@homeflare/alchemy 0.46.1 → 0.47.0

package/README.md

@@ -3,12 +3,12 @@
 Custom [Alchemy](https://alchemy.run) providers for gaps the vendor SDK leaves.
 
 ```sh
-bun add @homeflare/alchemy alchemy@2.0.0-beta.79 effect@4.0.0-rc.115 \
-        @effect/platform-node@4.0.0-rc.115 mime@4.1.0 \
-        @distilled.cloud/cloudflare@1.0.0-rc.12 @distilled.cloud/forgejo@1.0.0-rc.12 \
-        @distilled.cloud/discord@1.0.0-rc.12 @distilled.cloud/google-workspace@1.0.0-rc.12 \
-        @distilled.cloud/argocd@1.0.0-rc.12 \
-        @effect/sql-pg@4.0.0-rc.115
+bun add @homeflare/alchemy alchemy@2.0.0-beta.81 effect@4.0.1 \
+        @effect/platform-node@4.0.1 mime@4.1.0 \
+        @distilled.cloud/cloudflare@1.0.0-rc.13 @distilled.cloud/forgejo@1.0.0-rc.13 \
+        @distilled.cloud/discord@1.0.0-rc.13 @distilled.cloud/google-workspace@1.0.0-rc.13 \
+        @distilled.cloud/argocd@1.0.0-rc.13 \
+        @effect/sql-pg@4.0.1
 ```
 
 ⛔ **Every one of those is required, and you also need an `overrides` block** — see
@@ -398,10 +398,10 @@ two copies load in one process.
 ```json
 {
   "overrides": {
-    "effect": "4.0.0-rc.115",
-    "@effect/platform-node": "4.0.0-rc.115",
-    "@effect/platform-node-shared": "4.0.0-rc.115",
-    "@effect/platform-bun": "4.0.0-rc.115",
+    "effect": "4.0.1",
+    "@effect/platform-node": "4.0.1",
+    "@effect/platform-node-shared": "4.0.1",
+    "@effect/platform-bun": "4.0.1",
     "rolldown": "1.2.8",
     "redis": "6.3.0"
   }

package/dist/argocd/cluster.d.ts

@@ -79,7 +79,7 @@ export declare const handlers: {
     list: () => Effect.Effect<never[], never, never>;
     read: ({ olds }: {
         olds: ClusterProps;
-    }) => Effect.Effect<ClusterAttributes | undefined, ClusterError, import("effect/unstable/http/HttpClient").HttpClient>;
+    }) => Effect.Effect<ClusterAttributes | undefined, ClusterError, import("effect/http/HttpClient").HttpClient>;
     diff: ({ news, output }: {
         news: import("alchemy").Input<ClusterProps>;
         output: ClusterAttributes | undefined;
@@ -89,14 +89,14 @@ export declare const handlers: {
         readonly action: 'update';
     } | {
         readonly action: 'noop';
-    } | undefined, ClusterError, import("effect/unstable/http/HttpClient").HttpClient>;
+    } | undefined, ClusterError, import("effect/http/HttpClient").HttpClient>;
     reconcile: ({ news }: {
         news: ClusterProps;
-    }) => Effect.Effect<ClusterAttributes, ClusterError, import("effect/unstable/http/HttpClient").HttpClient>;
+    }) => Effect.Effect<ClusterAttributes, ClusterError, import("effect/http/HttpClient").HttpClient>;
     delete: ({ olds }: {
         olds: ClusterProps;
-    }) => Effect.Effect<void, ClusterError, import("effect/unstable/http/HttpClient").HttpClient>;
+    }) => Effect.Effect<void, ClusterError, import("effect/http/HttpClient").HttpClient>;
 };
-export declare const ArgocdClusterProvider: () => import("effect/Layer").Layer<Provider.Provider<ArgocdCluster>, never, import("effect/unstable/http/HttpClient").HttpClient>;
+export declare const ArgocdClusterProvider: () => import("effect/Layer").Layer<Provider.Provider<ArgocdCluster>, never, import("effect/http/HttpClient").HttpClient>;
 export {};
 //# sourceMappingURL=cluster.d.ts.map

package/dist/argocd/cluster.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cluster.d.ts","sourceRoot":"","sources":["../../src/argocd/cluster.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,KAAK,QAAQ,MAAM,kBAAkB,CAAC;AAC7C,OAAO,KAAK,MAAM,MAAM,gCAAgC,CAAC;AAEzD,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,KAAK,OAAO,EAAc,MAAM,0BAA0B,CAAC;AACpE,OAAO,EAAE,KAAK,kBAAkB,EAAE,KAAK,UAAU,EAA2B,MAAM,eAAe,CAAC;AAElG,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;IAC/B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,CAAC;CACrC;AAED,MAAM,WAAW,YAAY;IAC3B,6EAA6E;IAC7E,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,6EAA6E;IAC7E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/B,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,MAAM,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC1C,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC/C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,8DAA8D;IAC9D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,kFAAkF;IAClF,WAAW,CAAC,EAAE,qBAAqB,CAAC;CACrC;AAED,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IACzB,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,UAAU,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IAC1C,gBAAgB,EAAE,OAAO,GAAG,SAAS,CAAC;IACtC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;IACrD,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;IAC1D,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,WAAW,EAAE,OAAO,GAAG,SAAS,CAAC;IACjC,aAAa,EAAE,MAAM,GAAG,SAAS,CAAC;CACnC;AAED,MAAM,WAAW,aAAc,SAAQ,QAAQ,CAC7C,gBAAgB,EAChB,YAAY,EACZ,iBAAiB,EACjB,KAAK,EACL,kBAAkB,CACnB;CAAG;AAEJ,eAAO,MAAM,aAAa,gDAExB,CAAC;;;;AAEH,qGAAqG;AACrG,qBAAa,gCAAiC,SAAQ,sCAEpD;IACA,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B,CAAC;CAAG;AA0EL,KAAK,YAAY,GACb,MAAM,CAAC,sBAAsB,GAC7B,MAAM,CAAC,yBAAyB,GAChC,MAAM,CAAC,yBAAyB,GAChC,gCAAgC,CAAC;AAErC,sFAAsF;AACtF,eAAO,MAAM,IAAI,EAAE,UAAU,CAC3B,YAAY,EACZ,MAAM,CAAC,eAAe,EACtB,iBAAiB,EACjB,YAAY,CA8Cb,CAAC;AAEF,eAAO,MAAM,QAAQ;;;;;;;;;;;;;;;;;;;;;CAAuB,CAAC;AAE7C,eAAO,MAAM,qBAAqB,mIACmD,CAAC"}
+{"version":3,"file":"cluster.d.ts","sourceRoot":"","sources":["../../src/argocd/cluster.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,KAAK,QAAQ,MAAM,kBAAkB,CAAC;AAC7C,OAAO,KAAK,MAAM,MAAM,gCAAgC,CAAC;AAEzD,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,KAAK,OAAO,EAAc,MAAM,0BAA0B,CAAC;AACpE,OAAO,EAAE,KAAK,kBAAkB,EAAE,KAAK,UAAU,EAA2B,MAAM,eAAe,CAAC;AAElG,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;IAC/B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,CAAC;CACrC;AAED,MAAM,WAAW,YAAY;IAC3B,6EAA6E;IAC7E,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,6EAA6E;IAC7E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/B,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,MAAM,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC1C,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC/C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,8DAA8D;IAC9D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,kFAAkF;IAClF,WAAW,CAAC,EAAE,qBAAqB,CAAC;CACrC;AAED,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IACzB,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,UAAU,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IAC1C,gBAAgB,EAAE,OAAO,GAAG,SAAS,CAAC;IACtC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;IACrD,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;IAC1D,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,WAAW,EAAE,OAAO,GAAG,SAAS,CAAC;IACjC,aAAa,EAAE,MAAM,GAAG,SAAS,CAAC;CACnC;AAED,MAAM,WAAW,aAAc,SAAQ,QAAQ,CAC7C,gBAAgB,EAChB,YAAY,EACZ,iBAAiB,EACjB,KAAK,EACL,kBAAkB,CACnB;CAAG;AAEJ,eAAO,MAAM,aAAa,gDAExB,CAAC;;;;AAEH,qGAAqG;AACrG,qBAAa,gCAAiC,SAAQ,sCAEpD;IACA,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B,CAAC;CAAG;AA0EL,KAAK,YAAY,GACb,MAAM,CAAC,sBAAsB,GAC7B,MAAM,CAAC,yBAAyB,GAChC,MAAM,CAAC,yBAAyB,GAChC,gCAAgC,CAAC;AAErC,sFAAsF;AACtF,eAAO,MAAM,IAAI,EAAE,UAAU,CAC3B,YAAY,EACZ,MAAM,CAAC,eAAe,EACtB,iBAAiB,EACjB,YAAY,CA8Cb,CAAC;AAEF,eAAO,MAAM,QAAQ;;;;;;;;;;;;;;;;;;;;;CAAuB,CAAC;AAE7C,eAAO,MAAM,qBAAqB,0HACmD,CAAC"}

package/dist/argocd/fake-argocd.d.ts

@@ -38,5 +38,5 @@ export declare const fakeArgocd: (route: (method: string, url: URL, body: unknow
  *   test calls `spec.fetchLive`/`spec.upsert`/`spec.destroy` directly, with this explicit layer,
  *   exercising exactly the same production code without that env seam.
