@homeflare/alchemy 0.52.0 → 0.53.0

package/dist/grafana/folder-permission.d.ts

@@ -0,0 +1,76 @@
+/**
+ * `Grafana.FolderPermission` — ONE team's DIRECT permission on ONE folder.
+ *
+ * Walked against `@distilled.cloud/grafana` 0.2.1 (`@homeflare/distilled-grafana`):
+ * `getResourcePermissions` (`GET /access-control/folders/{uid}`) and `setResourcePermissionsForTeam`
+ * (`POST /access-control/folders/{uid}/teams/{teamId}`).
+ *
+ * ★ ADDITIVE BY CONSTRUCTION. The per-team endpoint touches only that team's managed entry; the
+ *   folder's other entries (built-in roles, admin users, other teams, anything inherited from a parent
+ *   folder) are never read into a write and never changed. The whole-list `setResourcePermissions`
+ *   would replace them all — deliberately not used.
+ * ★ ONLY DIRECT ENTRIES COUNT. An entry inherited from a parent folder (`isInherited`) is not this
+ *   resource's object: it can't be changed here, so it never satisfies a declaration either.
+ * ★ The team is named, not numbered. Team ids differ per instance, so `teamName` is resolved through
+ *   `findTeamByName` on every read and write; a missing team fails loudly with
+ *   `GrafanaTeamNotFoundError` (declare the `Grafana.Team` first) instead of folding to "absent".
+ * ★ delete = set the team's permission to "" (Grafana's documented way to remove a managed entry),
+ *   idempotent: an already-absent entry is a no-op (S11).
+ */
+import { Resource } from 'alchemy';
+import * as Provider from 'alchemy/Provider';
+import * as grafana from '@distilled.cloud/grafana';
+import * as Effect from 'effect/Effect';
+import { type GrafanaSpec } from './resource.ts';
+export type FolderPermissionLevel = 'View' | 'Edit' | 'Admin';
+export interface FolderPermissionProps {
+    folderUid: string;
+    teamName: string;
+    permission: FolderPermissionLevel;
+}
+export interface FolderPermissionAttributes {
+    folderUid: string;
+    teamId: number;
+    teamName: string;
+    permission: string;
+}
+export interface GrafanaFolderPermission extends Resource<'Grafana.FolderPermission', FolderPermissionProps, FolderPermissionAttributes, never> {
+}
+export declare const GrafanaFolderPermission: import("alchemy").ResourceClass<GrafanaFolderPermission>;
+declare const GrafanaTeamNotFoundError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "GrafanaTeamNotFoundError";
+} & Readonly<A>;
+export declare class GrafanaTeamNotFoundError extends GrafanaTeamNotFoundError_base<{
+    readonly message: string;
+}> {
+}
+interface LivePermission {
+    readonly teamId: number;
+    readonly permission: string;
+}
+export declare const spec: GrafanaSpec<FolderPermissionProps, LivePermission, FolderPermissionAttributes, grafana.SearchTeamsError | grafana.GetResourcePermissionsError | grafana.SetResourcePermissionsForTeamError | GrafanaTeamNotFoundError>;
+export declare const handlers: {
+    list: () => Effect.Effect<never[], never, never>;
+    read: ({ olds }: {
+        olds: FolderPermissionProps;
+    }) => Effect.Effect<FolderPermissionAttributes | undefined, grafana.BadGateway | import("@distilled.cloud/caddy").BadRequest | grafana.BadRequest | grafana.ConfigError | import("@distilled.cloud/caddy").Conflict | import("@distilled.cloud/caddy").Forbidden | grafana.Forbidden | grafana.GatewayTimeout | GrafanaTeamNotFoundError | import("effect/http/HttpClientError").HttpClientError | grafana.InternalServerError | grafana.Locked | import("@distilled.cloud/caddy").NotFound | grafana.NotFound | grafana.ServiceUnavailable | grafana.TooManyRequests | grafana.Unauthorized | grafana.UnknownGrafanaError | import("@distilled.cloud/caddy").UnprocessableEntity, grafana.GrafanaOpContext>;
