import { FileSystem, Layer, Path, Schema } from "effect";
import { AppDirs, Xdg } from "@effected/xdg";
//#region src/schemas/config.d.ts
/**
 * The whole `reposets.config.toml` document.
 *
 * @remarks
 * `groups` is the only required key. Every resource map defaults to empty, so a
 * config that declares repositories and nothing else is valid and does nothing —
 * which is the right behaviour for a tool that mutates GitHub.
 *
 * @public
 */
export declare const ConfigSchema: Schema.Struct<{
  readonly settings: Schema.withDecodingDefaultKey<Schema.$Record<Schema.String, Schema.StructWithRest<Schema.Struct<{
    readonly is_template: Schema.optional<Schema.Boolean>;
    readonly has_wiki: Schema.optional<Schema.Boolean>;
    readonly has_issues: Schema.optional<Schema.Boolean>;
    readonly has_projects: Schema.optional<Schema.Boolean>;
    readonly has_discussions: Schema.optional<Schema.Boolean>;
    readonly has_sponsorships: Schema.optional<Schema.Boolean>;
    readonly has_pull_requests: Schema.optional<Schema.Boolean>;
    readonly allow_forking: Schema.optional<Schema.Boolean>;
    readonly allow_merge_commit: Schema.optional<Schema.Boolean>;
    readonly allow_squash_merge: Schema.optional<Schema.Boolean>;
    readonly allow_rebase_merge: Schema.optional<Schema.Boolean>;
    readonly allow_auto_merge: Schema.optional<Schema.Boolean>;
    readonly allow_update_branch: Schema.optional<Schema.Boolean>;
    readonly squash_merge_commit_title: Schema.optional<Schema.Literals<readonly ["PR_TITLE", "COMMIT_OR_PR_TITLE"]>>;
    readonly squash_merge_commit_message: Schema.optional<Schema.Literals<readonly ["PR_BODY", "COMMIT_MESSAGES", "BLANK"]>>;
    readonly merge_commit_title: Schema.optional<Schema.Literals<readonly ["PR_TITLE", "MERGE_MESSAGE"]>>;
    readonly merge_commit_message: Schema.optional<Schema.Literals<readonly ["PR_BODY", "PR_TITLE", "BLANK"]>>;
    readonly delete_branch_on_merge: Schema.optional<Schema.Boolean>;
    readonly web_commit_signoff_required: Schema.optional<Schema.Boolean>;
    readonly security_and_analysis: Schema.optional<Schema.Struct<{
      readonly advanced_security: Schema.optional<Schema.Literals<readonly ["enabled", "disabled"]>>;
      readonly code_security: Schema.optional<Schema.Literals<readonly ["enabled", "disabled"]>>;
      readonly secret_scanning: Schema.optional<Schema.Literals<readonly ["enabled", "disabled"]>>;
      readonly secret_scanning_push_protection: Schema.optional<Schema.Literals<readonly ["enabled", "disabled"]>>;
      readonly secret_scanning_ai_detection: Schema.optional<Schema.Literals<readonly ["enabled", "disabled"]>>;
      readonly secret_scanning_non_provider_patterns: Schema.optional<Schema.Literals<readonly ["enabled", "disabled"]>>;
      readonly secret_scanning_delegated_alert_dismissal: Schema.optional<Schema.Literals<readonly ["enabled", "disabled"]>>;
      readonly secret_scanning_delegated_bypass: Schema.optional<Schema.Literals<readonly ["enabled", "disabled"]>>;
      readonly delegated_bypass_reviewers: Schema.optional<Schema.$Array<Schema.Union<readonly [Schema.Struct<{
        readonly team: Schema.String;
        readonly mode: Schema.optional<Schema.Literals<readonly ["ALWAYS", "EXEMPT"]>>;
      }>, Schema.Struct<{
        readonly role: Schema.String;
        readonly mode: Schema.optional<Schema.Literals<readonly ["ALWAYS", "EXEMPT"]>>;
      }>]>>>;
      readonly dependabot_security_updates: Schema.optional<Schema.Literals<readonly ["enabled", "disabled"]>>;
    }>>;
  }>, readonly [Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>]>>, never>;
  readonly secrets: Schema.withDecodingDefaultKey<Schema.$Record<Schema.String, Schema.Union<readonly [Schema.Struct<{
    readonly file: Schema.$Record<Schema.String, Schema.String>;
  }>, Schema.Struct<{
    readonly value: Schema.$Record<Schema.String, Schema.Union<readonly [Schema.String, Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>]>>;
  }>, Schema.Struct<{
    readonly resolved: Schema.$Record<Schema.String, Schema.String>;
  }>]>>, never>;
  readonly variables: Schema.withDecodingDefaultKey<Schema.$Record<Schema.String, Schema.Union<readonly [Schema.Struct<{
    readonly file: Schema.$Record<Schema.String, Schema.String>;
  }>, Schema.Struct<{
