@homeflare/alchemy 0.46.0 → 0.47.0

package/docs/telemetry.md

@@ -3,7 +3,7 @@
 `telemetryLayer` builds an OTLP/HTTP `Layer` for a stack's own `providers` — spans, logs and
 metrics from `Effect.withSpan`, `HttpClient` calls and alchemy's own plan/apply engine, exported to
 whatever OTLP collector a consumer names. Read 2026-09-26 against `alchemy@2.0.0-beta.79` and
-`effect@4.0.0-rc.115`'s `effect/unstable/observability` module (this file names no estate host — see
+`effect@4.0.0-rc.115`'s `effect/unstable/observability` module (now `effect/observability`, effect 4.0.1) (this file names no estate host — see
 below). See `telemetry-spike.md` for what was actually measured arriving at a collector.
 
 Bodies are sent **protobuf-encoded** (`content-type: application/x-protobuf`), not JSON — measured

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@homeflare/alchemy",
-  "version": "0.46.0",
+  "version": "0.47.0",
   "description": "Custom Alchemy providers for Cloudflare, Proxmox, OpenBao, Forgejo, Talos, launchd and Caddy, and a verifier that proves adoptions are no-ops.",
   "homepage": "https://github.com/taslabs-net/homeflare-kit/tree/main/packages/alchemy#readme",
   "bugs": "https://github.com/taslabs-net/homeflare-kit/issues",
@@ -130,27 +130,27 @@
     "access": "public"
   },
   "dependencies": {
-    "@distilled.cloud/caddy": "npm:@homeflare/distilled-caddy@0.2.2",
-    "@distilled.cloud/grafana": "npm:@homeflare/distilled-grafana@0.2.0",
-    "@distilled.cloud/litellm": "npm:@homeflare/distilled-litellm@0.4.0",
-    "@distilled.cloud/netbox": "npm:@homeflare/distilled-netbox@0.3.0",
-    "@distilled.cloud/openbao": "npm:@homeflare/distilled-openbao@0.2.2",
-    "@distilled.cloud/opnsense": "npm:@homeflare/distilled-opnsense@0.3.0",
-    "@distilled.cloud/paperless-ngx": "npm:@homeflare/distilled-paperless-ngx@0.3.0",
-    "@distilled.cloud/proxmox": "npm:@homeflare/distilled-proxmox@0.3.4",
-    "@distilled.cloud/proxmox-backup": "npm:@homeflare/distilled-proxmox-backup@0.3.1",
-    "@distilled.cloud/unifi-network": "npm:@homeflare/distilled-unifi-network@0.4.0"
+    "@distilled.cloud/caddy": "npm:@homeflare/distilled-caddy@0.2.3",
+    "@distilled.cloud/grafana": "npm:@homeflare/distilled-grafana@0.2.1",
+    "@distilled.cloud/litellm": "npm:@homeflare/distilled-litellm@0.4.1",
+    "@distilled.cloud/netbox": "npm:@homeflare/distilled-netbox@0.3.1",
+    "@distilled.cloud/openbao": "npm:@homeflare/distilled-openbao@0.2.3",
+    "@distilled.cloud/opnsense": "npm:@homeflare/distilled-opnsense@0.3.1",
+    "@distilled.cloud/paperless-ngx": "npm:@homeflare/distilled-paperless-ngx@0.3.1",
+    "@distilled.cloud/proxmox": "npm:@homeflare/distilled-proxmox@0.3.5",
+    "@distilled.cloud/proxmox-backup": "npm:@homeflare/distilled-proxmox-backup@0.3.2",
+    "@distilled.cloud/unifi-network": "npm:@homeflare/distilled-unifi-network@0.4.1"
   },
   "peerDependencies": {
-    "@distilled.cloud/argocd": "1.0.0-rc.12",
-    "@distilled.cloud/cloudflare": "1.0.0-rc.12",
-    "@distilled.cloud/discord": "1.0.0-rc.12",
-    "@distilled.cloud/forgejo": "1.0.0-rc.12",
-    "@distilled.cloud/google-workspace": "1.0.0-rc.12",
-    "@effect/platform-node": "4.0.0-rc.115",
-    "@effect/sql-pg": "4.0.0-rc.115",
-    "alchemy": "2.0.0-beta.79",
-    "effect": "4.0.0-rc.115",
+    "@distilled.cloud/argocd": "1.0.0-rc.13",
+    "@distilled.cloud/cloudflare": "1.0.0-rc.13",
+    "@distilled.cloud/discord": "1.0.0-rc.13",
+    "@distilled.cloud/forgejo": "1.0.0-rc.13",
+    "@distilled.cloud/google-workspace": "1.0.0-rc.13",
+    "@effect/platform-node": "4.0.1",
+    "@effect/sql-pg": "4.0.1",
+    "alchemy": "2.0.0-beta.81",
+    "effect": "4.0.1",
     "mime": "4.1.0"
   }
 }

