomes attributes, and
+ * the comparison that decides whether a declaration already matches it. Mirrors alias-form.ts.
+ */
+import type { CategoryAttributes, CategoryProps } from './category.ts';
+import type * as category from '@distilled.cloud/opnsense/firewall_category';
+/** ★ Attributes and the declaration renderer are one function — see alias-form.ts's header note. */
+export declare const attributesOf: (uuid: string, live: category.CategoryItem) => CategoryAttributes;
+export declare const matches: (attributes: CategoryAttributes, props: CategoryProps) => boolean;
+//# sourceMappingURL=category-form.d.ts.map

package/dist/opnsense/category-form.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"category-form.d.ts","sourceRoot":"","sources":["../../src/opnsense/category-form.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AACvE,OAAO,KAAK,KAAK,QAAQ,MAAM,6CAA6C,CAAC;AAG7E,oGAAoG;AACpG,eAAO,MAAM,YAAY,SAAU,MAAM,QAAQ,QAAQ,CAAC,YAAY,KAAG,kBAKvE,CAAC;AAEH,eAAO,MAAM,OAAO,eAAgB,kBAAkB,SAAS,aAAa,KAAG,OAGrC,CAAC"}

package/dist/opnsense/category.d.ts

@@ -0,0 +1,58 @@
+import { Resource } from 'alchemy';
+import * as Provider from 'alchemy/Provider';
+import * as Category from '@distilled.cloud/opnsense/firewall_category';
+import type { OpnsenseOpError } from '@distilled.cloud/opnsense/Protocol';
+import * as Effect from 'effect/Effect';
+import { attributesOf } from './category-form.ts';
+import type { OpnsenseRequirements, OpnsenseSpec } from './resource.ts';
+export interface CategoryProps {
+    readonly uuid: string;
+    /** Pattern `/[^,]+/` on the wire — a comma in the name would collide with the multi-select join. */
+    readonly name: string;
+    /** Whether OPNsense itself created this category (its own subsystems tag things this way); a
+     * category a person made is `false`/absent. */
+    readonly auto?: boolean;
+    /** Six hex digits, no `#`, e.g. `0000FF`. */
+    readonly color?: string;
+}
+export interface CategoryAttributes {
+    readonly uuid: string;
+    readonly name: string;
+    readonly auto: boolean;
+    readonly color: string;
+}
+export interface OpnsenseFirewallCategory extends Resource<'Opnsense.Firewall.Category', CategoryProps, CategoryAttributes, never, OpnsenseRequirements> {
+}
+export declare const OpnsenseFirewallCategory: import("alchemy").ResourceClass<OpnsenseFirewallCategory>;
+export declare const isOpnsenseFirewallCategory: (value: unknown) => value is OpnsenseFirewallCategory;
+export declare const spec: OpnsenseSpec<CategoryProps, Category.CategoryItem, CategoryAttributes, OpnsenseOpError>;
+/** The pure declaration renderer — see alias.ts's `propsFromLive` for the full contract note. */
+export declare const propsFromLive: typeof attributesOf;
+export declare const handlers: {
+    list: () => Effect.Effect<never[], never, never>;
+    nuke: {
+        skip: boolean;
+    };
+    read: ({ olds, output }: {
+        olds: CategoryProps;
+        output: CategoryAttributes | undefined;
+    }) => Effect.Effect<CategoryAttributes | undefined, OpnsenseOpError, import("effect/unstable/http/HttpClient").HttpClient>;
+    diff: ({ news, output }: {
+        news: import("alchemy").Input<CategoryProps>;
+        output: CategoryAttributes | undefined;
+    }) => Effect.Effect<{
+        readonly action: 'update';
+    } | {
+        readonly action: 'noop';
+    } | undefined, OpnsenseOpError, import("effect/unstable/http/HttpClient").HttpClient>;
+    reconcile: ({ news }: {
+        news: CategoryProps;
+    }) => Effect.Effect<never, import("./policy.ts").OpnsenseWriteRefused | OpnsenseOpError, import("effect/unstable/http/HttpClient").HttpClient>;
+    delete: ({ olds }: {
+        olds: CategoryProps;
+    }) => Effect.Effect<never, import("./policy.ts").OpnsenseWriteRefused, never>;
+};
+export declare const OpnsenseFirewallCategoryProvider: () => import("effect/Layer").Layer<Provider.Provider<OpnsenseFirewallCategory>, never, import("effect/unstable/http/HttpClient").HttpClient>;
+/** `firewallCategory('name', { uuid, name })` — `adopt(true)` piped by default (H5). */
+export declare const firewallCategory: (id: string, props: CategoryProps) => Effect.Effect<OpnsenseFirewallCategory, never, import("effect/unstable/http/HttpClient").HttpClient>;
+//# sourceMappingURL=category.d.ts.map