  */
-export declare const fakeArgocdLayer: (fetchFn: typeof globalThis.fetch, creds?: Layer.Layer<Credentials>) => Layer.Layer<Credentials | import("effect/unstable/http/HttpClient").HttpClient, never, never>;
+export declare const fakeArgocdLayer: (fetchFn: typeof globalThis.fetch, creds?: Layer.Layer<Credentials>) => Layer.Layer<Credentials | import("effect/http/HttpClient").HttpClient, never, never>;
 //# sourceMappingURL=fake-argocd.d.ts.map

package/dist/argocd/fake-argocd.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"fake-argocd.d.ts","sourceRoot":"","sources":["../../src/argocd/fake-argocd.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,KAAK,WAAW,EAAa,MAAM,qCAAqC,CAAC;AAClF,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AAGtC,eAAO,MAAM,SAAS,+BAA+B,CAAC;AACtD,eAAO,MAAM,UAAU,6BAA6B,CAAC;AAErD,MAAM,MAAM,IAAI,GAAG;IAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAA;CAAE,CAAC;AAE9F,4EAA4E;AAC5E,eAAO,MAAM,WAAW,WAAY,MAAM,WAAW,MAAM,SAAS,MAAM,aACZ,CAAC;AAE/D;;;GAGG;AACH,eAAO,MAAM,UAAU,UACd,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,KAAK,QAAQ;;;CAejF,CAAC;AAEF;;;;;;;;;GASG;AACH,eAAO,MAAM,eAAe,YACjB,OAAO,UAAU,CAAC,KAAK,UACzB,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,kGAC+D,CAAC"}
+{"version":3,"file":"fake-argocd.d.ts","sourceRoot":"","sources":["../../src/argocd/fake-argocd.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,KAAK,WAAW,EAAa,MAAM,qCAAqC,CAAC;AAClF,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AAGtC,eAAO,MAAM,SAAS,+BAA+B,CAAC;AACtD,eAAO,MAAM,UAAU,6BAA6B,CAAC;AAErD,MAAM,MAAM,IAAI,GAAG;IAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAA;CAAE,CAAC;AAE9F,4EAA4E;AAC5E,eAAO,MAAM,WAAW,WAAY,MAAM,WAAW,MAAM,SAAS,MAAM,aACZ,CAAC;AAE/D;;;GAGG;AACH,eAAO,MAAM,UAAU,UACd,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,KAAK,QAAQ;;;CAejF,CAAC;AAEF;;;;;;;;;GASG;AACH,eAAO,MAAM,eAAe,YACjB,OAAO,UAAU,CAAC,KAAK,UACzB,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,yFAC+D,CAAC"}

package/dist/argocd/index.js.map

@@ -4,7 +4,7 @@
   "sourcesContent": [
     "/**\n * `Argocd.Cluster` — a target Kubernetes cluster registered with an Argo CD instance\n * (`/api/v1/clusters`) so Applications can deploy onto it. REST-managed, not a CRD; see\n * `docs/argocd.md`. This is how the house will register the Talos-on-PVE cluster itself with\n * Argo CD once both exist — Argo CD's own control-plane cluster (where Argo CD is installed) is\n * registered implicitly as `https://kubernetes.default.svc` and never needs this resource.\n *\n * ⚠️ ONLY BEARER-TOKEN AND STATIC TLS CLIENT-CERT AUTH ARE SUPPORTED. `V1alpha1ClusterConfig` also\n *   carries `awsAuthConfig` (EKS IAM) and `execProviderConfig` (an exec plugin) — measured in\n *   `services/argocd.ts`, distilled homeflare/base — neither of which applies to a Talos cluster;\n *   left unbuilt rather than modeled and untested.\n *\n * ⚠️ NO LIVE ARGO CD INSTANCE EXISTS ON THE ESTATE (2026-09-24) — see `docs/argocd.md`.\n *\n * ⛔ `defaultRemovalPolicy: 'retain'` — deregistering a cluster Applications still target breaks\n *   their sync. `delete` below is fully implemented; opt in with `.pipe(RemovalPolicy.destroy())`.\n */\nimport { Resource } from 'alchemy';\nimport * as Provider from 'alchemy/Provider';\nimport * as argocd from '@distilled.cloud/argocd/argocd';\nimport * as Data from 'effect/Data';\nimport * as Effect from 'effect/Effect';\nimport { type FromEnv, resolveAll } from '../secrets/write-only.ts';\nimport { type ArgocdRequirements, type ArgocdSpec, argocdHandlers, present } from './resource.ts';\n\nexport interface ClusterCredentialRefs {\n  readonly password?: FromEnv;\n  readonly bearerToken?: FromEnv;\n  readonly tlsClientKeyData?: FromEnv;\n}\n\nexport interface ClusterProps {\n  /** The cluster's API server URL — identity key; changing it is a replace. */\n  server: string;\n  name?: string;\n  /** Restricts this cluster to one Argo CD project; omit for every project. */\n  project?: string;\n  namespaces?: readonly string[];\n  clusterResources?: boolean;\n  labels?: Readonly<Record<string, string>>;\n  annotations?: Readonly<Record<string, string>>;\n  proxyUrl?: string;\n  username?: string;\n  tlsCaData?: string;\n  /** The client certificate itself — public, unlike its key. */\n  tlsCertData?: string;\n  tlsInsecure?: boolean;\n  tlsServerName?: string;\n  /** Write-only — never a value here, only env var names. See the module header. */\n  credentials?: ClusterCredentialRefs;\n}\n\nexport interface ClusterAttributes {\n  server: string;\n  name: string | undefined;\n  project: string | undefined;\n  namespaces: readonly string[] | undefined;\n  clusterResources: boolean | undefined;\n  labels: Readonly<Record<string, string>> | undefined;\n  annotations: Readonly<Record<string, string>> | undefined;\n  proxyUrl: string | undefined;\n  username: string | undefined;\n  tlsCaData: string | undefined;\n  tlsCertData: string | undefined;\n  tlsInsecure: boolean | undefined;\n  tlsServerName: string | undefined;\n}\n\nexport interface ArgocdCluster extends Resource<\n  'Argocd.Cluster',\n  ClusterProps,\n  ClusterAttributes,\n  never,\n  ArgocdRequirements\n> {}\n\nexport const ArgocdCluster = Resource<ArgocdCluster>('Argocd.Cluster', {\n  defaultRemovalPolicy: 'retain',\n});\n\n/** Domain refusal, not a distilled error — a declared credential's env var is unset at call time. */\nexport class ArgocdClusterSecretEnvUnsetError extends Data.TaggedError(\n  'ArgocdClusterSecretEnvUnsetError',\n)<{\n  readonly message: string;\n}> {}\n\ninterface ResolvedClusterCredentials {\n  readonly password?: string;\n  readonly bearerToken?: string;\n  readonly tlsClientKeyData?: string;\n}\n\nconst resolveClusterCredentials = (\n  refs: ClusterCredentialRefs,\n): Effect.Effect<ResolvedClusterCredentials, ArgocdClusterSecretEnvUnsetError> => {\n  const declared: Record<string, FromEnv> = {};\n  if (refs.password !== undefined) declared.password = refs.password;\n  if (refs.bearerToken !== undefined) declared.bearerToken = refs.bearerToken;\n  if (refs.tlsClientKeyData !== undefined) declared.tlsClientKeyData = refs.tlsClientKeyData;\n  const { values, missing } = resolveAll(declared);\n  if (missing.length > 0) {\n    return Effect.fail(\n      new ArgocdClusterSecretEnvUnsetError({\n        message:\n          `credential write requires ${missing.join(', ')}, unset or empty in the ` +\n          'deploying environment. Export it and deploy again.',\n      }),\n    );\n  }\n  return Effect.succeed(values as ResolvedClusterCredentials);\n};\n\n/**\n * `V1alpha1Cluster.labels`/`.annotations` decode as `{ [key: string]: string | undefined }` — a\n * generated index-signature artifact, not a real possibility on the wire (a label/annotation map\n * never carries an `undefined` value). Cast at this one boundary rather than threading the looser\n * type through `ClusterAttributes`.\n */\nconst attributesOf = (live: argocd.V1alpha1Cluster): ClusterAttributes => ({\n  annotations: live.annotations as Record<string, string> | undefined,\n  clusterResources: live.clusterResources,\n  labels: live.labels as Record<string, string> | undefined,\n  name: live.name,\n  namespaces: live.namespaces,\n  project: live.project,\n  proxyUrl: live.config?.proxyUrl,\n  server: live.server ?? '',\n  tlsCaData: live.config?.tlsClientConfig?.caData,\n  tlsCertData: live.config?.tlsClientConfig?.certData,\n  tlsInsecure: live.config?.tlsClientConfig?.insecure,\n  tlsServerName: live.config?.tlsClientConfig?.serverName,\n  username: live.config?.username,\n});\n\nconst sameRecord = (\n  a: Readonly<Record<string, string>> | undefined,\n  b: Readonly<Record<string, string>> | undefined,\n) =>\n  JSON.stringify(Object.entries(a ?? {}).sort()) === JSON.stringify(Object.entries(b ?? {}).sort());\n\nconst sameList = (a: readonly string[] | undefined, b: readonly string[] | undefined) =>\n  JSON.stringify([...(a ?? [])].sort()) === JSON.stringify([...(b ?? [])].sort());\n\n/** Only the plain fields — Argo CD never returns the password/bearer token/private key back. */\nconst plainMatches = (attrs: ClusterAttributes, props: ClusterProps): boolean =>\n  (props.name ?? undefined) === (attrs.name ?? undefined) &&\n  (props.project ?? undefined) === (attrs.project ?? undefined) &&\n  sameList(props.namespaces, attrs.namespaces) &&\n  Boolean(props.clusterResources) === Boolean(attrs.clusterResources) &&\n  sameRecord(props.labels, attrs.labels) &&\n  sameRecord(props.annotations, attrs.annotations) &&\n  (props.proxyUrl ?? undefined) === (attrs.proxyUrl ?? undefined) &&\n  (props.username ?? undefined) === (attrs.username ?? undefined) &&\n  (props.tlsCaData ?? undefined) === (attrs.tlsCaData ?? undefined) &&\n  (props.tlsCertData ?? undefined) === (attrs.tlsCertData ?? undefined) &&\n  Boolean(props.tlsInsecure) === Boolean(attrs.tlsInsecure) &&\n  (props.tlsServerName ?? undefined) === (attrs.tlsServerName ?? undefined);\n\ntype ClusterError =\n  | argocd.GetClusterServiceError\n  | argocd.CreateClusterServiceError\n  | argocd.DeleteClusterServiceError\n  | ArgocdClusterSecretEnvUnsetError;\n\n/** ★ EXPORTED for direct testing against `fake-argocd.ts` — see `cluster.test.ts`. */\nexport const spec: ArgocdSpec<\n  ClusterProps,\n  argocd.V1alpha1Cluster,\n  ClusterAttributes,\n  ClusterError\n> = {\n  attributes: (live) => attributesOf(live),\n  // ★ Catches the DELETE call's own NotFound too — closes the TOCTOU race between the pre-check\n  //   `fetchLive` above and this call. Matches upstream's Hetzner/Certificate.ts `deleteById`.\n  destroy: (props) =>\n    argocd\n      .deleteClusterService({ id_value: props.server })\n      .pipe(Effect.catchTag('NotFound', () => Effect.void)),\n  identityOfAttributes: (attrs) => attrs.server,\n  identityOfProps: (props) => props.server,\n  fetchLive: (props) =>\n    argocd\n      .getClusterService({ id_value: props.server })\n      .pipe(Effect.catchTag('NotFound', () => Effect.succeed(undefined))),\n  matches: plainMatches,\n  upsert: (props) =>\n    resolveClusterCredentials(props.credentials ?? {}).pipe(\n      Effect.flatMap((creds) =>\n        argocd.createClusterService(\n          present({\n            upsert: true,\n            annotations: props.annotations,\n            clusterResources: props.clusterResources,\n            config: present({\n              bearerToken: creds.bearerToken,\n              password: creds.password,\n              proxyUrl: props.proxyUrl,\n              tlsClientConfig: present({\n                caData: props.tlsCaData,\n                certData: props.tlsCertData,\n                insecure: props.tlsInsecure,\n                keyData: creds.tlsClientKeyData,\n                serverName: props.tlsServerName,\n              }),\n              username: props.username,\n            }),\n            labels: props.labels,\n            name: props.name,\n            namespaces: props.namespaces === undefined ? undefined : [...props.namespaces],\n            project: props.project,\n            server: props.server,\n          }),\n        ),\n      ),\n    ),\n};\n\nexport const handlers = argocdHandlers(spec);\n\nexport const ArgocdClusterProvider = () =>\n  Provider.effect(ArgocdCluster, Effect.succeed(ArgocdCluster.Provider.of(handlers)));\n",