package/src/argocd/fake-argocd.ts

@@ -11,7 +11,7 @@
  */
 import { type Credentials, fromToken } from '@distilled.cloud/argocd/Credentials';
 import * as Layer from 'effect/Layer';
-import * as FetchHttpClient from 'effect/unstable/http/FetchHttpClient';
+import * as FetchHttpClient from 'effect/http/FetchHttpClient';
 
 export const FAKE_BASE = 'https://argocd.example.com';
 export const FAKE_TOKEN = 'placeholder-argocd-token';

package/src/argocd/resource.ts

@@ -22,7 +22,7 @@ import type { Input } from 'alchemy/Input';
 import { CredentialsFromEnv } from '@distilled.cloud/argocd/Credentials';
 import type { ArgocdOpContext } from '@distilled.cloud/argocd/Protocol';
 import * as Effect from 'effect/Effect';
-import type * as HttpClient from 'effect/unstable/http/HttpClient';
+import type * as HttpClient from 'effect/http/HttpClient';
 
 /** What every handler needs from the caller's runtime, once `argocdHandlers` bakes in credentials. */
 export type ArgocdRequirements = HttpClient.HttpClient;

package/src/caddy/admin-transport-scope.test.ts

@@ -35,8 +35,8 @@ import { Resource } from 'alchemy';
 import * as Provider from 'alchemy/Provider';
 import * as Effect from 'effect/Effect';
 import * as Layer from 'effect/Layer';
-import * as HttpClient from 'effect/unstable/http/HttpClient';
-import * as HttpClientResponse from 'effect/unstable/http/HttpClientResponse';
+import * as HttpClient from 'effect/http/HttpClient';
+import * as HttpClientResponse from 'effect/http/HttpClientResponse';
 import { engineOver } from '../verify/fake-engine.ts';
 import { CaddyConfig } from './config.ts';
 import { type FakeCaddy, fakeDefaultCaddy } from './fake-caddy.ts';

package/src/caddy/admin.ts

@@ -30,7 +30,7 @@
  *   config.ts is the one place that `Effect.provide`s it, scoped to exactly the effects that call
  *   `@distilled.cloud/caddy`'s operations.
  */
-import type * as HttpClient from 'effect/unstable/http/HttpClient';
+import type * as HttpClient from 'effect/http/HttpClient';
 import * as Context from 'effect/Context';
 import * as Layer from 'effect/Layer';
 import type { Credentials } from '@distilled.cloud/caddy';

package/src/caddy/caddy-http-client.ts

@@ -2,7 +2,7 @@
  * An Effect `HttpClient.HttpClient` over `node:http`, dialling a unix socket or loopback TCP
  * directly — the SDK's own transport layer for `@distilled.cloud/caddy`'s typed operations.
  *
- * ★ node:http, NOT `effect/unstable/http/FetchHttpClient`. MEASURED 2026-09-21 on bun 1.4.0 and
+ * ★ node:http, NOT `effect/http/FetchHttpClient`. MEASURED 2026-09-21 on bun 1.4.0 and
  *   node 26.7.0 (local-admin.ts's history): node:http dials a unix socket on BOTH runtimes, while
  *   node's fetch has no `unix` option at all (only Bun's does) — `@effect/platform-node`'s own
  *   `FetchHttpClient`/`NodeHttpClient.makeNodeHttp` (node:http, but URL-only — no `socketPath` seam)
@@ -21,10 +21,10 @@ import * as Duration from 'effect/Duration';
 import * as Effect from 'effect/Effect';
 import * as Layer from 'effect/Layer';
 import * as Result from 'effect/Result';
-import * as HttpClient from 'effect/unstable/http/HttpClient';
-import * as HttpClientError from 'effect/unstable/http/HttpClientError';
-import type * as HttpClientRequest from 'effect/unstable/http/HttpClientRequest';
-import * as HttpClientResponse from 'effect/unstable/http/HttpClientResponse';
+import * as HttpClient from 'effect/http/HttpClient';
+import * as HttpClientError from 'effect/http/HttpClientError';
+import type * as HttpClientRequest from 'effect/http/HttpClientRequest';
+import * as HttpClientResponse from 'effect/http/HttpClientResponse';
 import type { Target } from './admin-address.ts';
 