package/dist/opnsense/category.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"category.d.ts","sourceRoot":"","sources":["../../src/opnsense/category.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,KAAK,QAAQ,MAAM,kBAAkB,CAAC;AAC7C,OAAO,KAAK,QAAQ,MAAM,6CAA6C,CAAC;AACxE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,YAAY,EAAW,MAAM,oBAAoB,CAAC;AAC3D,OAAO,KAAK,EAAE,oBAAoB,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAGxE,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,oGAAoG;IACpG,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB;mDAC+C;IAC/C,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;IACxB,6CAA6C;IAC7C,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,wBAAyB,SAAQ,QAAQ,CACxD,4BAA4B,EAC5B,aAAa,EACb,kBAAkB,EAClB,KAAK,EACL,oBAAoB,CACrB;CAAG;AAEJ,eAAO,MAAM,wBAAwB,2DAKpC,CAAC;AAEF,eAAO,MAAM,0BAA0B,UAAW,OAAO,KAAG,KAAK,IAAI,wBAGA,CAAC;AAEtE,eAAO,MAAM,IAAI,EAAE,YAAY,CAC7B,aAAa,EACb,QAAQ,CAAC,YAAY,EACrB,kBAAkB,EAClB,eAAe,CAOhB,CAAC;AAEF,iGAAiG;AACjG,eAAO,MAAM,aAAa,qBAAe,CAAC;AAE1C,eAAO,MAAM,QAAQ;;;;;;;;;;;;;;;;;;;;;;;CAAyB,CAAC;AAE/C,eAAO,MAAM,gCAAgC,8IAI1C,CAAC;AAEJ,wFAAwF;AACxF,eAAO,MAAM,gBAAgB,OAAQ,MAAM,SAAS,aAAa,yGACV,CAAC"}

package/dist/opnsense/credentials.d.ts

@@ -0,0 +1,36 @@
+/**
+ * OPNsense credentials — a key/secret pair REFERENCE, resolved lazily (S24), never a prop.
+ *
+ * ⛔ NO KEY OR SECRET IS EVER A PROP OR AN ATTRIBUTE. Alchemy persists Attributes unencrypted
+ *   (`State/StateEncoding.ts@v2.0.0-beta.79#encodeState`), so nothing a stack file holds may be a
+ *   credential. `@distilled.cloud/opnsense/Credentials` already ships exactly the shape S24 asks
+ *   for: `Credentials` is a lazy `Context.Service<Credentials, Effect.Effect<Config>>`, resolved
+ *   on the calling fiber inside each operation (`OpnsenseProtocol`'s `encode`), never at layer
+ *   build. This file re-exports it rather than re-implementing it — the same choice
+ *   `../discord/credentials.ts` made for its own SDK's `CredentialsFromEnv`.
+ *
+ * ★ `CredentialsFromEnv` READS `OPNSENSE_URL` / `OPNSENSE_API_KEY` / `OPNSENSE_API_SECRET` via
+ *   Effect's `Config` (the SDK's own `credentials.ts` — no vendor-standard env var names exist
+ *   for OPNsense's API, unlike Forgejo's `FORGEJO_URL`). The resource never sees the values,
+ *   only the deploy process's environment does, and the secret is `Redacted` the moment it is
+ *   read — exactly the "reference, never a value" shape S25 asks for.
+ *
+ * ⚠️ NO OpenBao MINT YET, THE SAME GAP `../discord/credentials.ts` DOCUMENTS. H8's target
+ *   (`Alchemy.Stack({ secrets })`) is unreleased (PR 1728, `main` only). Until the estate is on a
+ *   release that carries it, the deploy process's own environment is the credential seam — a
+ *   human or CI job exports the three `OPNSENSE_*` variables from wherever it mints them. This
+ *   package never mints, reads or logs the key/secret itself; it only names the variables.
+ */
+import type { Config } from '@distilled.cloud/opnsense/Credentials';
+import { Credentials, CredentialsFromEnv, credentials } from '@distilled.cloud/opnsense/Credentials';
+/** Re-exported so a consumer never has to reach into `@distilled.cloud/opnsense` by hand. */
+export { Credentials, CredentialsFromEnv, credentials };
+export type { Config as OpnsenseCredentialsConfig };
+/**
+ * `OpnsenseCredentials.fromEnv()` — the layer `opnsenseHandlers` (resource.ts) provides by
+ * default. A thin, named alias over `CredentialsFromEnv` so a stack's import reads `Opnsense.*`
+ * throughout, the way `../discord/credentials.ts`'s `fromEnv()` keeps `Discord.*` names at the
+ * front door.
+ */
+export declare const fromEnv: () => import("effect/Layer").Layer<Credentials, never, never>;
+//# sourceMappingURL=credentials.d.ts.map