+    diff: ({ news, output }: {
+        news: import("alchemy").Input<FolderPermissionProps>;
+        output: FolderPermissionAttributes | undefined;
+    }) => Effect.Effect<{
+        readonly action: 'update';
+    } | {
+        readonly action: 'noop';
+    } | {
+        readonly action: 'replace';
+    } | undefined, grafana.BadGateway | import("@distilled.cloud/caddy").BadRequest | grafana.BadRequest | grafana.ConfigError | import("@distilled.cloud/caddy").Conflict | import("@distilled.cloud/caddy").Forbidden | grafana.Forbidden | grafana.GatewayTimeout | GrafanaTeamNotFoundError | import("effect/http/HttpClientError").HttpClientError | grafana.InternalServerError | grafana.Locked | import("@distilled.cloud/caddy").NotFound | grafana.NotFound | grafana.ServiceUnavailable | grafana.TooManyRequests | grafana.Unauthorized | grafana.UnknownGrafanaError | import("@distilled.cloud/caddy").UnprocessableEntity, grafana.GrafanaOpContext>;
+    reconcile: ({ news }: {
+        news: FolderPermissionProps;
+    }) => Effect.Effect<FolderPermissionAttributes, grafana.BadGateway | import("@distilled.cloud/caddy").BadRequest | grafana.BadRequest | grafana.ConfigError | import("@distilled.cloud/caddy").Conflict | import("@distilled.cloud/caddy").Forbidden | grafana.Forbidden | grafana.GatewayTimeout | GrafanaTeamNotFoundError | import("effect/http/HttpClientError").HttpClientError | grafana.InternalServerError | grafana.Locked | import("@distilled.cloud/caddy").NotFound | grafana.NotFound | grafana.ServiceUnavailable | grafana.TooManyRequests | grafana.Unauthorized | grafana.UnknownGrafanaError | import("@distilled.cloud/caddy").UnprocessableEntity, grafana.GrafanaOpContext>;
+    delete: ({ olds }: {
+        olds: FolderPermissionProps;
+    }) => Effect.Effect<void, grafana.BadGateway | import("@distilled.cloud/caddy").BadRequest | grafana.BadRequest | grafana.ConfigError | import("@distilled.cloud/caddy").Conflict | import("@distilled.cloud/caddy").Forbidden | grafana.Forbidden | grafana.GatewayTimeout | GrafanaTeamNotFoundError | import("effect/http/HttpClientError").HttpClientError | grafana.InternalServerError | grafana.Locked | import("@distilled.cloud/caddy").NotFound | grafana.NotFound | grafana.ServiceUnavailable | grafana.TooManyRequests | grafana.Unauthorized | grafana.UnknownGrafanaError | import("@distilled.cloud/caddy").UnprocessableEntity, grafana.GrafanaOpContext>;
+};
+export declare const GrafanaFolderPermissionProvider: () => import("effect/Layer").Layer<Provider.Provider<GrafanaFolderPermission>, never, grafana.GrafanaOpContext>;
+export {};
+//# sourceMappingURL=folder-permission.d.ts.map

package/dist/grafana/folder-permission.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"folder-permission.d.ts","sourceRoot":"","sources":["../../src/grafana/folder-permission.