 export type LocalHttpClientOptions = {

package/src/caddy/config-adopt.test.ts

@@ -10,8 +10,8 @@
 import { afterEach, describe, expect, test } from 'bun:test';
 import * as Effect from 'effect/Effect';
 import * as Layer from 'effect/Layer';
-import * as HttpClient from 'effect/unstable/http/HttpClient';
-import * as HttpClientError from 'effect/unstable/http/HttpClientError';
+import * as HttpClient from 'effect/http/HttpClient';
+import * as HttpClientError from 'effect/http/HttpClientError';
 import type { CaddyTransport } from './admin.ts';
 import { isUnreachable } from './caddy-http-client.ts';
 import { probeLive } from './config-lifecycle.ts';

package/src/caddy/format.ts

@@ -21,8 +21,8 @@
  */
 import * as Effect from 'effect/Effect';
 import * as Stream from 'effect/Stream';
-import * as ChildProcess from 'effect/unstable/process/ChildProcess';
-import * as ChildProcessSpawner from 'effect/unstable/process/ChildProcessSpawner';
+import * as ChildProcess from 'effect/process/ChildProcess';
+import * as ChildProcessSpawner from 'effect/process/ChildProcessSpawner';
 import type * as PlatformError from 'effect/PlatformError';
 
 /** `caddy` resolved on `PATH`, unless the caller points at a specific build. */

package/src/caddy/local-admin.test.ts

@@ -7,7 +7,7 @@ import { rmSync } from 'node:fs';
 import { createServer } from 'node:net';
 import { tmpdir } from 'node:os';
 import { join } from 'node:path';
-import * as HttpClientError from 'effect/unstable/http/HttpClientError';
+import * as HttpClientError from 'effect/http/HttpClientError';
 import { loadCaddyfile, readRunningConfig } from './admin-calls.ts';
 import { isUnreachable } from './caddy-http-client.ts';
 import { type FakeCaddy, fakeCaddy, runCaddy } from './fake-caddy.ts';

package/src/ceph/auth-entity.ts

@@ -24,7 +24,7 @@ import { Resource } from 'alchemy';
 import { isResolved } from 'alchemy/Diff';
 import * as Provider from 'alchemy/Provider';
 import * as Effect from 'effect/Effect';
-import type * as HttpClient from 'effect/unstable/http/HttpClient';
+import type * as HttpClient from 'effect/http/HttpClient';
 import type { CephAuthEntityAttributes, CephAuthEntityProps } from './ceph-auth-form.ts';
 import { planCephAuthEntity } from './ceph-auth-form.ts';
 import { reconcileCephAuthEntity } from './ceph-auth-reconcile.ts';

package/src/ceph/ceph-auth-reconcile.ts

@@ -27,7 +27,7 @@
  *   (openbao/rename-identity.ts) runs first in every `Bao.*` reconcile.
  */
 import * as Effect from 'effect/Effect';
-import type * as HttpClient from 'effect/unstable/http/HttpClient';
+import type * as HttpClient from 'effect/http/HttpClient';
 import { baoWrite } from '../openbao/bao-http.ts';
 import { sha256 } from '../openbao/digest.ts';
 import { authCapsArgv, authGetArgv, authGetOrCreateArgv } from './ceph-argv.ts';

package/src/cloudflare/fake-mesh.ts

@@ -19,7 +19,7 @@ import * as Cloudflare from 'alchemy/Cloudflare';
 import * as Effect from 'effect/Effect';
 import * as Layer from 'effect/Layer';
 import * as Redacted from 'effect/Redacted';
-import * as FetchHttpClient from 'effect/unstable/http/FetchHttpClient';
+import * as FetchHttpClient from 'effect/http/FetchHttpClient';
 
 export const FAKE_BASE = 'https://api.example.com/client/v4';
 export const FAKE_ACCOUNT = '00000000000000000000000000000001';

package/src/cloudflare/fake-r2-lock.ts

@@ -19,7 +19,7 @@
  */
 import { type Credentials, fromApiToken } from '@distilled.cloud/cloudflare/Credentials';
 import * as Layer from 'effect/Layer';
-import * as FetchHttpClient from 'effect/unstable/http/FetchHttpClient';
+import * as FetchHttpClient from 'effect/http/FetchHttpClient';
 import type { R2LockRule } from './lock-rules.ts';
 
 export const FAKE_BASE = 'https://api.example.com/client/v4';