     "/**\n * Values a declaration may SEND and must never STORE — a webhook secret, a header carrying a\n * credential, an smtp password — and the one form in which a plan may still remember them.\n *\n * ★ FAMILY-NEUTRAL ON PURPOSE, MOVED HERE FROM `proxmox/` 2026-09-22. The rule it encodes is not\n *   about Proxmox: Alchemy's state store is the same unencrypted store for every provider, so the\n *   Cloudflare MCP server entry's `auth_credentials` needs exactly this shape. A second copy under\n *   `cloudflare/` would be two seal formats for one rule; a cross-family import would make\n *   Cloudflare depend on Proxmox. Neither; it lives on its own.\n *\n * ⛔ A SECRET PROP IS A SECRET IN THE STATE STORE, WHATEVER TYPE IT HAS. Alchemy persists props as\n *   well as attributes — `delete` is handed `olds`, which can only have come from the store — and\n *   it does not encrypt either: `StateEncoding.ts` TAGS a `Redacted` value and writes the inner\n *   value beside the tag. So `Redacted` hides a secret from a log line and from nothing else.\n *   notification-target.ts (PVE) answered that by making no secret declarable at all, and paid\n *   for it: an authenticated smtp target or a signed webhook could not be created from code.\n * ★ SO THE PROP HOLDS A NAME, NOT A VALUE. `{ fromEnv: 'PBS_HOOK_TOKEN' }` names the variable the\n *   DEPLOYING process reads at call time — the shape forgejo/org-actions-secrets.ts already uses.\n *   The name is what lands in state; the value exists only in that process's memory and on the\n *   wire to the server.\n *\n * ⚠️ A PLAN STILL NEEDS TO KNOW WHETHER A VALUE CHANGED, AND IT CANNOT ASK THE SERVER. PBS returns a\n *   webhook secret's NAME and never its value, and never returns an smtp password at all. So what\n *   was last written is remembered as a SEAL: a salted scrypt digest, which lets the next plan\n *   check \"is the value in my environment the one I wrote\" without the store holding anything a\n *   reader could send to PBS.\n *   ⚠️ A DIGEST OF A GUESSABLE SECRET IS STILL GUESSABLE. The salt defeats precomputed tables and\n *     scrypt makes each guess cost memory and time; neither makes a dictionary word safe. The\n *     remedy is a secret worth the name — a random token — not a faster hash.\n */\nimport { Buffer } from 'node:buffer';\nimport { randomBytes, scryptSync, timingSafeEqual } from 'node:crypto';\n\n/** A write-only value, by the NAME of the environment variable holding it. Never the value. */\nexport interface FromEnv {\n  readonly fromEnv: string;\n}\n\n/** Where a value is looked up. Defaults to `process.env`, read at call time, never at load. */\nexport type Environment = Readonly<Record<string, string | undefined>>;\n\n/**\n * Each `name → FromEnv` resolved, or the variable names that could not be.\n *\n * ⚠️ AN EMPTY VARIABLE IS A MISSING ONE. A secret renderer that failed writes `NAME=` rather than\n *   omitting the line, and sending `''` would store an empty secret on the server — a webhook that\n *   authenticates with nothing, reported as a successful deploy.\n * ⚠️ THE VALUE IS NOT TRIMMED. A token with a trailing newline is a broken header either way, and\n *   trimming here would make the seal disagree with a value written by any other tool.\n */\nexport const resolveAll = (\n  refs: Readonly<Record<string, FromEnv>>,\n  env: Environment = process.env,\n): { readonly values: Readonly<Record<string, string>>; readonly missing: readonly string[] } => {\n  const values: Record<string, string> = {};\n  const missing: string[] = [];\n  for (const [key, ref] of Object.entries(refs)) {\n    const value = env[ref.fromEnv];\n    if (value === undefined || value === '') missing.push(ref.fromEnv);\n    else values[key] = value;\n  }\n  return { missing: [...new Set(missing)].sort(), values };\n};\n\n/**\n * ★ PARAMETERS ARE NODE'S OWN SCRYPT DEFAULTS (N 2^14, r 8, p 1) — 16 MiB and tens of\n *   milliseconds per digest. Plan runs it a handful of times per resource, which is noise, and a\n *   guesser runs it once per guess, which is the point.\n */\nconst COST = { N: 16_384, maxmem: 64 * 1024 * 1024, p: 1, r: 8 } as const;\nconst PREFIX = 'scrypt';\n\n/** Key order must not change a digest, so entries are sorted and serialised as JSON pairs. */\nconst canonical = (values: Readonly<Record<string, string>>): string =>\n  JSON.stringify(\n    Object.keys(values)\n      .sort()\n      .map((key) => [key, values[key]]),\n  );\n\nconst digest = (salt: Buffer, values: Readonly<Record<string, string>>): Buffer =>\n  scryptSync(canonical(values), salt, 32, COST);\n\n/**\n * `scrypt:<salt>:<digest>`, or `''` when there is nothing to seal.\n *\n * ★ A RANDOM SALT BY DEFAULT, FOR WHAT THIS PROVIDER WROTE. Pass a fixed one only for a value the\n *   server returns anyway (a header), where a fresh salt per read would churn the state row on\n *   every plan without protecting anything the server does not already show its auditors.\n */\nexport const seal = (values: Readonly<Record<string, string>>, salt?: string): string => {\n  if (Object.keys(values).length === 0) return '';\n  const bytes = salt === undefined ? randomBytes(16) : Buffer.from(salt, 'utf8');\n  return `${PREFIX}:${bytes.toString('base64url')}:${digest(bytes, values).toString('base64url')}`;\n};\n\n/**\n * Whether `values` are the ones `sealed` was made from.\n *\n * ⚠️ A MALFORMED OR EMPTY SEAL ANSWERS FALSE, never throws: callers decide what \"no evidence\"\n *   means, and every caller here treats it as \"cannot tell\" rather than as drift.\n */\nexport const sealMatches = (sealed: string, values: Readonly<Record<string, string>>): boolean => {\n  if (sealed === '') return Object.keys(values).length === 0;\n  const [prefix, salt, stored, extra] = sealed.split(':');\n  if (prefix !== PREFIX || salt === undefined || stored === undefined || extra !== undefined) {\n    return false;\n  }\n  const expected = Buffer.from(stored, 'base64url');\n  const actual = digest(Buffer.from(salt, 'base64url'), values);\n  return expected.length === actual.length && timingSafeEqual(expected, actual);\n};\n",
-    "/**\n * One shape for every Argo CD REST object — Repository, RepoCreds, Cluster — the same four\n * operations, different distilled call.\n *\n * ⛔ THIS IS A NEAR-VERBATIM COPY OF `../forgejo/resource.ts`'S ENGINE, ON PURPOSE. Both SDKs speak\n *   plain bearer-authenticated REST with a real `NotFound` tag (see the family's own docs.md for\n *   why Argo CD, UNLIKE Discord, gets a genuine typed 404 — measured from `protocol.ts`), so the\n *   same read/diff/reconcile/destroy shape applies unchanged. A second hand-rolled engine here\n *   would just be forgejo's with the names swapped.\n *\n * ⚠️ NO `Unowned`/`adopt(true)` WRAPPING HERE — mirrors forgejo's own choice (not netbox's or\n *   discord's `Unowned` marker), not an oversight. A live match on a cold read (no persisted\n *   `output`) is treated as ours, same as every other forgejo-shaped family in this kit today.\n *\n * ⚠️ `NotFound` IS FOLDED TO \"ABSENT\" INSIDE EACH RESOURCE FILE'S OWN `fetchLive`, NOT HERE.\n *   `Effect.catchTag`'s tag-literal inference needs a concrete error union to resolve `\"NotFound\"`\n *   against; a spec's `E` is only concrete at each resource file's own call site. So every\n *   `fetchLive` ends `.pipe(Effect.catchTag('NotFound', () => Effect.succeed(undefined)))` itself.\n */\nimport { isResolved } from 'alchemy/Diff';\nimport type { Input } from 'alchemy/Input';\nimport { CredentialsFromEnv } from '@distilled.cloud/argocd/Credentials';\nimport type { ArgocdOpContext } from '@distilled.cloud/argocd/Protocol';\nimport * as Effect from 'effect/Effect';\nimport type * as HttpClient from 'effect/unstable/http/HttpClient';\n\n/** What every handler needs from the caller's runtime, once `argocdHandlers` bakes in credentials. */\nexport type ArgocdRequirements = HttpClient.HttpClient;\n\n/**\n * Strips undefined-valued keys, mapping each to a genuinely optional key rather than a present\n * key typed `X | undefined`. `tsconfig.base.json` turns on `exactOptionalPropertyTypes`, and every\n * generated Argo CD request type declares its optional fields the strict way (`foo?: X`, never\n * `foo?: X | undefined`) — so `{ foo: props.foo }` where `props.foo?: X` does not typecheck against\n * it even when `foo` is genuinely absent at runtime. Every resource file's request body goes\n * through this once, mirroring `forgejo/repository.ts#editForm`'s conditional-spread idiom, just\n * generalized instead of repeated per field.\n */\nexport const present = <T extends object>(obj: T): { [K in keyof T]?: Exclude<T[K], undefined> } =>\n  Object.fromEntries(Object.entries(obj).filter(([, v]) => v !== undefined)) as never;\n\n/**\n * One Argo CD object's distilled calls. `Live` is whatever the SDK decodes (`V1alpha1Repository`,\n * `V1alpha1Cluster`, …); `E` is left to each resource file to declare.