package/dist/opnsense/credentials.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials.d.ts","sourceRoot":"","sources":["../../src/opnsense/credentials.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,uCAAuC,CAAC;AACpE,OAAO,EACL,WAAW,EACX,kBAAkB,EAClB,WAAW,EACZ,MAAM,uCAAuC,CAAC;AAE/C,6FAA6F;AAC7F,OAAO,EAAE,WAAW,EAAE,kBAAkB,EAAE,WAAW,EAAE,CAAC;AACxD,YAAY,EAAE,MAAM,IAAI,yBAAyB,EAAE,CAAC;AAEpD;;;;;GAKG;AACH,eAAO,MAAM,OAAO,+DAA2B,CAAC"}

package/dist/opnsense/fake-opnsense.d.ts

@@ -0,0 +1,51 @@
+/**
+ * A minimal in-memory OPNsense API for this family's tests — an in-memory `fetch` handed to
+ * Effect's real `FetchHttpClient` through its `Fetch` reference, mirroring `../discord/fake-discord.ts`
+ * (itself mirroring `../netbox/fake-netbox.ts`). Tests exercise distilled's REAL path assembly,
+ * JSON encode/decode and Basic-auth header construction — nothing about any of that is
+ * re-implemented here, only the wire responses a scenario needs.
+ *
+ * ⛔ TEST-ONLY, AND NO NETWORK. No provider imports this file. The base URL is RFC 2606
+ *   `opnsense.example.com`, and the key/secret are placeholders — never the edge's real ones,
+ *   which this task has no access to and must not look for (see policy.ts's header).
+ */
+import { type Credentials } from '@distilled.cloud/opnsense/Credentials';
+import * as Layer from 'effect/Layer';
+export declare const FAKE_BASE = "https://opnsense.example.com";
+export declare const FAKE_KEY = "placeholder-opnsense-key";
+export declare const FAKE_SECRET = "placeholder-opnsense-secret";
+export type Seen = {
+    readonly method: string;
+    readonly path: string;
+    readonly body: unknown;
+};
+export declare const fakeFailure: (status: number, body: unknown) => Response;
+/**
+ * `route` decides every response; this wrapper only records what was sent and adapts to
+ * `globalThis.fetch`'s signature. A test that expects no request at all asserts `seen` is empty.
+ */
+export declare const fakeOpnsense: (route: (method: string, url: URL, body: unknown, callNumber: number) => Response) => {
+    fetch: typeof fetch;
+    seen: Seen[];
+};
+/**
+ * ★ FAILS THE TEST ITSELF ON ANY NON-GET REQUEST — the "no SDK write operation is reachable"
+ *   proof `write-refusal.test.ts` and every resource's own test build on. `respond` only ever
+ *   sees a GET, so it never has to branch on method.
+ */
+export declare const getOnlyOrFail: (respond: (url: URL, callNumber: number) => Response) => {
+    fetch: typeof fetch;
+    seen: Seen[];
+};
+/**
+ * distilled Credentials + the real FetchHttpClient over the fake — `OpnsenseOpContext`, what
+ * every resource file's exported `spec.fetchLive` needs.
+ *
+ * ⚠️ NOT PAIRED WITH `handlers` (each resource file's `opnsenseHandlers(spec)` export). `handlers`
+ *   bakes in `CredentialsFromEnv`, which resolves through Effect's `Config` snapshot of
+ *   `process.env` — untestable against a fake server without setting real env vars a parallel
+ *   test run could race on. So a test calls `spec.fetchLive` (or `opnsenseOperations(spec)`)
+ *   directly, with this explicit layer, exercising exactly the same production code.
+ */
+export declare const fakeOpnsenseLayer: (fetchFn: typeof globalThis.fetch, creds?: Layer.Layer<Credentials>) => Layer.Layer<Credentials | import("effect/unstable/http/HttpClient").HttpClient, never, never>;
+//# sourceMappingURL=fake-opnsense.d.ts.map