package/src/cloudflare/mesh-node-harness.ts

@@ -14,7 +14,7 @@ import * as Cause from 'effect/Cause';
 import * as Effect from 'effect/Effect';
 import * as Exit from 'effect/Exit';
 import * as Layer from 'effect/Layer';
-import * as FetchHttpClient from 'effect/unstable/http/FetchHttpClient';
+import * as FetchHttpClient from 'effect/http/FetchHttpClient';
 import { type FakeMesh, fakeProviderLayer } from './fake-mesh.ts';
 import { MeshNode, MeshNodeProvider } from './mesh-node.ts';
 import type { MeshNodeAttributes, MeshNodeProps } from './mesh-node-form.ts';

package/src/cloudflare/mesh-node.ts

@@ -18,7 +18,7 @@ import * as Provider from 'alchemy/Provider';
 import { Resource, type ResourceClass } from 'alchemy/Resource';
 import * as Context from 'effect/Context';
 import * as Effect from 'effect/Effect';
-import * as HttpClient from 'effect/unstable/http/HttpClient';
+import * as HttpClient from 'effect/http/HttpClient';
 import {
   type MeshNodeAttributes,
   type MeshNodeProps,

package/src/cloudflare/r2-bucket-lock.ts

@@ -37,7 +37,7 @@ import { Credentials } from '@distilled.cloud/cloudflare/Credentials';
 import * as r2 from '@distilled.cloud/cloudflare/r2';
 import * as Context from 'effect/Context';
 import * as Effect from 'effect/Effect';
-import * as HttpClient from 'effect/unstable/http/HttpClient';
+import * as HttpClient from 'effect/http/HttpClient';
 import {
   type Jurisdiction,
   type R2LockRule,

package/src/discord/fake-discord.ts

@@ -11,7 +11,7 @@
  */
 import { type Credentials, credentials } from '@distilled.cloud/discord/Credentials';
 import * as Layer from 'effect/Layer';
-import * as FetchHttpClient from 'effect/unstable/http/FetchHttpClient';
+import * as FetchHttpClient from 'effect/http/FetchHttpClient';
 
 export const FAKE_BASE = 'https://discord.example.com';
 export const FAKE_TOKEN = 'placeholder-discord-token';

package/src/discord/resource.ts

@@ -36,7 +36,7 @@ import { isResolved } from 'alchemy/Diff';
 import type { Input } from 'alchemy/Input';
 import type { DiscordOpContext } from '@distilled.cloud/discord/Protocol';
 import * as Effect from 'effect/Effect';
-import type * as HttpClient from 'effect/unstable/http/HttpClient';
+import type * as HttpClient from 'effect/http/HttpClient';
 import { CredentialsFromEnv } from './credentials.ts';
 
 /**

package/src/forgejo/fake-forgejo.ts

@@ -10,7 +10,7 @@
  */
 import { type Credentials, credentials } from '@distilled.cloud/forgejo/Credentials';
 import * as Layer from 'effect/Layer';
-import * as FetchHttpClient from 'effect/unstable/http/FetchHttpClient';
+import * as FetchHttpClient from 'effect/http/FetchHttpClient';
 
 export const FAKE_BASE = 'https://forgejo.example.com';
 export const FAKE_TOKEN = 'placeholder-forgejo-token';

package/src/forgejo/resource.ts

@@ -41,7 +41,7 @@ import type { Input } from 'alchemy/Input';
 import { CredentialsFromEnv } from '@distilled.cloud/forgejo/Credentials';
 import type { ForgejoOpContext } from '@distilled.cloud/forgejo/Protocol';
 import * as Effect from 'effect/Effect';
-import type * as HttpClient from 'effect/unstable/http/HttpClient';
+import type * as HttpClient from 'effect/http/HttpClient';
 
 /**
  * ★ WHAT EVERY HANDLER NEEDS FROM THE CALLER'S RUNTIME, after Credentials are provided below.

package/src/google-workspace/fake-google-workspace.ts

@@ -11,7 +11,7 @@
  */
 import { type Credentials, fromAccessToken } from '@distilled.cloud/google-workspace/Credentials';
 import * as Layer from 'effect/Layer';
-import * as FetchHttpClient from 'effect/unstable/http/FetchHttpClient';
+import * as FetchHttpClient from 'effect/http/FetchHttpClient';
 
 export const FAKE_TOKEN = 'placeholder-google-workspace-token';
 

package/src/google-workspace/resource.ts

@@ -30,7 +30,7 @@ import type { Input } from 'alchemy/Input';
 import { CredentialsFromEnv } from '@distilled.cloud/google-workspace/Credentials';
 import type { GoogleWorkspaceOpContext } from '@distilled.cloud/google-workspace/Protocol';
 import * as Effect from 'effect/Effect';
-import type * as HttpClient from 'effect/unstable/http/HttpClient';
+import type * as HttpClient from 'effect/http/HttpClient';
 