\n */\nexport type ArgocdSpec<Props extends object, Live, Attributes, E> = {\n  /**\n   * The identity key's value — `repo`/`url`/`server` depending on the resource — read off\n   * declared props and off persisted attributes respectively. `diff` compares the two to detect\n   * an identity change, which `upsert`'s single create-or-converge call cannot express as an\n   * in-place update: Argo CD indexes each of these objects BY this value, so a changed identity\n   * means a create at the new key, never a rename, and the object left at the old key must be\n   * deleted — exactly what a `replace` diff action tells Alchemy's own Plan/Apply to do (delete\n   * the old physical object, using `olds`, then reconcile `news`). Without this, a changed\n   * `repo`/`url`/`server` orphans the old, still-credentialed object with no state pointing at it\n   * — found in adversarial review 2026-09-24, fixed here.\n   */\n  readonly identityOfProps: (props: Props) => string;\n  readonly identityOfAttributes: (attributes: Attributes) => string;\n  /** Already folds the SDK's `NotFound` to `undefined` via its own `catchTag` — see the note above. */\n  readonly fetchLive: (props: Props) => Effect.Effect<Live | undefined, E, ArgocdOpContext>;\n  readonly attributes: (live: Live, props: Props) => Attributes | undefined;\n  readonly matches: (attributes: Attributes, props: Props) => boolean;\n  /**\n   * A single upsert call — every Argo CD create endpoint this family uses takes `upsert: true`\n   * and converges create-or-update in one request, so there is no separate update path to wire.\n   */\n  readonly upsert: (props: Props) => Effect.Effect<unknown, E, ArgocdOpContext>;\n  readonly destroy: (props: Props, live: Live) => Effect.Effect<unknown, E, ArgocdOpContext>;\n};\n\nexport const argocdOperations = <Props extends object, Live, Attributes, E>(\n  spec: ArgocdSpec<Props, Live, Attributes, E>,\n) => {\n  const read = (props: Props) =>\n    spec\n      .fetchLive(props)\n      .pipe(Effect.map((live) => (live === undefined ? undefined : spec.attributes(live, props))));\n\n  return {\n    read,\n\n    diff: (news: Input<Props>, output: Attributes | undefined) =>\n      Effect.gen(function* () {\n        if (output === undefined || !isResolved(news)) return undefined;\n        // The identity key changed (repo/url/server) — `upsert` cannot rename in place, it would\n        // create at the new key and leave the old, still-live object orphaned. See the spec type.\n        if (spec.identityOfProps(news) !== spec.identityOfAttributes(output)) {\n          return { action: 'replace' } as const;\n        }\n        const live = yield* read(news);\n        if (live === undefined) return { action: 'update' } as const;\n        return spec.matches(live, news)\n          ? ({ action: 'noop' } as const)\n          : ({ action: 'update' } as const);\n      }),\n\n    reconcile: (news: Props) =>\n      Effect.gen(function* () {\n        const before = yield* read(news);\n        // S10: no write when what's declared already matches what's live.\n        if (before === undefined || !spec.matches(before, news)) {\n          yield* spec.upsert(news);\n        }\n        const after = yield* read(news);\n        if (after === undefined) {\n          return yield* Effect.die(\n            new Error(\n              'the write returned no error but the object is still absent — read back rather ' +\n                'than trust the status code.',\n            ),\n          );\n        }\n        return after;\n      }),\n\n    destroy: (olds: Props) =>\n      Effect.gen(function* () {\n        const live = yield* spec.fetchLive(olds);\n        if (live === undefined) return;\n        yield* spec.destroy(olds, live);\n      }),\n  };\n};\n\n/**\n * The four provider handlers for a spec'd Argo CD object, wired once.\n *\n * ★ CREDENTIALS ARE PROVIDED HERE, ONCE. `CredentialsFromEnv` resolves `ARGOCD_TOKEN` /\n *   `ARGOCD_SERVER` on the calling fiber per request (credentials.ts), never captured at load.\n *\n * ⚠️ `list` answers empty — Argo CD's list endpoints return every object of that kind on the whole\n *   instance; adoption stays explicit (a declared resource's own `read`), same reasoning as\n *   forgejo and discord.\n */\nexport const argocdHandlers = <Props extends object, Live, Attributes extends object, E>(\n  spec: ArgocdSpec<Props, Live, Attributes, E>,\n) => {\n  const ops = argocdOperations(spec);\n  const withCredentials = <A>(effect: Effect.Effect<A, E, ArgocdOpContext>) =>\n    Effect.provide(effect, CredentialsFromEnv);\n  return {\n    list: () => Effect.succeed([]),\n    read: ({ olds }: { olds: Props }) => withCredentials(ops.read(olds)),\n    diff: ({ news, output }: { news: Input<Props>; output: Attributes | undefined }) =>\n      withCredentials(ops.diff(news, output)),\n    reconcile: ({ news }: { news: Props }) => withCredentials(ops.reconcile(news)),\n    delete: ({ olds }: { olds: Props }) => withCredentials(ops.destroy(olds)),\n  };\n};\n",
+    "/**\n * One shape for every Argo CD REST object — Repository, RepoCreds, Cluster — the same four\n * operations, different distilled call.\n *\n * ⛔ THIS IS A NEAR-VERBATIM COPY OF `../forgejo/resource.ts`'S ENGINE, ON PURPOSE. Both SDKs speak\n *   plain bearer-authenticated REST with a real `NotFound` tag (see the family's own docs.md for\n *   why Argo CD, UNLIKE Discord, gets a genuine typed 404 — measured from `protocol.ts`), so the\n *   same read/diff/reconcile/destroy shape applies unchanged. A second hand-rolled engine here\n *   would just be forgejo's with the names swapped.\n *\n * ⚠️ NO `Unowned`/`adopt(true)` WRAPPING HERE — mirrors forgejo's own choice (not netbox's or\n *   discord's `Unowned` marker), not an oversight. A live match on a cold read (no persisted\n *   `output`) is treated as ours, same as every other forgejo-shaped family in this kit today.\n *\n * ⚠️ `NotFound` IS FOLDED TO \"ABSENT\" INSIDE EACH RESOURCE FILE'S OWN `fetchLive`, NOT HERE.\n *   `Effect.catchTag`'s tag-literal inference needs a concrete error union to resolve `\"NotFound\"`\n *   against; a spec's `E` is only concrete at each resource file's own call site. So every\n *   `fetchLive` ends `.pipe(Effect.catchTag('NotFound', () => Effect.succeed(undefined)))` itself.\n */\nimport { isResolved } from 'alchemy/Diff';\nimport type { Input } from 'alchemy/Input';\nimport { CredentialsFromEnv } from '@distilled.cloud/argocd/Credentials';\nimport type { ArgocdOpContext } from '@distilled.cloud/argocd/Protocol';\nimport * as Effect from 'effect/Effect';\nimport type * as HttpClient from 'effect/http/HttpClient';\n\n/** What every handler needs from the caller's runtime, once `argocdHandlers` bakes in credentials. */\nexport type ArgocdRequirements = HttpClient.HttpClient;\n\n/**\n * Strips undefined-valued keys, mapping each to a genuinely optional key rather than a present\n * key typed `X | undefined`. `tsconfig.base.json` turns on `exactOptionalPropertyTypes`, and every\n * generated Argo CD request type declares its optional fields the strict way (`foo?: X`, never\n * `foo?: X | undefined`) — so `{ foo: props.foo }` where `props.foo?: X` does not typecheck against\n * it even when `foo` is genuinely absent at runtime. Every resource file's request body goes\n * through this once, mirroring `forgejo/repository.ts#editForm`'s conditional-spread idiom, just\n * generalized instead of repeated per field.\n */\nexport const present = <T extends object>(obj: T): { [K in keyof T]?: Exclude<T[K], undefined> } =>\n  Object.fromEntries(Object.entries(obj).filter(([, v]) => v !== undefined)) as never;\n\n/**\n * One Argo CD object's distilled calls. `Live` is whatever the SDK decodes (`V1alpha1Repository`,\n * `V1alpha1Cluster`, …); `E` is left to each resource file to declare.\n */\nexport type ArgocdSpec<Props extends object, Live, Attributes, E> = {\n  /**\n   * The identity key's value — `repo`/`url`/`server` depending on the resource — read off\n   * declared props and off persisted attributes respectively. `diff` compares the two to detect\n   * an identity change, which `upsert`'s single create-or-converge call cannot express as an\n   * in-place update: Argo CD indexes each of these objects BY this value, so a changed identity\n   * means a create at the new key, never a rename, and the object left at the old key must be\n   * deleted — exactly what a `replace` diff action tells Alchemy's own Plan/Apply to do (delete\n   * the old physical object, using `olds`, then reconcile `news`). Without this, a changed\n   * `repo`/`url`/`server` orphans the old, still-credentialed object with no state pointing at it\n   * — found in adversarial review 2026-09-24, fixed here.\n   */\n  readonly identityOfProps: (props: Props) => string;\n  readonly identityOfAttributes: (attributes: Attributes) => string;\n  /** Already folds the SDK's `NotFound` to `undefined` via its own `catchTag` — see the note above. */\n  readonly fetchLive: (props: Props) => Effect.Effect<Live | undefined, E, ArgocdOpContext>;\n  readonly attributes: (live: Live, props: Props) => Attributes | undefined;\n  readonly matches: (attributes: Attributes, props: Props) => boolean;\n  /**\n   * A single upsert call — every Argo CD create endpoint this family uses takes `upsert: true`\n   * and converges create-or-update in one request, so there is no separate update path to wire.\n   */\n  readonly upsert: (props: Props) => Effect.Effect<unknown, E, ArgocdOpContext>;\n  readonly destroy: (props: Props, live: Live) => Effect.Effect<unknown, E, ArgocdOpContext>;\n};\n\nexport const argocdOperations = <Props extends object, Live, Attributes, E>(\n  spec: ArgocdSpec<Props, Live, Attributes, E>,\n) => {\n  const read = (props: Props) =>\n    spec\n      .fetchLive(props)\n      .pipe(Effect.map((live) => (live === undefined ? undefined : spec.attributes(live, props))));\n\n  return {\n    read,\n\n    diff: (news: Input<Props>, output: Attributes | undefined) =>\n      Effect.gen(function* () {\n        if (output === undefined || !isResolved(news)) return undefined;\n        // The identity key changed (repo/url/server) — `upsert` cannot rename in place, it would\n        // create at the new key and leave the old, still-live object orphaned. See the spec type.\n        if (spec.identityOfProps(news) !