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,KAAK,QAAQ,MAAM,kBAAkB,CAAC;AAC7C,OAAO,KAAK,OAAO,MAAM,0BAA0B,CAAC;AAEpD,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,KAAK,WAAW,EAAmB,MAAM,eAAe,CAAC;AAGlE,MAAM,MAAM,qBAAqB,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;AAE9D,MAAM,WAAW,qBAAqB;IACpC,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,qBAAqB,CAAC;CACnC;AAED,MAAM,WAAW,0BAA0B;IACzC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,uBAAwB,SAAQ,QAAQ,CACvD,0BAA0B,EAC1B,qBAAqB,EACrB,0BAA0B,EAC1B,KAAK,CACN;CAAG;AAEJ,eAAO,MAAM,uBAAuB,0DAEnC,CAAC;;;;AAEF,qBAAa,wBAAyB,SAAQ,8BAA6C;IACzF,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B,CAAC;CAAG;AAEL,UAAU,cAAc;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAuBD,eAAO,MAAM,IAAI,EAAE,WAAW,CAC5B,qBAAqB,EACrB,cAAc,EACd,0BAA0B,EACxB,OAAO,CAAC,gBAAgB,GACxB,OAAO,CAAC,2BAA2B,GACnC,OAAO,CAAC,kCAAkC,GAC1C,wBAAwB,CA6B3B,CAAC;AAEF,eAAO,MAAM,QAAQ;;;;;;;;;;;;;;;;;;;;;CAAwB,CAAC;AAE9C,eAAO,MAAM,+BAA+B,iHAIzC,CAAC"}

package/dist/grafana/index.d.ts

@@ -8,7 +8,7 @@
  *
  * `Grafana.Datasource`, `Grafana.Folder`, `Grafana.Dashboard`, `Grafana.ContactPoint`,
  * `Grafana.MuteTiming`, `Grafana.MessageTemplate`, `Grafana.AlertRuleGroup` and
- * `Grafana.NotificationPolicy` all ship here — see docs/grafana.md, docs/grafana-folder-dashboard.md,
+ * `Grafana.NotificationPolicy`, `Grafana.Team` and `Grafana.FolderPermission` all ship here — see docs/grafana.md, docs/grafana-folder-dashboard.md,
  * docs/grafana-alerting.md, docs/grafana-alerting-rules.md and
  * docs/grafana-notification-policy.md for what shipped.
  */
@@ -17,6 +17,8 @@ export { type NotificationPolicyAttributes, type NotificationPolicyProps, type P
 export { type DatasourceAttributes, type DatasourceProps, GrafanaDatasource, GrafanaDatasourceProvider, } from './datasource.ts';
 export { type DashboardAttributes, type DashboardModel, type DashboardProps, GrafanaDashboard, GrafanaDashboardProvider, } from './dashboard.ts';
 export { type FolderAttributes, type FolderProps, GrafanaFolder, GrafanaFolderProvider, GrafanaFolderReparentError, } from './folder.ts';
+export { type TeamAttributes, type TeamProps, GrafanaTeam, GrafanaTeamProvider } from './team.ts';
+export { type FolderPermissionAttributes, type FolderPermissionLevel, type FolderPermissionProps, GrafanaFolderPermission, GrafanaFolderPermissionProvider, GrafanaTeamNotFoundError, } from './folder-permission.ts';
 export { type ContactPointAttributes, type ContactPointProps, GrafanaContactPoint, GrafanaContactPointProvider, } from './contact-point.ts';
 export { type MessageTemplateAttributes, type MessageTemplateProps, GrafanaMessageTemplate, GrafanaMessageTemplateProvider, } from './message-template.ts';
 export { type MuteTimingAttributes, type MuteTimingProps, GrafanaMuteTiming, GrafanaMuteTimingProvider, } from './mute-timing.ts';

package/dist/grafana/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/grafana/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EACL,KAAK,wBAAwB,EAC7B,KAAK,mBAAmB,EACxB,KAAK,cAAc,EACnB,qBAAqB,EACrB,6BAA6B,GAC9B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,KAAK,4BAA4B,EACjC,KAAK,uBAAuB,EAC5B,KAAK,WAAW,EAChB,yBAAyB,EACzB,iCAAiC,GAClC,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,KAAK,oBAAoB,EACzB,KAAK,eAAe,EACpB,iBAAiB,EACjB,yBAAyB,GAC1B,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,KAAK,mBAAmB,EACxB,KAAK,cAAc,EACnB,KAAK,cAAc,EACnB,gBAAgB,EAChB,wBAAwB,GACzB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,KAAK,gBAAgB,EACrB,KAAK,WAAW,EAChB,aAAa,EACb,qBAAqB,EACrB,0BAA0B,GAC3B,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,KAAK,sBAAsB,EAC3B,KAAK,iBAAiB,EACtB,mBAAmB,EACnB,2BAA2B,GAC5B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,KAAK,yBAAyB,EAC9B,KAAK,oBAAoB,EACzB,sBAAsB,EACtB,8BAA8B,GAC/B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,KAAK,oBAAoB,EACzB,KAAK,eAAe,EACpB,iBAAiB,EACjB,yBAAyB,GAC1B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,6BAA6B,EAAE,MAAM,kBAAkB,CAAC;AACjE,OAAO,EAAE,0BAA0B,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAE,KAAK,aAAa,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAC1E,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/grafana/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EACL,KAAK,wBAAwB,EAC7B,KAAK,mBAAmB,EACxB,KAAK,cAAc,EACnB,qBAAqB,EACrB,6BAA6B,GAC9B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,KAAK,4BAA4B,EACjC,KAAK,uBAAuB,EAC5B,KAAK,WAAW,EAChB,yBAAyB,EACzB,iCAAiC,GAClC,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,KAAK,oBAAoB,EACzB,KAAK,eAAe,EACpB,iBAAiB,EACjB,yBAAyB,GAC1B,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,KAAK,mBAAmB,EACxB,KAAK,cAAc,EACnB,KAAK,cAAc,EACnB,gBAAgB,EAChB,wBAAwB,GACzB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,KAAK,gBAAgB,EACrB,KAAK,WAAW,EAChB,aAAa,EACb,qBAAqB,EACrB,0BAA0B,GAC3B,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,KAAK,cAAc,EAAE,KAAK,SAAS,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAClG,OAAO,EACL,KAAK,0BAA0B,EAC/B,KAAK,qBAAqB,EAC1B,KAAK,qBAAqB,EAC1B,uBAAuB,EACvB,+BAA+B,EAC/B,wBAAwB,GACzB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,KAAK,sBAAsB,EAC3B,KAAK,iBAAiB,EACtB,mBAAmB,EACnB,2BAA2B,GAC5B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,KAAK,yBAAyB,EAC9B,KAAK,oBAAoB,EACzB,sBAAsB,EACtB,8BAA8B,GAC/B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,KAAK,oBAAoB,EACzB,KAAK,eAAe,EACpB,iBAAiB,EACjB,yBAAyB,GAC1B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,6BAA6B,EAAE,MAAM,kBAAkB,CAAC;AACjE,OAAO,EAAE,0BAA0B,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAE,KAAK,aAAa,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAC1E,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC"}

package/dist/grafana/index.js

@@ -497,12 +497,94 @@ var spec5 = {
 };
 var handlers5 = grafanaHandlers(spec5);
 var GrafanaFolderProvider = () => Provider5.effect(GrafanaFolder, Effect11.succeed(GrafanaFolder.Provider.of(handlers5)));
-// src/grafana/contact-point.ts
+// src/grafana/team.ts
 import { Resource as Resource6 } from "alchemy";
 import * as Provider6 from "alchemy/Provider";
 import * as grafana6 from "@distilled.cloud/grafana";
 import * as Effect12 from "effect/Effect";
-var GrafanaContactPoint = Resource6("Grafana.ContactPoint");
+var GrafanaTeam = Resource6("Grafana.Team");
+var findTeamByName = (name) => grafana6.searchTeams({ name, perpage: 100 }).pipe(Effect12.map((result) => (result.teams ?? []).find((team) => team.name === name)));
+var spec6 = {
+  attributes: (live) => ({
+    email: live.email ?? "",
+    id: live.id,
+    isProvisioned: live.isProvisioned,
+    name: live.name,
+    uid: live.uid
+  }),
+  create: (props) => grafana6.createTeam({
+    name: props.name,
+    ...props.email === undefined ? {} : { email: props.email }
+  }),
+  destroy: (props, live) => Effect12.gen(function* () {
+    if (live.isProvisioned) {
+      return yield* refuseIfProvisioned("Grafana.Team", props.name, "an external team sync (isProvisioned)");
+    }
+    yield* grafana6.deleteTeam({ team_id: String(live.id) });
+  }),
+  fetchLive: (props) => findTeamByName(props.name),
+  matches: (attributes, props) => attributes.name === props.name && (props.email === undefined || attributes.email === props.email),
+  update: (props, live) => Effect12.gen(function* () {
+    if (live.isProvisioned) {