 /**
  * ★ WHAT EVERY HANDLER NEEDS FROM THE CALLER'S RUNTIME, after Credentials are provided below.

package/src/grafana/fake-grafana.ts

@@ -11,7 +11,7 @@
  */
 import { type Credentials, fromApiKey } from '@distilled.cloud/grafana/Credentials';
 import * as Layer from 'effect/Layer';
-import * as FetchHttpClient from 'effect/unstable/http/FetchHttpClient';
+import * as FetchHttpClient from 'effect/http/FetchHttpClient';
 
 export const FAKE_BASE = 'https://grafana.example.com';
 export const FAKE_TOKEN = 'placeholder-grafana-token';

package/src/litellm/access-group.test.ts

@@ -9,7 +9,7 @@ import { expect, test } from 'bun:test';
 import { credentials } from '@distilled.cloud/litellm/Credentials';
 import * as Effect from 'effect/Effect';
 import * as Layer from 'effect/Layer';
-import * as FetchHttpClient from 'effect/unstable/http/FetchHttpClient';
+import * as FetchHttpClient from 'effect/http/FetchHttpClient';
 import { LiteLLMAccessGroup } from './access-group.ts';
 import { deleteAccessGroup } from './access-group-operations.ts';
 import type { AccessGroupProps } from './access-group-types.ts';

package/src/litellm/credential-errors.ts

@@ -18,7 +18,7 @@
  */
 import type * as credentials from '@distilled.cloud/litellm/credential_management';
 import * as Data from 'effect/Data';
-import type { HttpClientErrorReason } from 'effect/unstable/http/HttpClientError';
+import type { HttpClientErrorReason } from 'effect/http/HttpClientError';
 
 /** A declaration the resource refuses before any request: a combination nobody meant. */
 export class LitellmCredentialInvalidError extends Data.TaggedError(

package/src/litellm/credential-guards.test.ts

@@ -14,7 +14,7 @@ import { Retry } from '@distilled.cloud/litellm/Retry';
 import * as Effect from 'effect/Effect';
 import * as Layer from 'effect/Layer';
 import * as Logger from 'effect/Logger';
-import * as FetchHttpClient from 'effect/unstable/http/FetchHttpClient';
+import * as FetchHttpClient from 'effect/http/FetchHttpClient';
 import { credentialHandlers } from './credential.ts';
 import type { CredentialProps } from './credential-types.ts';
 import { resolveValues, sealValues } from './credential-values.ts';

package/src/litellm/credential-operations.ts

@@ -35,7 +35,7 @@
 import * as credentials from '@distilled.cloud/litellm/credential_management';
 import * as Effect from 'effect/Effect';
 import * as Predicate from 'effect/Predicate';
-import { isHttpClientError } from 'effect/unstable/http/HttpClientError';
+import { isHttpClientError } from 'effect/http/HttpClientError';
 import { isCredentialRow, toAttributes } from './credential-form.ts';
 import type { CredentialAttributes } from './credential-types.ts';
 import {

package/src/litellm/credential-rewrite.test.ts

@@ -2,7 +2,7 @@
 import { afterEach, beforeEach, expect, test } from 'bun:test';
 import { credentials } from '@distilled.cloud/litellm/Credentials';
 import * as Effect from 'effect/Effect';
-import * as FetchHttpClient from 'effect/unstable/http/FetchHttpClient';
+import * as FetchHttpClient from 'effect/http/FetchHttpClient';
 import { type CredentialProps, LiteLLMCredential, credentialHandlers } from './credential.ts';
 import { credentialRow, startFakeCredentialLitellm } from './fake-credential-litellm.ts';
 import { FAKE_BASE } from './fake-litellm.ts';

package/src/litellm/fake-stack.ts

@@ -20,7 +20,7 @@ import { provideFreshArtifactStore } from 'alchemy/Artifacts';
 import { encodeState } from 'alchemy/State/StateEncoding';
 import * as Effect from 'effect/Effect';
 import * as Layer from 'effect/Layer';
-import * as FetchHttpClient from 'effect/unstable/http/FetchHttpClient';
+import * as FetchHttpClient from 'effect/http/FetchHttpClient';
 import { litellmProviders } from './providers.ts';
 