package/dist/opnsense/fake-opnsense.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fake-opnsense.d.ts","sourceRoot":"","sources":["../../src/opnsense/fake-opnsense.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,KAAK,WAAW,EAAe,MAAM,uCAAuC,CAAC;AACtF,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AAGtC,eAAO,MAAM,SAAS,iCAAiC,CAAC;AACxD,eAAO,MAAM,QAAQ,6BAA6B,CAAC;AACnD,eAAO,MAAM,WAAW,gCAAgC,CAAC;AAEzD,MAAM,MAAM,IAAI,GAAG;IAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAA;CAAE,CAAC;AAE9F,eAAO,MAAM,WAAW,WAAY,MAAM,QAAQ,OAAO,aAAoC,CAAC;AAE9F;;;GAGG;AACH,eAAO,MAAM,YAAY,UAChB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,KAAK,QAAQ;;;CAejF,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,aAAa,YAAa,CAAC,GAAG,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,KAAK,QAAQ;;;CAS7E,CAAC;AAEL;;;;;;;;;GASG;AACH,eAAO,MAAM,iBAAiB,YACnB,OAAO,UAAU,CAAC,KAAK,UACzB,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,kGAK+D,CAAC"}

package/dist/opnsense/group-form.d.ts

@@ -0,0 +1,11 @@
+/**
+ * `Opnsense.Firewall.Group`'s wire shape: how a live `GroupItem` (an interface group) becomes
+ * attributes, and the comparison that decides whether a declaration already matches it. Mirrors
+ * alias-form.ts.
+ */
+import type { GroupAttributes, GroupProps } from './group.ts';
+import type * as group from '@distilled.cloud/opnsense/firewall_group';
+/** ★ Attributes and the declaration renderer are one function — see alias-form.ts's header note. */
+export declare const attributesOf: (uuid: string, live: group.GroupItem) => GroupAttributes;
+export declare const matches: (attributes: GroupAttributes, props: GroupProps) => boolean;
+//# sourceMappingURL=group-form.d.ts.map

package/dist/opnsense/group-form.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"group-form.d.ts","sourceRoot":"","sources":["../../src/opnsense/group-form.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,KAAK,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAC9D,OAAO,KAAK,KAAK,KAAK,MAAM,0CAA0C,CAAC;AAGvE,oGAAoG;AACpG,eAAO,MAAM,YAAY,SAAU,MAAM,QAAQ,KAAK,CAAC,SAAS,KAAG,eAOjE,CAAC;AAEH,eAAO,MAAM,OAAO,eAAgB,eAAe,SAAS,UAAU,KAAG,OAKL,CAAC"}