== spec.identityOfAttributes(output)) {\n          return { action: 'replace' } as const;\n        }\n        const live = yield* read(news);\n        if (live === undefined) return { action: 'update' } as const;\n        return spec.matches(live, news)\n          ? ({ action: 'noop' } as const)\n          : ({ action: 'update' } as const);\n      }),\n\n    reconcile: (news: Props) =>\n      Effect.gen(function* () {\n        const before = yield* read(news);\n        // S10: no write when what's declared already matches what's live.\n        if (before === undefined || !spec.matches(before, news)) {\n          yield* spec.upsert(news);\n        }\n        const after = yield* read(news);\n        if (after === undefined) {\n          return yield* Effect.die(\n            new Error(\n              'the write returned no error but the object is still absent — read back rather ' +\n                'than trust the status code.',\n            ),\n          );\n        }\n        return after;\n      }),\n\n    destroy: (olds: Props) =>\n      Effect.gen(function* () {\n        const live = yield* spec.fetchLive(olds);\n        if (live === undefined) return;\n        yield* spec.destroy(olds, live);\n      }),\n  };\n};\n\n/**\n * The four provider handlers for a spec'd Argo CD object, wired once.\n *\n * ★ CREDENTIALS ARE PROVIDED HERE, ONCE. `CredentialsFromEnv` resolves `ARGOCD_TOKEN` /\n *   `ARGOCD_SERVER` on the calling fiber per request (credentials.ts), never captured at load.\n *\n * ⚠️ `list` answers empty — Argo CD's list endpoints return every object of that kind on the whole\n *   instance; adoption stays explicit (a declared resource's own `read`), same reasoning as\n *   forgejo and discord.\n */\nexport const argocdHandlers = <Props extends object, Live, Attributes extends object, E>(\n  spec: ArgocdSpec<Props, Live, Attributes, E>,\n) => {\n  const ops = argocdOperations(spec);\n  const withCredentials = <A>(effect: Effect.Effect<A, E, ArgocdOpContext>) =>\n    Effect.provide(effect, CredentialsFromEnv);\n  return {\n    list: () => Effect.succeed([]),\n    read: ({ olds }: { olds: Props }) => withCredentials(ops.read(olds)),\n    diff: ({ news, output }: { news: Input<Props>; output: Attributes | undefined }) =>\n      withCredentials(ops.diff(news, output)),\n    reconcile: ({ news }: { news: Props }) => withCredentials(ops.reconcile(news)),\n    delete: ({ olds }: { olds: Props }) => withCredentials(ops.destroy(olds)),\n  };\n};\n",
     "/**\n * Argo CD credentials — a bearer-token REFERENCE, resolved lazily, never a prop.\n *\n * ⛔ NO TOKEN IS EVER A PROP OR AN ATTRIBUTE. Alchemy persists Attributes unencrypted\n *   (State/StateEncoding.ts@v2.0.0-beta.79#encodeState), so nothing a stack file holds may be a\n *   credential. `@distilled.cloud/argocd/Credentials` already ships exactly the shape this asks\n *   for: `Credentials` is a lazy `Context.Service<Credentials, Effect.Effect<Config>>`, resolved\n *   on the calling fiber inside each operation (`ArgocdProtocol`'s `credentials:` field), never at\n *   layer build. This file re-exports it rather than re-implementing it — the same choice\n *   `../discord/credentials.ts` and `../forgejo` (via `@distilled.cloud/forgejo/Credentials`) made.\n *\n * ★ `CredentialsFromEnv` reads `ARGOCD_TOKEN` (required) and `ARGOCD_SERVER` (optional instance\n *   origin, default `https://localhost:8080`) — the distilled package's own names, unchanged here\n *   so a consumer never has to guess which var this family reads.\n *\n * ⚠️ NO `credentials(...)` FACTORY EXISTS ON THIS SDK, unlike Discord/Grafana's — measured against\n *   `packages/argocd/src/credentials.ts` (distilled homeflare/base): only `fromToken({ token,\n *   apiBaseUrl? })` and `CredentialsFromEnv`. `fake-argocd.ts` builds its test layer from\n *   `fromToken` directly.\n *\n * ⚠️ NO OpenBao MINT YET, same as every other family in this kit today (`Alchemy.Stack({ secrets\n *   })` is unreleased, PR 1728, `main`-only). A deploy process exports `ARGOCD_TOKEN` itself —\n *   this package never reads it from a file.\n *\n * ⚠️ NO LIVE ARGO CD INSTANCE EXISTS ON THE ESTATE YET (2026-09-24) — this family is built ahead\n *   of the Talos-on-PVE cluster it targets, per Tim's \"get the providers ready even if we don't\n *   use it yet but we know we will.\" Nothing here has been exercised against a real server; every\n *   test in this family runs against `fake-argocd.ts`.\n */\nimport type { Config } from '@distilled.cloud/argocd/Credentials';\nimport { Credentials, CredentialsFromEnv, fromToken } from '@distilled.cloud/argocd/Credentials';\n\n/** Re-exported so a consumer never has to reach into `@distilled.cloud/argocd` by hand. */\nexport { Credentials, CredentialsFromEnv, fromToken };\nexport type { Config as ArgocdCredentialsConfig };\n\n/** `ArgocdCredentials.fromEnv()` — the layer every `argocdProviders()` stack uses by default. */\nexport const fromEnv = () => CredentialsFromEnv;\n",
     "/**\n * All three Argo CD providers as one layer for a stack.\n *\n *     Layer.mergeAll(argocdProviders(), …the stack's other providers)\n *       .pipe(Layer.provide(FetchHttpClient.layer))\n *\n * Mirrors `../discord/providers.ts`: `FetchHttpClient.layer` is the stack's own responsibility to\n * provide (the shared transport every family needs), not something a single vendor's `providers()`\n * should pin.\n */\nimport * as Layer from 'effect/Layer';\nimport { ArgocdClusterProvider } from './cluster.ts';\nimport { ArgocdRepoCredsProvider } from './repo-creds.ts';\nimport { ArgocdRepositoryProvider } from './repository.ts';\n\nexport const providers = () =>\n  Layer.mergeAll(ArgocdRepositoryProvider(), ArgocdRepoCredsProvider(), ArgocdClusterProvider());\n",
     "/**\n * `Argocd.RepoCreds` — a credential TEMPLATE that Argo CD applies to any repository whose URL\n * starts with `url` (`/api/v1/repocreds`) — distinct from `Argocd.Repository`, which registers one\n * specific repository. REST-managed, not a CRD; see `docs/argocd.md`.\n *\n * ⚠️ NO `GetRepoCredsService` OPERATION EXISTS — measured against the operation list in\n *   `services/argocd.ts` (distilled homeflare/base): Create/Update/Delete/List only, no single-item\n *   Get. `fetchLive` below lists and finds by `url`, the same shape\n *   `discord/guild-application-command.ts#fetchByName` and\n *   `forgejo/org-actions-secrets.ts#fetchLive` use for the same reason.\n *\n * ⚠️ NO LIVE ARGO CD INSTANCE EXISTS ON THE ESTATE (2026-09-24) — see `docs/argocd.md`.\n */\nimport { Resource } from 'alchemy';\nimport * as Provider from 'alchemy/Provider';\nimport * as argocd from '@distilled.cloud/argocd/argocd';\nimport * as Effect from 'effect/Effect';\nimport {\n  type ArgocdSecretEnvUnsetError,\n  type GitCredentialRefs,\n  resolveGitCredentials,\n} from './git-credentials.ts';\nimport { type ArgocdRequirements, type ArgocdSpec, argocdHandlers, present } from './resource.ts';\n\nexport interface RepoCredsProps {\n  /** The URL prefix this template matches — identity key; changing it is a replace. */\n  url: string;\n  /** \"git\" (default), \"helm\" or \"oci\". */\n  type?: string;\n  username?: string;\n  /** The client certificate itself — public, unlike its key. */\n  tlsClientCertData?: string;\n  /** Write-only — see `git-credentials.ts`. Never a value here, only env var names. */\n  credentials?: GitCredentialRefs;\n}\n\nexport interface RepoCredsAttributes {\n  url: string;\n  type: string | undefined;\n  username: string | undefined;\n  tlsClientCertData: string | undefined;\n}\n\nexport interface ArgocdRepoCreds extends Resource<\n  'Argocd.RepoCreds',\n  RepoCredsProps,\n  RepoCredsAttributes,\n  never,\n  ArgocdRequirements\n> {}\n\nexport const ArgocdRepoCreds = Resource<ArgocdRepoCreds>('Argocd.RepoCreds');\n\nconst attributesOf = (live: argocd.V1alpha1RepoCreds): RepoCredsAttributes => ({\n  tlsClientCertData: live.tlsClientCertData,\n  type: live.type,\n  url: live.url ?? '',\n  username: live.username,\n});\n\n/** Only the plain fields — see `git-credentials.ts` for why the secret fields are excluded. */\nconst plainMatches = (attrs: RepoCredsAttributes, props: RepoCredsProps): boolean =>\n  (props.type ?? 'git') === (attrs.type ?? 'git') &&\n  (props.username ?? undefined) === (attrs.username ?? undefined) &&\n  (props.tlsClientCertData ?? undefined) === (attrs.tlsClientCertData ?? undefined);\n\ntype RepoCredsError =\n  | argocd.ListRepoCredsServiceRepositoryCredentialsError\n  | argocd.CreateRepoCredsServiceRepositoryCredentialsError\n  | argocd.DeleteRepoCredsServiceRepositoryCredentialsError\n  | ArgocdSecretEnvUnsetError;\n\n/** ★ EXPORTED for direct testing against `fake-argocd.ts` — see `repo-creds.test.ts`. */\nexport const spec: ArgocdSpec<\n  RepoCredsProps,\n  argocd.V1alpha1RepoCreds,\n  RepoCredsAttributes,\n  RepoCredsError\n> = {\n  attributes: (live) => attributesOf(live),\n  // ★ Catches the DELETE call's own NotFound too — closes the TOCTOU race between the pre-check\n  //   `fetchLive` above and this call. Matches upstream's Hetzner/Certificate.ts `deleteById`.\n  destroy: (props) =>\n    argocd\n      .deleteRepoCredsServiceRepositoryCredentials({ url: props.url })\n      .pipe(Effect.catchTag('NotFound', () => Effect.void)),\n  identityOfAttributes: (attrs) => attrs.url,\n  identityOfProps: (props) => props.url,\n  fetchLive: (props) =>\n    argocd.listRepoCredsServiceRepositoryCredentials({ url: props.url }).pipe(\n      Effect.map((page) => (page.items ?? []).find((row) => row.url === props.url)),\n      Effect.catchTag('NotFound', () => Effect.succeed(undefined)),\n    ),\n  matches: plainMatches,\n  upsert: (props) =>\n    resolveGitCredentials(props.credentials ?? {}).pipe(\n      Effect.flatMap((creds) =>\n        argocd.createRepoCredsServiceRepositoryCredentials(\n          present({\n            upsert: true,\n            tlsClientCertData: props.tlsClientCertData,\n            type: props.type,\n            url: props.url,\n            username: props.username,\n            ...creds,\n          }),\n        ),\n      ),\n    ),\n};\n\nexport const handlers = argocdHandlers(spec);\n\nexport const ArgocdRepoCredsProvider = () =>\n  Provider.effect(ArgocdRepoCreds, Effect.succeed(ArgocdRepoCreds.Provider.of(handlers)));\n",

package/dist/argocd/providers.d.ts

@@ -9,5 +9,5 @@
  * should pin.