 /** The planned action for each resource, deletions included, keyed by FQN. */

package/src/litellm/key-errors.ts

@@ -8,7 +8,7 @@
  */
 import type * as keys from '@distilled.cloud/litellm/key_management';
 import * as Data from 'effect/Data';
-import type { HttpClientErrorReason } from 'effect/unstable/http/HttpClientError';
+import type { HttpClientErrorReason } from 'effect/http/HttpClientError';
 import type {
   LitellmKeyCallbackMetadataDeclaredError,
   LitellmKeyCallbackMetadataLiveError,

package/src/litellm/key-harness.ts

@@ -9,7 +9,7 @@ import { credentials } from '@distilled.cloud/litellm/Credentials';
 import { Retry } from '@distilled.cloud/litellm/Retry';
 import * as Effect from 'effect/Effect';
 import * as Layer from 'effect/Layer';
-import * as FetchHttpClient from 'effect/unstable/http/FetchHttpClient';
+import * as FetchHttpClient from 'effect/http/FetchHttpClient';
 import { FAKE_BASE, startFakeLitellm } from './fake-litellm.ts';
 import { type FakeStack, fakeStack } from './fake-stack.ts';
 import { LiteLLMKey } from './key.ts';

package/src/litellm/key-operations.ts

@@ -29,7 +29,7 @@
 import * as keys from '@distilled.cloud/litellm/key_management';
 import * as Effect from 'effect/Effect';
 import * as Predicate from 'effect/Predicate';
-import { isHttpClientError } from 'effect/unstable/http/HttpClientError';
+import { isHttpClientError } from 'effect/http/HttpClientError';
 import {
   LitellmKeyAliasEmptyError,
   LitellmKeyAmbiguousAliasError,

package/src/litellm/key.test.ts

@@ -112,7 +112,8 @@ describe('adopt by alias', () => {
       yield* LiteLLMKey('Seat', { keyAlias: 'seat-a', budgetId: tierRow.budgetId });
     });
     const message = await failureOf(keyStack(fake).deploy(body));
-    expect(message).toContain('already exists');
+    // ★ beta.81 probes at apply itself and refuses first; the kit's check is the backstop.
+    expect(message).toMatch(/already exists|Cannot adopt resource 'Seat'.*--adopt/s);
     expect(fake.keys.writes()).toEqual([]);
     await keyStack(fake).deploy(body, { adopt: true });
     expect(paths(fake)).toEqual(['/key/update']);

package/src/litellm/mcp-server-handlers.test.ts

@@ -12,7 +12,7 @@ import { afterEach, beforeEach, describe, expect, test } from 'bun:test';
 import { credentials } from '@distilled.cloud/litellm/Credentials';
 import * as Effect from 'effect/Effect';
 import * as Layer from 'effect/Layer';
-import * as FetchHttpClient from 'effect/unstable/http/FetchHttpClient';
+import * as FetchHttpClient from 'effect/http/FetchHttpClient';
 import { FAKE_BASE } from './fake-litellm.ts';
 import { serverRow, startFakeMcpLitellm } from './fake-mcp-litellm.ts';
 import { mcpServerHandlers } from './mcp-server.ts';

package/src/litellm/mcp-server-registry.test.ts

@@ -14,7 +14,7 @@ import { describe, expect, test } from 'bun:test';
 import { credentials } from '@distilled.cloud/litellm/Credentials';
 import * as Effect from 'effect/Effect';
 import * as Layer from 'effect/Layer';
-import * as FetchHttpClient from 'effect/unstable/http/FetchHttpClient';
+import * as FetchHttpClient from 'effect/http/FetchHttpClient';
 import { FAKE_BASE } from './fake-litellm.ts';
 import {
   type FakeMcpLitellm,

package/src/litellm/model-operations.test.ts

@@ -10,7 +10,7 @@ import { credentials } from '@distilled.cloud/litellm/Credentials';
 import { describe, expect, test } from 'bun:test';
 import * as Effect from 'effect/Effect';
 import * as Layer from 'effect/Layer';
-import * as FetchHttpClient from 'effect/unstable/http/FetchHttpClient';
+import * as FetchHttpClient from 'effect/http/FetchHttpClient';
 import { FAKE_BASE } from './fake-litellm.ts';
 import { modelRow, startFakeModelLitellm } from './fake-model-litellm.ts';
 import { deleteModel, listModels, readModelRow } from './model-operations.ts';

package/src/litellm/operations.ts

@@ -34,7 +34,7 @@ import type { LitellmOpContext } from '@distilled.cloud/litellm/Protocol';
 import type { ConfigError } from '@distilled.cloud/litellm/Errors';
 import * as Effect from 'effect/Effect';
 import * as Semaphore from 'effect/Semaphore';
-import * as FetchHttpClient from 'effect/unstable/http/FetchHttpClient';
+import * as FetchHttpClient from 'effect/http/FetchHttpClient';
 