package/dist/opnsense/group.d.ts

@@ -0,0 +1,62 @@
+import { Resource } from 'alchemy';
+import * as Provider from 'alchemy/Provider';
+import * as Group from '@distilled.cloud/opnsense/firewall_group';
+import type { OpnsenseOpError } from '@distilled.cloud/opnsense/Protocol';
+import * as Effect from 'effect/Effect';
+import { attributesOf } from './group-form.ts';
+import type { OpnsenseRequirements, OpnsenseSpec } from './resource.ts';
+export interface GroupProps {
+    readonly uuid: string;
+    /** OPNsense's own `GroupNameField` — the interface group's name. */
+    readonly ifname: string;
+    /** Member interface names (`lan`, `opt1`, …), not their descriptions. */
+    readonly members: readonly string[];
+    /** OPNsense's own "no group" flag — excludes it from certain interface pickers. Default false. */
+    readonly nogroup?: boolean;
+    /** UI list position, `0`..`9999`. Carries no evaluation-order meaning for this object type. */
+    readonly sequence?: number;
+    readonly description?: string;
+}
+export interface GroupAttributes {
+    readonly uuid: string;
+    readonly ifname: string;
+    readonly members: readonly string[];
+    readonly nogroup: boolean;
+    readonly sequence: number;
+    readonly description: string;
+}
+export interface OpnsenseFirewallGroup extends Resource<'Opnsense.Firewall.Group', GroupProps, GroupAttributes, never, OpnsenseRequirements> {
+}
+export declare const OpnsenseFirewallGroup: import("alchemy").ResourceClass<OpnsenseFirewallGroup>;
+export declare const isOpnsenseFirewallGroup: (value: unknown) => value is OpnsenseFirewallGroup;
+export declare const spec: OpnsenseSpec<GroupProps, Group.GroupItem, GroupAttributes, OpnsenseOpError>;
+/** The pure declaration renderer — see alias.ts's `propsFromLive` for the full contract note. */
+export declare const propsFromLive: typeof attributesOf;
+export declare const handlers: {
+    list: () => Effect.Effect<never[], never, never>;
+    nuke: {
+        skip: boolean;
+    };
+    read: ({ olds, output }: {
+        olds: GroupProps;
+        output: GroupAttributes | undefined;
+    }) => Effect.Effect<GroupAttributes | undefined, OpnsenseOpError, import("effect/unstable/http/HttpClient").HttpClient>;
+    diff: ({ news, output }: {
+        news: import("alchemy").Input<GroupProps>;
+        output: GroupAttributes | undefined;
+    }) => Effect.Effect<{
+        readonly action: 'update';
+    } | {
+        readonly action: 'noop';
+    } | undefined, OpnsenseOpError, import("effect/unstable/http/HttpClient").HttpClient>;
+    reconcile: ({ news }: {
+        news: GroupProps;
+    }) => Effect.Effect<never, import("./policy.ts").OpnsenseWriteRefused | OpnsenseOpError, import("effect/unstable/http/HttpClient").HttpClient>;
+    delete: ({ olds }: {
+        olds: GroupProps;
+    }) => Effect.Effect<never, import("./policy.ts").OpnsenseWriteRefused, never>;
+};
+export declare const OpnsenseFirewallGroupProvider: () => import("effect/Layer").Layer<Provider.Provider<OpnsenseFirewallGroup>, never, import("effect/unstable/http/HttpClient").HttpClient>;
+/** `firewallGroup('name', { uuid, ifname, members })` — `adopt(true)` piped by default (H5). */
+export declare const firewallGroup: (id: string, props: GroupProps) => Effect.Effect<OpnsenseFirewallGroup, never, import("effect/unstable/http/HttpClient").HttpClient>;
+//# sourceMappingURL=group.d.ts.map