+      return yield* refuseIfProvisioned("Grafana.Team", props.name, "an external team sync (isProvisioned)");
+    }
+    return yield* grafana6.updateTeam({
+      team_id: String(live.id),
+      name: props.name,
+      ...props.email === undefined ? {} : { email: props.email }
+    });
+  })
+};
+var handlers6 = grafanaHandlers(spec6);
+var GrafanaTeamProvider = () => Provider6.effect(GrafanaTeam, Effect12.succeed(GrafanaTeam.Provider.of(handlers6)));
+// src/grafana/folder-permission.ts
+import { Resource as Resource7 } from "alchemy";
+import * as Provider7 from "alchemy/Provider";
+import * as grafana7 from "@distilled.cloud/grafana";
+import * as Data4 from "effect/Data";
+import * as Effect13 from "effect/Effect";
+var GrafanaFolderPermission = Resource7("Grafana.FolderPermission");
+
+class GrafanaTeamNotFoundError extends Data4.TaggedError("GrafanaTeamNotFoundError") {
+}
+var resolveTeamId = (teamName) => findTeamByName(teamName).pipe(Effect13.flatMap((team) => team === undefined ? Effect13.fail(new GrafanaTeamNotFoundError({
+  message: `Grafana.FolderPermission: team '${teamName}' does not exist. Declare it with Grafana.Team first.`
+})) : Effect13.succeed(team.id)));
+var setTeam = (folderUid, teamId, permission) => grafana7.setResourcePermissionsForTeam({
+  resource: "folders",
+  resourceID: folderUid,
+  teamID: teamId,
+  permission
+});
+var spec7 = {
+  attributes: (live, props) => ({
+    folderUid: props.folderUid,
+    permission: live.permission,
+    teamId: live.teamId,
+    teamName: props.teamName
+  }),
+  create: (props) => resolveTeamId(props.teamName).pipe(Effect13.flatMap((teamId) => setTeam(props.folderUid, teamId, props.permission))),
+  destroy: (props, live) => setTeam(props.folderUid, live.teamId, ""),
+  fetchLive: (props) => Effect13.gen(function* () {
+    const teamId = yield* resolveTeamId(props.teamName);
+    const entries = yield* grafana7.getResourcePermissions({
+      resource: "folders",
+      resourceID: props.folderUid
+    });
+    const direct = (entries ?? []).find((entry) => entry.teamId === teamId && entry.isInherited !== true);
+    return direct === undefined ? undefined : { permission: direct.permission ?? "", teamId };
+  }),
+  matches: (attributes, props) => attributes.permission === props.permission,
+  update: (props, live) => setTeam(props.folderUid, live.teamId, props.permission)
+};
+var handlers7 = grafanaHandlers(spec7);
+var GrafanaFolderPermissionProvider = () => Provider7.effect(GrafanaFolderPermission, Effect13.succeed(GrafanaFolderPermission.Provider.of(handlers7)));
+// src/grafana/contact-point.ts
+import { Resource as Resource8 } from "alchemy";
+import * as Provider8 from "alchemy/Provider";
+import * as grafana8 from "@distilled.cloud/grafana";
+import * as Effect14 from "effect/Effect";
+var GrafanaContactPoint = Resource8("Grafana.ContactPoint");
 var nonSecretSettings = (props) => {
   const refs = props.secureSettingsRefs;
   if (refs === undefined)
@@ -514,8 +596,8 @@ var nonSecretSettings = (props) => {
   }
   return out;
 };
-var resolveSettings = (props) => Effect12.map(resolveSecretRefs(props.secureSettingsRefs, (field) => `settings.${field}`), (secrets) => secrets === undefined ? props.settings : { ...props.settings, ...secrets });
-var spec6 = {
+var resolveSettings = (props) => Effect14.map(resolveSecretRefs(props.secureSettingsRefs, (field) => `settings.${field}`), (secrets) => secrets === undefined ? props.settings : { ...props.settings, ...secrets });