 export type { LitellmOpContext } from '@distilled.cloud/litellm/Protocol';
 export type LitellmRequirements = LitellmOpContext;

package/src/litellm/pass-through-endpoint-delete-swallow.test.ts

@@ -16,7 +16,7 @@ import { describe, expect, test } from 'bun:test';
 import { credentials } from '@distilled.cloud/litellm/Credentials';
 import * as Effect from 'effect/Effect';
 import * as Layer from 'effect/Layer';
-import * as FetchHttpClient from 'effect/unstable/http/FetchHttpClient';
+import * as FetchHttpClient from 'effect/http/FetchHttpClient';
 import { FAKE_BASE, startFakeLitellm } from './fake-litellm.ts';
 import {
   type LitellmRequirements,

package/src/litellm/pass-through-endpoint.test.ts

@@ -9,7 +9,7 @@ import { Stack } from 'alchemy/Stack';
 import { Stage } from 'alchemy/Stage';
 import * as Effect from 'effect/Effect';
 import * as Layer from 'effect/Layer';
-import * as FetchHttpClient from 'effect/unstable/http/FetchHttpClient';
+import * as FetchHttpClient from 'effect/http/FetchHttpClient';
 import { FAKE_BASE, type FakeLitellm, startFakeLitellm } from './fake-litellm.ts';
 import { createPassThroughEndpoint } from './operations.ts';
 import {

package/src/litellm/pass-through-fetch-client.test.ts

@@ -10,8 +10,8 @@ import { describe, expect, test } from 'bun:test';
 import { credentials } from '@distilled.cloud/litellm/Credentials';
 import * as Effect from 'effect/Effect';
 import * as Layer from 'effect/Layer';
-import * as FetchHttpClient from 'effect/unstable/http/FetchHttpClient';
-import * as HttpClient from 'effect/unstable/http/HttpClient';
+import * as FetchHttpClient from 'effect/http/FetchHttpClient';
+import * as HttpClient from 'effect/http/HttpClient';
 import { FAKE_BASE, startFakeLitellm } from './fake-litellm.ts';
 import { listPassThroughEndpoints } from './operations.ts';
 

package/src/litellm/policy-attachment.test.ts

@@ -10,7 +10,7 @@ import { expect, test } from 'bun:test';
 import { credentials } from '@distilled.cloud/litellm/Credentials';
 import * as Effect from 'effect/Effect';
 import * as Layer from 'effect/Layer';
-import * as FetchHttpClient from 'effect/unstable/http/FetchHttpClient';
+import * as FetchHttpClient from 'effect/http/FetchHttpClient';
 import { FAKE_BASE } from './fake-litellm.ts';
 import {
   type FakePolicyAttachmentLitellm,

package/src/litellm/policy.test.ts

@@ -9,7 +9,7 @@ import { expect, test } from 'bun:test';
 import { credentials } from '@distilled.cloud/litellm/Credentials';
 import * as Effect from 'effect/Effect';
 import * as Layer from 'effect/Layer';
-import * as FetchHttpClient from 'effect/unstable/http/FetchHttpClient';
+import * as FetchHttpClient from 'effect/http/FetchHttpClient';
 import { FAKE_BASE } from './fake-litellm.ts';
 import { FAKE_KEY } from './fake-registry-base.ts';
 import {

package/src/litellm/team-members.test.ts

@@ -9,7 +9,7 @@ import { expect, test } from 'bun:test';
 import { credentials } from '@distilled.cloud/litellm/Credentials';
 import * as Effect from 'effect/Effect';
 import * as Layer from 'effect/Layer';
-import * as FetchHttpClient from 'effect/unstable/http/FetchHttpClient';
+import * as FetchHttpClient from 'effect/http/FetchHttpClient';
 import { FAKE_BASE } from './fake-litellm.ts';
 import { FAKE_KEY } from './fake-registry-base.ts';
 import { type FakeTeamLitellm, startFakeTeamLitellm, teamRow } from './fake-team-litellm.ts';

package/src/litellm/team-read.test.ts

@@ -9,7 +9,7 @@ import { expect, test } from 'bun:test';
 import { credentials } from '@distilled.cloud/litellm/Credentials';
 import * as Effect from 'effect/Effect';
 import * as Layer from 'effect/Layer';
-import * as FetchHttpClient from 'effect/unstable/http/FetchHttpClient';
+import * as FetchHttpClient from 'effect/http/FetchHttpClient';
 import { FAKE_BASE } from './fake-litellm.ts';
 import { FAKE_KEY } from './fake-registry-base.ts';
 import { type FakeTeamLitellm, startFakeTeamLitellm, teamRow } from './fake-team-litellm.ts';