  */
 import * as Layer from 'effect/Layer';
-export declare const providers: () => Layer.Layer<import("alchemy").Provider<import("./cluster.ts").ArgocdCluster> | import("alchemy").Provider<import("./repo-creds.ts").ArgocdRepoCreds> | import("alchemy").Provider<import("./repository.ts").ArgocdRepository>, never, import("effect/unstable/http/HttpClient").HttpClient>;
+export declare const providers: () => Layer.Layer<import("alchemy").Provider<import("./cluster.ts").ArgocdCluster> | import("alchemy").Provider<import("./repo-creds.ts").ArgocdRepoCreds> | import("alchemy").Provider<import("./repository.ts").ArgocdRepository>, never, import("effect/http/HttpClient").HttpClient>;
 //# sourceMappingURL=providers.d.ts.map

package/dist/argocd/providers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"providers.d.ts","sourceRoot":"","sources":["../../src/argocd/providers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AAKtC,eAAO,MAAM,SAAS,mSAC0E,CAAC"}
+{"version":3,"file":"providers.d.ts","sourceRoot":"","sources":["../../src/argocd/providers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AAKtC,eAAO,MAAM,SAAS,0RAC0E,CAAC"}

package/dist/argocd/repo-creds.d.ts

@@ -44,7 +44,7 @@ export declare const handlers: {
     list: () => Effect.Effect<never[], never, never>;
     read: ({ olds }: {
         olds: RepoCredsProps;
-    }) => Effect.Effect<RepoCredsAttributes | undefined, RepoCredsError, import("effect/unstable/http/HttpClient").HttpClient>;
+    }) => Effect.Effect<RepoCredsAttributes | undefined, RepoCredsError, import("effect/http/HttpClient").HttpClient>;
     diff: ({ news, output }: {
         news: import("alchemy").Input<RepoCredsProps>;
         output: RepoCredsAttributes | undefined;
@@ -54,14 +54,14 @@ export declare const handlers: {
         readonly action: 'update';
     } | {
         readonly action: 'noop';
-    } | undefined, RepoCredsError, import("effect/unstable/http/HttpClient").HttpClient>;
+    } | undefined, RepoCredsError, import("effect/http/HttpClient").HttpClient>;
     reconcile: ({ news }: {
         news: RepoCredsProps;
-    }) => Effect.Effect<RepoCredsAttributes, RepoCredsError, import("effect/unstable/http/HttpClient").HttpClient>;
+    }) => Effect.Effect<RepoCredsAttributes, RepoCredsError, import("effect/http/HttpClient").HttpClient>;
     delete: ({ olds }: {
         olds: RepoCredsProps;
-    }) => Effect.Effect<void, RepoCredsError, import("effect/unstable/http/HttpClient").HttpClient>;
+    }) => Effect.Effect<void, RepoCredsError, import("effect/http/HttpClient").HttpClient>;
 };
-export declare const ArgocdRepoCredsProvider: () => import("effect/Layer").Layer<Provider.Provider<ArgocdRepoCreds>, never, import("effect/unstable/http/HttpClient").HttpClient>;
+export declare const ArgocdRepoCredsProvider: () => import("effect/Layer").Layer<Provider.Provider<ArgocdRepoCreds>, never, import("effect/http/HttpClient").HttpClient>;
 export {};
 //# sourceMappingURL=repo-creds.d.ts.map

package/dist/argocd/repo-creds.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"repo-creds.d.ts","sourceRoot":"","sources":["../../src/argocd/repo-creds.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,KAAK,QAAQ,MAAM,kBAAkB,CAAC;AAC7C,OAAO,KAAK,MAAM,MAAM,gCAAgC,CAAC;AACzD,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EACL,KAAK,yBAAyB,EAC9B,KAAK,iBAAiB,EAEvB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,KAAK,kBAAkB,EAAE,KAAK,UAAU,EAA2B,MAAM,eAAe,CAAC;AAElG,MAAM,WAAW,cAAc;IAC7B,qFAAqF;IACrF,GAAG,EAAE,MAAM,CAAC;IACZ,wCAAwC;IACxC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,8DAA8D;IAC9D,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,qFAAqF;IACrF,WAAW,CAAC,EAAE,iBAAiB,CAAC;CACjC;AAED,MAAM,WAAW,mBAAmB;IAClC,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IACzB,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,iBAAiB,EAAE,MAAM,GAAG,SAAS,CAAC;CACvC;AAED,MAAM,WAAW,eAAgB,SAAQ,QAAQ,CAC/C,kBAAkB,EAClB,cAAc,EACd,mBAAmB,EACnB,KAAK,EACL,kBAAkB,CACnB;CAAG;AAEJ,eAAO,MAAM,eAAe,kDAAgD,CAAC;AAe7E,KAAK,cAAc,GACf,MAAM,CAAC,8CAA8C,GACrD,MAAM,CAAC,gDAAgD,GACvD,MAAM,CAAC,gDAAgD,GACvD,yBAAyB,CAAC;AAE9B,yFAAyF;AACzF,eAAO,MAAM,IAAI,EAAE,UAAU,CAC3B,cAAc,EACd,MAAM,CAAC,iBAAiB,EACxB,mBAAmB,EACnB,cAAc,CAgCf,CAAC;AAEF,eAAO,MAAM,QAAQ;;;;;;;;;;;;;;;;;;;;;CAAuB,CAAC;AAE7C,eAAO,MAAM,uBAAuB,qIACqD,CAAC"}
+{"version":3,"file":"repo-creds.d.ts","sourceRoot":"","sources":["../../src/argocd/repo-creds.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,KAAK,QAAQ,MAAM,kBAAkB,CAAC;AAC7C,OAAO,KAAK,MAAM,MAAM,gCAAgC,CAAC;AACzD,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EACL,KAAK,yBAAyB,EAC9B,KAAK,iBAAiB,EAEvB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,KAAK,kBAAkB,EAAE,KAAK,UAAU,EAA2B,MAAM,eAAe,CAAC;AAElG,MAAM,WAAW,cAAc;IAC7B,qFAAqF;IACrF,GAAG,EAAE,MAAM,CAAC;IACZ,wCAAwC;IACxC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,8DAA8D;IAC9D,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,qFAAqF;IACrF,WAAW,CAAC,EAAE,iBAAiB,CAAC;CACjC;AAED,MAAM,WAAW,mBAAmB;IAClC,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IACzB,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,iBAAiB,EAAE,MAAM,GAAG,SAAS,CAAC;CACvC;AAED,MAAM,WAAW,eAAgB,SAAQ,QAAQ,CAC/C,kBAAkB,EAClB,cAAc,EACd,mBAAmB,EACnB,KAAK,EACL,kBAAkB,CACnB;CAAG;AAEJ,eAAO,MAAM,eAAe,kDAAgD,CAAC;AAe7E,KAAK,cAAc,GACf,MAAM,CAAC,8CAA8C,GACrD,MAAM,CAAC,gDAAgD,GACvD,MAAM,CAAC,gDAAgD,GACvD,yBAAyB,CAAC;AAE9B,yFAAyF;AACzF,eAAO,MAAM,IAAI,EAAE,UAAU,CAC3B,cAAc,EACd,MAAM,CAAC,iBAAiB,EACxB,mBAAmB,EACnB,cAAc,CAgCf,CAAC;AAEF,eAAO,MAAM,QAAQ;;;;;;;;;;;;;;;;;;;;;CAAuB,CAAC;AAE7C,eAAO,MAAM,uBAAuB,4HACqD,CAAC"}

package/dist/argocd/repository.d.ts

@@ -64,7 +64,7 @@ export declare const handlers: {
     list: () => Effect.Effect<never[], never, never>;
     read: ({ olds }: {
         olds: RepositoryProps;
-    }) => Effect.Effect<RepositoryAttributes | undefined, RepositoryError, import("effect/unstable/http/HttpClient").HttpClient>;
+    }) => Effect.Effect<RepositoryAttributes | undefined, RepositoryError, import("effect/http/HttpClient").HttpClient>;
     diff: ({ news, output }: {
         news: import("alchemy").Input<RepositoryProps>;
         output: RepositoryAttributes | undefined;
@@ -74,14 +74,14 @@ export declare const handlers: {
         readonly action: 'update';
     } | {
         readonly action: 'noop';
-    } | undefined, RepositoryError, import("effect/unstable/http/HttpClient").HttpClient>;
+    } | undefined, RepositoryError, import("effect/http/HttpClient").HttpClient>;
     reconcile: ({ news }: {
         news: RepositoryProps;
-    }) => Effect.Effect<RepositoryAttributes, RepositoryError, import("effect/unstable/http/HttpClient").HttpClient>;
+    }) => Effect.Effect<RepositoryAttributes, RepositoryError, import("effect/http/HttpClient").HttpClient>;
     delete: ({ olds }: {
         olds: RepositoryProps;
-    }) => Effect.Effect<void, RepositoryError, import("effect/unstable/http/HttpClient").HttpClient>;
+    }) => Effect.Effect<void, RepositoryError, import("effect/http/HttpClient").HttpClient>;
 };
-export declare const ArgocdRepositoryProvider: () => import("effect/Layer").Layer<Provider.Provider<ArgocdRepository>, never, import("effect/unstable/http/HttpClient").HttpClient>;
+export declare const ArgocdRepositoryProvider: () => import("effect/Layer").Layer<Provider.Provider<ArgocdRepository>, never, import("effect/http/HttpClient").HttpClient>;
 export {};
 //# sourceMappingURL=repository.d.ts.map