+var spec8 = {
   attributes: (live) => ({
     disableResolveMessage: live.disableResolveMessage ?? false,
     name: live.name ?? "",
@@ -524,27 +606,27 @@ var spec6 = {
     type: live.type,
     uid: live.uid ?? ""
   }),
-  create: (props) => Effect12.flatMap(resolveSettings(props), (settings) => grafana6.routePostContactpoints({
+  create: (props) => Effect14.flatMap(resolveSettings(props), (settings) => grafana8.routePostContactpoints({
     name: props.name,
     settings,
     type: props.type,
     uid: props.uid,
     ...props.disableResolveMessage === undefined ? {} : { disableResolveMessage: props.disableResolveMessage }
   })),
-  destroy: (props, live) => Effect12.gen(function* () {
+  destroy: (props, live) => Effect14.gen(function* () {
     if (isForeignProvenance(live.provenance)) {
       return yield* refuseIfForeignProvenance("Grafana.ContactPoint", props.uid, live.provenance);
     }
-    yield* grafana6.routeDeleteContactpoints({ UID: props.uid });
+    yield* grafana8.routeDeleteContactpoints({ UID: props.uid });
   }),
-  fetchLive: (props) => grafana6.routeGetContactpoints({}).pipe(Effect12.map((points) => points.find((point) => point.uid === props.uid))),
+  fetchLive: (props) => grafana8.routeGetContactpoints({}).pipe(Effect14.map((points) => points.find((point) => point.uid === props.uid))),
   matches: (attributes, props) => attributes.name === props.name && attributes.type === props.type && attributes.disableResolveMessage === (props.disableResolveMessage ?? false) && declaredContentMatches(nonSecretSettings(props), attributes.settings),
-  update: (props, live) => Effect12.gen(function* () {
+  update: (props, live) => Effect14.gen(function* () {
     if (isForeignProvenance(live.provenance)) {
       return yield* refuseIfForeignProvenance("Grafana.ContactPoint", props.uid, live.provenance);
     }
     const settings = yield* resolveSettings(props);
-    yield* grafana6.routePutContactpoint({
+    yield* grafana8.routePutContactpoint({
       UID: props.uid,
       name: props.name,
       settings,
@@ -554,98 +636,98 @@ var spec6 = {
     });
   })
 };
-var handlers6 = grafanaHandlers(spec6);
-var GrafanaContactPointProvider = () => Provider6.effect(GrafanaContactPoint, Effect12.succeed(GrafanaContactPoint.Provider.of(handlers6)));
+var handlers8 = grafanaHandlers(spec8);
+var GrafanaContactPointProvider = () => Provider8.effect(GrafanaContactPoint, Effect14.succeed(GrafanaContactPoint.Provider.of(handlers8)));
 // src/grafana/message-template.ts
-import { Resource as Resource7 } from "alchemy";
-import * as Provider7 from "alchemy/Provider";
-import * as grafana7 from "@distilled.cloud/grafana";
-import * as Effect13 from "effect/Effect";
-var GrafanaMessageTemplate = Resource7("Grafana.MessageTemplate");
-var spec7 = {
+import { Resource as Resource9 } from "alchemy";
+import * as Provider9 from "alchemy/Provider";
+import * as grafana9 from "@distilled.cloud/grafana";
+import * as Effect15 from "effect/Effect";
+var GrafanaMessageTemplate = Resource9("Grafana.MessageTemplate");
+var spec9 = {
   attributes: (live) => ({
     name: live.name ?? "",
     provenance: live.provenance,
     template: live.template ?? ""
   }),
-  create: (props) => grafana7.routePutTemplate({ name: props.name, template: props.template }),
-  destroy: (props, live) => Effect13.gen(function* () {
+  create: (props) => grafana9.routePutTemplate({ name: props.name, template: props.template }),