package/dist/opnsense/group.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"group.d.ts","sourceRoot":"","sources":["../../src/opnsense/group.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,KAAK,QAAQ,MAAM,kBAAkB,CAAC;AAC7C,OAAO,KAAK,KAAK,MAAM,0CAA0C,CAAC;AAClE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,YAAY,EAAW,MAAM,iBAAiB,CAAC;AACxD,OAAO,KAAK,EAAE,oBAAoB,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAGxE,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,oEAAoE;IACpE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,yEAAyE;IACzE,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,kGAAkG;IAClG,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAC3B,+FAA+F;IAC/F,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,qBAAsB,SAAQ,QAAQ,CACrD,yBAAyB,EACzB,UAAU,EACV,eAAe,EACf,KAAK,EACL,oBAAoB,CACrB;CAAG;AAEJ,eAAO,MAAM,qBAAqB,wDAEhC,CAAC;AAEH,eAAO,MAAM,uBAAuB,UAAW,OAAO,KAAG,KAAK,IAAI,qBAGA,CAAC;AAEnE,eAAO,MAAM,IAAI,EAAE,YAAY,CAAC,UAAU,EAAE,KAAK,CAAC,SAAS,EAAE,eAAe,EAAE,eAAe,CAM5F,CAAC;AAEF,iGAAiG;AACjG,eAAO,MAAM,aAAa,qBAAe,CAAC;AAE1C,eAAO,MAAM,QAAQ;;;;;;;;;;;;;;;;;;;;;;;CAAyB,CAAC;AAE/C,eAAO,MAAM,6BAA6B,2IAIvC,CAAC;AAEJ,gGAAgG;AAChG,eAAO,MAAM,aAAa,OAAQ,MAAM,SAAS,UAAU,sGACP,CAAC"}

package/dist/opnsense/index.d.ts

@@ -0,0 +1,16 @@
+/**
+ * OPNsense providers for Alchemy — READ-ONLY (policy.ts). `reconcile` and `delete` on every
+ * resource here always refuse; this family exists to plan and adopt against the live edge,
+ * never to change it.
+ *
+ * ⛔ THIS BARREL IS THE PUBLIC API, AND IT IS DELIBERATELY SMALLER THAN THE DIRECTORY.
+ *   `resource.ts`, `wire.ts`, `policy.ts` and the three `*-form.ts` files are internals every
+ *   resource file shares — a consumer builds against the three resources and `providers()`.
+ */
+export { firewallAlias, isOpnsenseFirewallAlias, OpnsenseFirewallAlias, OpnsenseFirewallAliasProvider, propsFromLive as aliasPropsFromLive, type AliasAttributes, type AliasProps, } from './alias.ts';
+export { firewallCategory, isOpnsenseFirewallCategory, OpnsenseFirewallCategory, OpnsenseFirewallCategoryProvider, propsFromLive as categoryPropsFromLive, type CategoryAttributes, type CategoryProps, } from './category.ts';
+export { firewallGroup, isOpnsenseFirewallGroup, OpnsenseFirewallGroup, OpnsenseFirewallGroupProvider, propsFromLive as groupPropsFromLive, type GroupAttributes, type GroupProps, } from './group.ts';
+export { Credentials, CredentialsFromEnv, type OpnsenseCredentialsConfig, credentials, fromEnv, } from './credentials.ts';
+export { OpnsenseWriteRefused, type OpnsenseWriteAction } from './policy.ts';
+export { providers } from './providers.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/opnsense/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/opnsense/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EACL,aAAa,EACb,uBAAuB,EACvB,qBAAqB,EACrB,6BAA6B,EAC7B,aAAa,IAAI,kBAAkB,EACnC,KAAK,eAAe,EACpB,KAAK,UAAU,GAChB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,gBAAgB,EAChB,0BAA0B,EAC1B,wBAAwB,EACxB,gCAAgC,EAChC,aAAa,IAAI,qBAAqB,EACtC,KAAK,kBAAkB,EACvB,KAAK,aAAa,GACnB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,aAAa,EACb,uBAAuB,EACvB,qBAAqB,EACrB,6BAA6B,EAC7B,aAAa,IAAI,kBAAkB,EACnC,KAAK,eAAe,EACpB,KAAK,UAAU,GAChB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,WAAW,EACX,kBAAkB,EAClB,KAAK,yBAAyB,EAC9B,WAAW,EACX,OAAO,GACR,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,oBAAoB,EAAE,KAAK,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAC7E,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC"}