package/dist/argocd/repository.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"repository.d.ts","sourceRoot":"","sources":["../../src/argocd/repository.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,KAAK,QAAQ,MAAM,kBAAkB,CAAC;AAC7C,OAAO,KAAK,MAAM,MAAM,gCAAgC,CAAC;AACzD,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EACL,KAAK,yBAAyB,EAC9B,KAAK,iBAAiB,EAEvB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,KAAK,kBAAkB,EAAE,KAAK,UAAU,EAA2B,MAAM,eAAe,CAAC;AAElG,MAAM,WAAW,eAAe;IAC9B,kFAAkF;IAClF,IAAI,EAAE,MAAM,CAAC;IACb,wCAAwC;IACxC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,sFAAsF;IACtF,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,gFAAgF;IAChF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,8DAA8D;IAC9D,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,qFAAqF;IACrF,WAAW,CAAC,EAAE,iBAAiB,CAAC;CACjC;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IACzB,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IACzB,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,QAAQ,EAAE,OAAO,GAAG,SAAS,CAAC;IAC9B,qBAAqB,EAAE,OAAO,GAAG,SAAS,CAAC;IAC3C,SAAS,EAAE,OAAO,GAAG,SAAS,CAAC;IAC/B,SAAS,EAAE,OAAO,GAAG,SAAS,CAAC;IAC/B,kBAAkB,EAAE,OAAO,GAAG,SAAS,CAAC;IACxC,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,iBAAiB,EAAE,MAAM,GAAG,SAAS,CAAC;CACvC;AAED,MAAM,WAAW,gBAAiB,SAAQ,QAAQ,CAChD,mBAAmB,EACnB,eAAe,EACf,oBAAoB,EACpB,KAAK,EACL,kBAAkB,CACnB;CAAG;AAEJ,eAAO,MAAM,gBAAgB,mDAE3B,CAAC;AAiCH,KAAK,eAAe,GAChB,MAAM,CAAC,yBAAyB,GAChC,MAAM,CAAC,sCAAsC,GAC7C,MAAM,CAAC,sCAAsC,GAC7C,yBAAyB,CAAC;AAE9B,yFAAyF;AACzF,eAAO,MAAM,IAAI,EAAE,UAAU,CAC3B,eAAe,EACf,MAAM,CAAC,kBAAkB,EACzB,oBAAoB,EACpB,eAAe,CA0ChB,CAAC;AAEF,eAAO,MAAM,QAAQ;;;;;;;;;;;;;;;;;;;;;CAAuB,CAAC;AAE7C,eAAO,MAAM,wBAAwB,sIACsD,CAAC"}
+{"version":3,"file":"repository.d.ts","sourceRoot":"","sources":["../../src/argocd/repository.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,KAAK,QAAQ,MAAM,kBAAkB,CAAC;AAC7C,OAAO,KAAK,MAAM,MAAM,gCAAgC,CAAC;AACzD,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EACL,KAAK,yBAAyB,EAC9B,KAAK,iBAAiB,EAEvB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,KAAK,kBAAkB,EAAE,KAAK,UAAU,EAA2B,MAAM,eAAe,CAAC;AAElG,MAAM,WAAW,eAAe;IAC9B,kFAAkF;IAClF,IAAI,EAAE,MAAM,CAAC;IACb,wCAAwC;IACxC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,sFAAsF;IACtF,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,gFAAgF;IAChF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,8DAA8D;IAC9D,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,qFAAqF;IACrF,WAAW,CAAC,EAAE,iBAAiB,CAAC;CACjC;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IACzB,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IACzB,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,QAAQ,EAAE,OAAO,GAAG,SAAS,CAAC;IAC9B,qBAAqB,EAAE,OAAO,GAAG,SAAS,CAAC;IAC3C,SAAS,EAAE,OAAO,GAAG,SAAS,CAAC;IAC/B,SAAS,EAAE,OAAO,GAAG,SAAS,CAAC;IAC/B,kBAAkB,EAAE,OAAO,GAAG,SAAS,CAAC;IACxC,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,iBAAiB,EAAE,MAAM,GAAG,SAAS,CAAC;CACvC;AAED,MAAM,WAAW,gBAAiB,SAAQ,QAAQ,CAChD,mBAAmB,EACnB,eAAe,EACf,oBAAoB,EACpB,KAAK,EACL,kBAAkB,CACnB;CAAG;AAEJ,eAAO,MAAM,gBAAgB,mDAE3B,CAAC;AAiCH,KAAK,eAAe,GAChB,MAAM,CAAC,yBAAyB,GAChC,MAAM,CAAC,sCAAsC,GAC7C,MAAM,CAAC,sCAAsC,GAC7C,yBAAyB,CAAC;AAE9B,yFAAyF;AACzF,eAAO,MAAM,IAAI,EAAE,UAAU,CAC3B,eAAe,EACf,MAAM,CAAC,kBAAkB,EACzB,oBAAoB,EACpB,eAAe,CA0ChB,CAAC;AAEF,eAAO,MAAM,QAAQ;;;;;;;;;;;;;;;;;;;;;CAAuB,CAAC;AAE7C,eAAO,MAAM,wBAAwB,6HACsD,CAAC"}

package/dist/argocd/resource.d.ts

@@ -1,7 +1,7 @@
 import type { Input } from 'alchemy/Input';
 import type { ArgocdOpContext } from '@distilled.cloud/argocd/Protocol';
 import * as Effect from 'effect/Effect';
-import type * as HttpClient from 'effect/unstable/http/HttpClient';
+import type * as HttpClient from 'effect/http/HttpClient';
 /** What every handler needs from the caller's runtime, once `argocdHandlers` bakes in credentials. */
 export type ArgocdRequirements = HttpClient.HttpClient;
 /**

package/dist/argocd/resource.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resource.d.ts","sourceRoot":"","sources":["../../src/argocd/resource.ts"],"names":[],"mappings":"AAoBA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AAE3C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AACxE,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,KAAK,UAAU,MAAM,iCAAiC,CAAC;AAEnE,sGAAsG;AACtG,MAAM,MAAM,kBAAkB,GAAG,UAAU,CAAC,UAAU,CAAC;AAEvD;;;;;;;;GAQG;AACH,eAAO,MAAM,OAAO,GAAI,CAAC,SAAS,MAAM,OAAO,CAAC,KAAG,GAAG,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,GACT,CAAC;AAEtF;;;GAGG;AACH,MAAM,MAAM,UAAU,CAAC,KAAK,SAAS,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,IAAI;IAClE;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,eAAe,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,MAAM,CAAC;IACnD,QAAQ,CAAC,oBAAoB,EAAE,CAAC,UAAU,EAAE,UAAU,KAAK,MAAM,CAAC;IAClE,qGAAqG;IACrG,QAAQ,CAAC,SAAS,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,MAAM,CAAC,MAAM,CAAC,IAAI,GAAG,SAAS,EAAE,CAAC,EAAE,eAAe,CAAC,CAAC;IAC1F,QAAQ,CAAC,UAAU,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,KAAK,UAAU,GAAG,SAAS,CAAC;IAC1E,QAAQ,CAAC,OAAO,EAAE,CAAC,UAAU,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,KAAK,OAAO,CAAC;IACpE;;;OAGG;IACH,QAAQ,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,EAAE,eAAe,CAAC,CAAC;IAC9E,QAAQ,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,KAAK,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,EAAE,eAAe,CAAC,CAAC;CAC5F,CAAC;AAEF,eAAO,MAAM,gBAAgB,GAAI,KAAK,SAAS,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,QAClE,UAAU,CAAC,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;kBAEvB,KAAK;iBAQX,KAAK,CAAC,KAAK,CAAC,UAAU,UAAU,GAAG,SAAS;yBAMlC,SAAS;;yBAGa,QAAQ;;yBAElC,MAAM;;sBAIP,KAAK;oBAmBP,KAAK;CAOxB,CAAC;AAEF;;;;;;;;;GASG;AACH,eAAO,MAAM,cAAc,GAAI,KAAK,SAAS,MAAM,EAAE,IAAI,EAAE,UAAU,SAAS,MAAM,EAAE,CAAC,QAC/E,UAAU,CAAC,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;IAM1C,IAAI;IACJ,IAAI,aAAa;QAAE,IAAI,EAAE,KAAK,CAAA;KAAE;IAChC,IAAI,qBAAqB;QAAE,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QAAC,MAAM,EAAE,UAAU,GAAG,SAAS,CAAA;KAAE;yBAxDxD,SAAS;;yBAGa,QAAQ;;yBAElC,MAAM;;IAqDzB,SAAS,aAAa;QAAE,IAAI,EAAE,KAAK,CAAA;KAAE;IACrC,MAAM,aAAa;QAAE,IAAI,EAAE,KAAK,CAAA;KAAE;CAErC,CAAC"}
+{"version":3,"file":"resource.d.ts","sourceRoot":"","sources":["../../src/argocd/resource.ts"],"names":[],"mappings":"AAoBA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AAE3C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AACxE,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,KAAK,UAAU,MAAM,wBAAwB,CAAC;AAE1D,sGAAsG;AACtG,MAAM,MAAM,kBAAkB,GAAG,UAAU,CAAC,UAAU,CAAC;AAEvD;;;;;;;;GAQG;AACH,eAAO,MAAM,OAAO,GAAI,CAAC,SAAS,MAAM,OAAO,CAAC,KAAG,GAAG,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,GACT,CAAC;AAEtF;;;GAGG;AACH,MAAM,MAAM,UAAU,CAAC,KAAK,SAAS,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,IAAI;IAClE;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,eAAe,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,MAAM,CAAC;IACnD,QAAQ,CAAC,oBAAoB,EAAE,CAAC,UAAU,EAAE,UAAU,KAAK,MAAM,CAAC;IAClE,qGAAqG;IACrG,QAAQ,CAAC,SAAS,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,MAAM,CAAC,MAAM,CAAC,IAAI,GAAG,SAAS,EAAE,CAAC,EAAE,eAAe,CAAC,CAAC;IAC1F,QAAQ,CAAC,UAAU,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,KAAK,UAAU,GAAG,SAAS,CAAC;IAC1E,QAAQ,CAAC,OAAO,EAAE,CAAC,UAAU,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,KAAK,OAAO,CAAC;IACpE;;;OAGG;IACH,QAAQ,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,EAAE,eAAe,CAAC,CAAC;IAC9E,QAAQ,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,KAAK,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,EAAE,eAAe,CAAC,CAAC;CAC5F,CAAC;AAEF,eAAO,MAAM,gBAAgB,GAAI,KAAK,SAAS,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,QAClE,UAAU,CAAC,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;kBAEvB,KAAK;iBAQX,KAAK,CAAC,KAAK,CAAC,UAAU,UAAU,GAAG,SAAS;yBAMlC,SAAS;;yBAGa,QAAQ;;yBAElC,MAAM;;sBAIP,KAAK;oBAmBP,KAAK;CAOxB,CAAC;AAEF;;;;;;;;;GASG;AACH,eAAO,MAAM,cAAc,GAAI,KAAK,SAAS,MAAM,EAAE,IAAI,EAAE,UAAU,SAAS,MAAM,EAAE,CAAC,QAC/E,UAAU,CAAC,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;IAM1C,IAAI;IACJ,IAAI,aAAa;QAAE,IAAI,EAAE,KAAK,CAAA;KAAE;IAChC,IAAI,qBAAqB;QAAE,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QAAC,MAAM,EAAE,UAAU,GAAG,SAAS,CAAA;KAAE;yBAxDxD,SAAS;;yBAGa,QAAQ;;yBAElC,MAAM;;IAqDzB,SAAS,aAAa;QAAE,IAAI,EAAE,KAAK,CAAA;KAAE;IACrC,MAAM,aAAa;QAAE,IAAI,EAAE,KAAK,CAAA;KAAE;CAErC,CAAC"}

package/dist/caddy/admin.d.ts

@@ -30,7 +30,7 @@
  *   config.ts is the one place that `Effect.provide`s it, scoped to exactly the effects that call
  *   `@distilled.cloud/caddy`'s operations.