+  destroy: (props, live) => Effect15.gen(function* () {
     if (isForeignProvenance(live.provenance)) {
       return yield* refuseIfForeignProvenance("Grafana.MessageTemplate", props.name, live.provenance);
     }
-    yield* grafana7.routeDeleteTemplate({ name: props.name });
+    yield* grafana9.routeDeleteTemplate({ name: props.name });
   }),
-  fetchLive: (props) => grafana7.routeGetTemplate({ name: props.name }).pipe(Effect13.catchTag("NotFound", () => Effect13.succeed(undefined))),
+  fetchLive: (props) => grafana9.routeGetTemplate({ name: props.name }).pipe(Effect15.catchTag("NotFound", () => Effect15.succeed(undefined))),
   matches: (attributes, props) => attributes.template === props.template,
-  update: (props, live) => Effect13.gen(function* () {
+  update: (props, live) => Effect15.gen(function* () {
     if (isForeignProvenance(live.provenance)) {
       return yield* refuseIfForeignProvenance("Grafana.MessageTemplate", props.name, live.provenance);
     }
-    yield* grafana7.routePutTemplate({
+    yield* grafana9.routePutTemplate({
       name: props.name,
       template: props.template,
       ...live.version === undefined ? {} : { version: live.version }
     });
   })
 };
-var handlers7 = grafanaHandlers(spec7);
-var GrafanaMessageTemplateProvider = () => Provider7.effect(GrafanaMessageTemplate, Effect13.succeed(GrafanaMessageTemplate.Provider.of(handlers7)));
+var handlers9 = grafanaHandlers(spec9);
+var GrafanaMessageTemplateProvider = () => Provider9.effect(GrafanaMessageTemplate, Effect15.succeed(GrafanaMessageTemplate.Provider.of(handlers9)));
 // src/grafana/mute-timing.ts
-import { Resource as Resource8 } from "alchemy";
-import * as Provider8 from "alchemy/Provider";
-import * as grafana8 from "@distilled.cloud/grafana";
-import * as Effect14 from "effect/Effect";
-var GrafanaMuteTiming = Resource8("Grafana.MuteTiming");
-var spec8 = {
+import { Resource as Resource10 } from "alchemy";
+import * as Provider10 from "alchemy/Provider";
+import * as grafana10 from "@distilled.cloud/grafana";
+import * as Effect16 from "effect/Effect";
+var GrafanaMuteTiming = Resource10("Grafana.MuteTiming");
+var spec10 = {
   attributes: (live) => ({
     name: live.name ?? "",
     provenance: live.provenance,
     timeIntervals: live.time_intervals ?? []
   }),
-  create: (props) => grafana8.routePostMuteTiming({
+  create: (props) => grafana10.routePostMuteTiming({
     name: props.name,
     time_intervals: props.timeIntervals
   }),
-  destroy: (props, live) => Effect14.gen(function* () {
+  destroy: (props, live) => Effect16.gen(function* () {
     if (isForeignProvenance(live.provenance)) {
       return yield* refuseIfForeignProvenance("Grafana.MuteTiming", props.name, live.provenance);
     }
-    yield* grafana8.routeDeleteMuteTiming({
+    yield* grafana10.routeDeleteMuteTiming({
       name: props.name,
       ...live.version === undefined ? {} : { version: live.version }
     });
   }),
-  fetchLive: (props) => grafana8.routeGetMuteTiming({ name: props.name }).pipe(Effect14.map((live) => live), Effect14.catchTag("NotFound", () => Effect14.succeed(undefined))),
+  fetchLive: (props) => grafana10.routeGetMuteTiming({ name: props.name }).pipe(Effect16.map((live) => live), Effect16.catchTag("NotFound", () => Effect16.succeed(undefined))),
   matches: (attributes, props) => declaredContentMatches(props.timeIntervals, attributes.timeIntervals),
-  update: (props, live) => Effect14.gen(function* () {