package/src/litellm/tool-policy.test.ts

@@ -9,7 +9,7 @@ import { expect, test } from 'bun:test';
 import { credentials } from '@distilled.cloud/litellm/Credentials';
 import * as Effect from 'effect/Effect';
 import * as Layer from 'effect/Layer';
-import * as FetchHttpClient from 'effect/unstable/http/FetchHttpClient';
+import * as FetchHttpClient from 'effect/http/FetchHttpClient';
 import { FAKE_BASE } from './fake-litellm.ts';
 import { FAKE_KEY } from './fake-registry-base.ts';
 import { type FakeToolLitellm, startFakeToolLitellm, toolRow } from './fake-tool-litellm.ts';

package/src/litellm/toolset.test.ts

@@ -9,7 +9,7 @@ import { expect, test } from 'bun:test';
 import { credentials } from '@distilled.cloud/litellm/Credentials';
 import * as Effect from 'effect/Effect';
 import * as Layer from 'effect/Layer';
-import * as FetchHttpClient from 'effect/unstable/http/FetchHttpClient';
+import * as FetchHttpClient from 'effect/http/FetchHttpClient';
 import { FAKE_BASE } from './fake-litellm.ts';
 import { FAKE_KEY } from './fake-registry-base.ts';
 import {

package/src/netbox/fake-netbox.ts

@@ -11,7 +11,7 @@
  */
 import { type Credentials, credentials } from '@distilled.cloud/netbox/Credentials';
 import * as Layer from 'effect/Layer';
-import * as FetchHttpClient from 'effect/unstable/http/FetchHttpClient';
+import * as FetchHttpClient from 'effect/http/FetchHttpClient';
 
 export const FAKE_BASE = 'https://netbox.example.com';
 export const FAKE_TOKEN = 'placeholder-netbox-token';

package/src/netbox/resource.ts

@@ -36,7 +36,7 @@ import type { Input } from 'alchemy/Input';
 import { CredentialsFromEnv } from '@distilled.cloud/netbox/Credentials';
 import type { NetboxOpContext } from '@distilled.cloud/netbox/Protocol';
 import * as Effect from 'effect/Effect';
-import type * as HttpClient from 'effect/unstable/http/HttpClient';
+import type * as HttpClient from 'effect/http/HttpClient';
 import { guardBody } from './constraint-guard.ts';
 import type { EndpointKey, NetboxBody } from './constraints.ts';
 

package/src/openbao/adopt-core.test.ts

@@ -15,7 +15,10 @@ import { writesOf } from './fake-stack.ts';
 import { BaoMount } from './mount.ts';
 
 const NOT_OWNED = /Cannot adopt resource 'Z'.*not owned by this stack.*--adopt/s;
-const TAKEOVER = /: already exists, and this stack holds no state for it.*Nothing was written/s;
+// ★ beta.81 probes a create with an Output prop at apply itself, so ITS refusal fires first; the
+//   kit's refuseTakeover is the backstop. Either way each test asserts nothing was written.
+const TAKEOVER =
+  /Cannot adopt resource 'Z'.*--adopt|: already exists, and this stack holds no state for it.*Nothing was written/s;
 
 /** `Z`, with its knob an Output until apply: an upstream AppRole's `tokenTtl`, created with it. */
 const pending = (row: CoreRow) =>

package/src/openbao/adopt-families.test.ts

@@ -19,7 +19,10 @@ import { FAMILIES, type Family, upstream, withEstate } from './fake-families.ts'
 import { writesOf } from './fake-stack.ts';
 
 const NOT_OWNED = /Cannot adopt resource 'Z'.*not owned by this stack.*--adopt/s;
-const TAKEOVER = /: already exists, and this stack holds no state for it.*Nothing was written/s;
+// ★ beta.81 probes a create with an Output prop at apply itself, so ITS refusal fires first; the
+//   kit's refuseTakeover is the backstop. Either way each test asserts nothing was written.
+const TAKEOVER =
+  /Cannot adopt resource 'Z'.*--adopt|: already exists, and this stack holds no state for it.*Nothing was written/s;
 const STILL_REFUSED = /Cannot adopt resource 'Z'.*--adopt/s;
 
 /** `Z` names `a`, with its knob an Output until apply: the upstream AppRole is created with it. */