  */
-import type * as HttpClient from 'effect/unstable/http/HttpClient';
+import type * as HttpClient from 'effect/http/HttpClient';
 import * as Context from 'effect/Context';
 import * as Layer from 'effect/Layer';
 import type { Credentials } from '@distilled.cloud/caddy';

package/dist/caddy/admin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"admin.d.ts","sourceRoot":"","sources":["../../src/caddy/admin.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,OAAO,KAAK,KAAK,UAAU,MAAM,iCAAiC,CAAC;AACnE,OAAO,KAAK,OAAO,MAAM,gBAAgB,CAAC;AAC1C,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAE1D;;;GAGG;AACH,MAAM,MAAM,kBAAkB,GAC1B;IAAE,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC5E;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAErD,qFAAqF;AACrF,MAAM,WAAW,WAAW;IAC1B,2EAA2E;IAC3E,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B;;;OAGG;IACH,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAC;CACvC;AAED,wFAAwF;AACxF,MAAM,WAAW,cAAe,SAAQ,WAAW;IACjD;;;;;;;;;OASG;IACH,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,WAAW,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;CAClE;;AAED,oFAAoF;AACpF,qBAAa,iBAAkB,SAAQ,sBAEtC;CAAG;;AAEJ;;;;;;GAMG;AACH,qBAAa,mBAAoB,SAAQ,wBAGC;CAAG;AAE7C;;;;;;;GAOG;AACH,eAAO,MAAM,eAAe,cACf,cAAc,KACxB,KAAK,CAAC,KAAK,CAAC,iBAAiB,GAAG,mBAAmB,CAOnD,CAAC"}
+{"version":3,"file":"admin.d.ts","sourceRoot":"","sources":["../../src/caddy/admin.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,OAAO,KAAK,KAAK,UAAU,MAAM,wBAAwB,CAAC;AAC1D,OAAO,KAAK,OAAO,MAAM,gBAAgB,CAAC;AAC1C,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAE1D;;;GAGG;AACH,MAAM,MAAM,kBAAkB,GAC1B;IAAE,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC5E;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAErD,qFAAqF;AACrF,MAAM,WAAW,WAAW;IAC1B,2EAA2E;IAC3E,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B;;;OAGG;IACH,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAC;CACvC;AAED,wFAAwF;AACxF,MAAM,WAAW,cAAe,SAAQ,WAAW;IACjD;;;;;;;;;OASG;IACH,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,WAAW,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;CAClE;;AAED,oFAAoF;AACpF,qBAAa,iBAAkB,SAAQ,sBAEtC;CAAG;;AAEJ;;;;;;GAMG;AACH,qBAAa,mBAAoB,SAAQ,wBAGC;CAAG;AAE7C;;;;;;;GAOG;AACH,eAAO,MAAM,eAAe,cACf,cAAc,KACxB,KAAK,CAAC,KAAK,CAAC,iBAAiB,GAAG,mBAAmB,CAOnD,CAAC"}

package/dist/caddy/caddy-http-client.d.ts

@@ -1,6 +1,6 @@
 import * as Layer from 'effect/Layer';
-import * as HttpClient from 'effect/unstable/http/HttpClient';
-import * as HttpClientError from 'effect/unstable/http/HttpClientError';
+import * as HttpClient from 'effect/http/HttpClient';
+import * as HttpClientError from 'effect/http/HttpClientError';
 import type { Target } from './admin-address.ts';
 export type LocalHttpClientOptions = {
     /**

package/dist/caddy/caddy-http-client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"caddy-http-client.d.ts","sourceRoot":"","sources":["../../src/caddy/caddy-http-client.ts"],"names":[],"mappings":"AAqBA,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AAEtC,OAAO,KAAK,UAAU,MAAM,iCAAiC,CAAC;AAC9D,OAAO,KAAK,eAAe,MAAM,sCAAsC,CAAC;AAGxE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAEjD,MAAM,MAAM,sBAAsB,GAAG;IACnC;;;;OAIG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,8EAA8E;IAC9E,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,mBAAmB;IACnB,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;CAChC,CAAC;AASF;;;;GAIG;AACH,eAAO,MAAM,aAAa,UAAW,OAAO,KAAG,KAAK,IAAI,eAAe,CAAC,eAGjB,CAAC;AA4JxD,kGAAkG;AAClG,eAAO,MAAM,mBAAmB,WACtB,MAAM,YACL,sBAAsB,KAC9B,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU,CAWnC,CAAC"}
+{"version":3,"file":"caddy-http-client.d.ts","sourceRoot":"","sources":["../../src/caddy/caddy-http-client.ts"],"names":[],"mappings":"AAqBA,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AAEtC,OAAO,KAAK,UAAU,MAAM,wBAAwB,CAAC;AACrD,OAAO,KAAK,eAAe,MAAM,6BAA6B,CAAC;AAG/D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAEjD,MAAM,MAAM,sBAAsB,GAAG;IACnC;;;;OAIG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,8EAA8E;IAC9E,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,mBAAmB;IACnB,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;CAChC,CAAC;AASF;;;;GAIG;AACH,eAAO,MAAM,aAAa,UAAW,OAAO,KAAG,KAAK,IAAI,eAAe,CAAC,eAGjB,CAAC;AA4JxD,kGAAkG;AAClG,eAAO,MAAM,mBAAmB,WACtB,MAAM,YACL,sBAAsB,KAC9B,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU,CAWnC,CAAC"}

package/dist/caddy/format.d.ts

@@ -20,7 +20,7 @@
  *   the Caddyfile before declaring it, not by ignoring the warning.
  */
 import * as Effect from 'effect/Effect';
-import * as ChildProcessSpawner from 'effect/unstable/process/ChildProcessSpawner';
+import * as ChildProcessSpawner from 'effect/process/ChildProcessSpawner';
 import type * as PlatformError from 'effect/PlatformError';
 /** `caddy` resolved on `PATH`, unless the caller points at a specific build. */
 export declare const DEFAULT_CADDY_BINARY = "caddy";

package/dist/caddy/format.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"format.d.ts","sourceRoot":"","sources":["../../src/caddy/format.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAGxC,OAAO,KAAK,mBAAmB,MAAM,6CAA6C,CAAC;AACnF,OAAO,KAAK,KAAK,aAAa,MAAM,sBAAsB,CAAC;AAE3D,gFAAgF;AAChF,eAAO,MAAM,oBAAoB,UAAU,CAAC;AAE5C,mGAAmG;AACnG,qBAAa,gBAAiB,SAAQ,KAAK;IAGvC,QAAQ,CAAC,UAAU,EAAE,MAAM;IAF7B,QAAQ,CAAC,IAAI,sBAAsB;IACnC,YACW,UAAU,EAAE,MAAM,EAC3B,KAAK,EAAE,aAAa,CAAC,aAAa,EAOnC;CACF;AAED,kFAAkF;AAClF,qBAAa,cAAe,SAAQ,KAAK;IAGrC,QAAQ,CAAC,UAAU,EAAE,MAAM;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM;IAH3B,QAAQ,CAAC,IAAI,oBAAoB;IACjC,YACW,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,EACzB,MAAM,EAAE,MAAM,EAMf;CACF;AAED,MAAM,MAAM,sBAAsB,GAAG;IACnC,kGAAkG;IAClG,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,eAAe,SACpB,MAAM,YACH,sBAAsB,KAC9B,MAAM,CAAC,MAAM,CACd,MAAM,EAGN,gBAAgB,GAAG,cAAc,GAAG,aAAa,CAAC,aAAa,EAC/D,mBAAmB,CAAC,mBAAmB,CA0CrC,CAAC"}
+{"version":3,"file":"format.d.ts","sourceRoot":"","sources":["../../src/caddy/format.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAGxC,OAAO,KAAK,mBAAmB,MAAM,oCAAoC,CAAC;AAC1E,OAAO,KAAK,KAAK,aAAa,MAAM,sBAAsB,CAAC;AAE3D,gFAAgF;AAChF,eAAO,MAAM,oBAAoB,UAAU,CAAC;AAE5C,mGAAmG;AACnG,qBAAa,gBAAiB,SAAQ,KAAK;IAGvC,QAAQ,CAAC,UAAU,EAAE,MAAM;IAF7B,QAAQ,CAAC,IAAI,sBAAsB;IACnC,YACW,UAAU,EAAE,MAAM,EAC3B,KAAK,EAAE,aAAa,CAAC,aAAa,EAOnC;CACF;AAED,kFAAkF;AAClF,qBAAa,cAAe,SAAQ,KAAK;IAGrC,QAAQ,CAAC,UAAU,EAAE,MAAM;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM;IAH3B,QAAQ,CAAC,IAAI,oBAAoB;IACjC,YACW,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,EACzB,MAAM,EAAE,MAAM,EAMf;CACF;AAED,MAAM,MAAM,sBAAsB,GAAG;IACnC,kGAAkG;IAClG,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,eAAe,SACpB,MAAM,YACH,sBAAsB,KAC9B,MAAM,CAAC,MAAM,CACd,MAAM,EAGN,gBAAgB,GAAG,cAAc,GAAG,aAAa,CAAC,aAAa,EAC/D,mBAAmB,CAAC,mBAAmB,CA0CrC,CAAC"}

package/dist/caddy/index.js

@@ -59,9 +59,9 @@ import * as Duration from "effect/Duration";
 import * as Effect from "effect/Effect";
 import * as Layer2 from "effect/Layer";
 import * as Result from "effect/Result";
-import * as HttpClient from "effect/unstable/http/HttpClient";
-import * as HttpClientError from "effect/unstable/http/HttpClientError";
-import * as HttpClientResponse from "effect/unstable/http/HttpClientResponse";
+import * as HttpClient from "effect/http/HttpClient";
+import * as HttpClientError from "effect/http/HttpClientError";
+import * as HttpClientResponse from "effect/http/HttpClientResponse";
 var NEVER_CONNECTED = new Set(["ECONNREFUSED", "ENOENT"]);
 var codeOf = (cause) => typeof cause === "object" && cause !== null && ("code" in cause) ? String(cause.code) : undefined;
 var isUnreachable = (error) => error instanceof HttpClientError.HttpClientError && error.reason._tag === "TransportError" && NEVER_CONNECTED.has(codeOf(error.reason.cause) ?? "");
@@ -1004,8 +1004,8 @@ var CaddyConfigProvider = () => Provider.effect(CaddyConfig, Effect11.gen(functi
 // src/caddy/format.ts
 import * as Effect12 from "effect/Effect";
 import * as Stream from "effect/Stream";
-import * as ChildProcess from "effect/unstable/process/ChildProcess";
-import * as ChildProcessSpawner from "effect/unstable/process/ChildProcessSpawner";
+import * as ChildProcess from "effect/process/ChildProcess";
+import * as ChildProcessSpawner from "effect/process/ChildProcessSpawner";
 var DEFAULT_CADDY_BINARY = "caddy";
 
 class CaddyFmtNotFound extends Error {
@@ -1377,5 +1377,5 @@ export {
   verifierProblems
 };
 
-//# debugId=0F44BF8B422950FD64756E2164756E21
+//# debugId=A4890D1A8DCAD67064756E2164756E21
 //# sourceMappingURL=index.js.map