+  update: (props, live) => Effect16.gen(function* () {
     if (isForeignProvenance(live.provenance)) {
       return yield* refuseIfForeignProvenance("Grafana.MuteTiming", props.name, live.provenance);
     }
-    yield* grafana8.routePutMuteTiming({
+    yield* grafana10.routePutMuteTiming({
       name: props.name,
       time_intervals: props.timeIntervals
     });
   })
 };
-var handlers8 = grafanaHandlers(spec8);
-var GrafanaMuteTimingProvider = () => Provider8.effect(GrafanaMuteTiming, Effect14.succeed(GrafanaMuteTiming.Provider.of(handlers8)));
+var handlers10 = grafanaHandlers(spec10);
+var GrafanaMuteTimingProvider = () => Provider10.effect(GrafanaMuteTiming, Effect16.succeed(GrafanaMuteTiming.Provider.of(handlers10)));
 // src/grafana/credentials.ts
 import { Credentials } from "@distilled.cloud/grafana/Credentials";
 import { ConfigError } from "@distilled.cloud/grafana/Errors";
-import * as Effect15 from "effect/Effect";
+import * as Effect17 from "effect/Effect";
 import * as Layer from "effect/Layer";
 import * as Redacted from "effect/Redacted";
-var resolve = (target) => Effect15.sync(() => process.env[target.tokenEnv]).pipe(Effect15.flatMap((raw) => raw === undefined || raw.trim() === "" ? Effect15.fail(new ConfigError({
+var resolve = (target) => Effect17.sync(() => process.env[target.tokenEnv]).pipe(Effect17.flatMap((raw) => raw === undefined || raw.trim() === "" ? Effect17.fail(new ConfigError({
   message: `${target.tokenEnv} is not set. Export the Grafana service-account token there ` + `— never as an Alchemy prop — before running a stack that declares a resource ` + `against ${target.baseUrl}.`
-})) : Effect15.succeed({
+})) : Effect17.succeed({
   apiBaseUrl: target.baseUrl.replace(/\/+$/, ""),
   token: Redacted.make(raw.trim()),
   ...target.orgId === undefined ? {} : { orgId: target.orgId }
-})), Effect15.orDie);
+})), Effect17.orDie);
 var grafanaCredentials = (target) => Layer.succeed(Credentials, resolve(target));
 // src/grafana/providers.ts
 import * as Layer2 from "effect/Layer";
-var grafanaProviders = (target) => Layer2.mergeAll(GrafanaDatasourceProvider(), GrafanaFolderProvider(), GrafanaDashboardProvider(), GrafanaContactPointProvider(), GrafanaMuteTimingProvider(), GrafanaMessageTemplateProvider(), GrafanaAlertRuleGroupProvider(), GrafanaNotificationPolicyProvider()).pipe(Layer2.provide(grafanaCredentials(target)));
+var grafanaProviders = (target) => Layer2.mergeAll(GrafanaDatasourceProvider(), GrafanaFolderProvider(), GrafanaTeamProvider(), GrafanaFolderPermissionProvider(), GrafanaDashboardProvider(), GrafanaContactPointProvider(), GrafanaMuteTimingProvider(), GrafanaMessageTemplateProvider(), GrafanaAlertRuleGroupProvider(), GrafanaNotificationPolicyProvider()).pipe(Layer2.provide(grafanaCredentials(target)));
 export {
   GrafanaAlertRuleGroup,
   GrafanaAlertRuleGroupProvider,
@@ -656,6 +738,8 @@ export {
   GrafanaDatasource,
   GrafanaDatasourceProvider,
   GrafanaFolder,
+  GrafanaFolderPermission,
+  GrafanaFolderPermissionProvider,
   GrafanaFolderProvider,
   GrafanaFolderReparentError,
   GrafanaMessageTemplate,
@@ -666,9 +750,12 @@ export {
   GrafanaNotificationPolicyProvider,
   GrafanaProvisionedObjectError,
   GrafanaSecretRefUnsetError,
+  GrafanaTeam,
+  GrafanaTeamNotFoundError,
+  GrafanaTeamProvider,
   grafanaCredentials,
   grafanaProviders
 };
 
-//# debugId=5578DCEDF956037C64756E2164756E21
+//# debugId=D033FF5CB01A84D864756E2164756E21
 //# sourceMappingURL=index.js.map