    readonly value: Schema.$Record<Schema.String, Schema.Union<readonly [Schema.String, Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>]>>;
  }>, Schema.Struct<{
    readonly resolved: Schema.$Record<Schema.String, Schema.String>;
  }>]>>, never>;
  readonly rulesets: Schema.withDecodingDefaultKey<Schema.$Record<Schema.String, Schema.Union<readonly [Schema.Struct<{
    readonly name: Schema.String;
    readonly enforcement: Schema.Literals<readonly ["disabled", "active", "evaluate"]>;
    readonly conditions: Schema.optional<Schema.Struct<{
      readonly ref_name: Schema.optional<Schema.Struct<{
        readonly include: Schema.withDecodingDefaultKey<Schema.$Array<Schema.String>, never>;
        readonly exclude: Schema.withDecodingDefaultKey<Schema.$Array<Schema.String>, never>;
      }>>;
    }>>;
    readonly bypass_actors: Schema.optional<Schema.$Array<Schema.Struct<{
      readonly actor_id: Schema.optional<Schema.Union<readonly [Schema.Natural, Schema.Struct<{
        readonly resolved: Schema.String;
      }>]>>;
      readonly actor_type: Schema.Literals<readonly ["Integration", "OrganizationAdmin", "RepositoryRole", "Team", "DeployKey"]>;
      readonly bypass_mode: Schema.withDecodingDefaultKey<Schema.Literals<readonly ["always", "pull_request", "exempt"]>, never>;
    }>>>;
    readonly creation: Schema.optional<Schema.Boolean>;
    readonly update: Schema.optional<Schema.Boolean>;
    readonly deletion: Schema.optional<Schema.Boolean>;
    readonly required_linear_history: Schema.optional<Schema.Boolean>;
    readonly required_signatures: Schema.optional<Schema.Boolean>;
    readonly non_fast_forward: Schema.optional<Schema.Boolean>;
    readonly deployments: Schema.optional<Schema.$Array<Schema.String>>;
    readonly targets: Schema.optional<Schema.Union<readonly [Schema.Literals<readonly ["default", "all"]>, Schema.$Array<Schema.Union<readonly [Schema.Struct<{
      readonly include: Schema.String;
    }>, Schema.Struct<{
      readonly exclude: Schema.String;
    }>]>>]>>;
    readonly status_checks: Schema.optional<Schema.Struct<{
      readonly update_branch: Schema.optional<Schema.Boolean>;
      readonly on_creation: Schema.optional<Schema.Boolean>;
      readonly default_integration_id: Schema.optional<Schema.Union<readonly [Schema.Natural, Schema.Struct<{
        readonly resolved: Schema.String;
      }>]>>;
      readonly required: Schema.$Array<Schema.Struct<{
        readonly context: Schema.String;
        readonly integration_id: Schema.optional<Schema.Union<readonly [Schema.Natural, Schema.Struct<{
          readonly resolved: Schema.String;
        }>]>>;
      }>>;
    }>>;
    readonly commit_message: Schema.optional<Schema.$Array<Schema.Struct<{
      readonly operator: Schema.Literals<readonly ["starts_with", "ends_with", "contains", "regex"]>;
      readonly pattern: Schema.String;
      readonly name: Schema.optional<Schema.String>;
      readonly negate: Schema.optional<Schema.Boolean>;
    }>>>;
    readonly commit_author_email: Schema.optional<Schema.$Array<Schema.Struct<{
      readonly operator: Schema.Literals<readonly ["starts_with", "ends_with", "contains", "regex"]>;
      readonly pattern: Schema.String;
      readonly name: Schema.optional<Schema.String>;
      readonly negate: Schema.optional<Schema.Boolean>;
    }>>>;
    readonly committer_email: Schema.optional<Schema.$Array<Schema.Struct<{
      readonly operator: Schema.Literals<readonly ["starts_with", "ends_with", "contains", "regex"]>;
      readonly pattern: Schema.String;
      readonly name: Schema.optional<Schema.String>;
      readonly negate: Schema.optional<Schema.Boolean>;
    }>>>;
    readonly type: Schema.Literal<"branch">;
    readonly pull_requests: Schema.optional<Schema.Struct<{
      readonly approvals: Schema.withDecodingDefaultKey<Schema.Int, never>;
      readonly dismiss_stale_reviews: Schema.withDecodingDefaultKey<Schema.Boolean, never>;
      readonly code_owner_review: Schema.withDecodingDefaultKey<Schema.Boolean, never>;
      readonly last_push_approval: Schema.withDecodingDefaultKey<Schema.Boolean, never>;
      readonly resolve_threads: Schema.withDecodingDefaultKey<Schema.Boolean, never>;
      readonly merge_methods: Schema.optional<Schema.$Array<Schema.Literals<readonly ["merge", "squash", "rebase"]>>>;
      readonly reviewers: Schema.optional<Schema.$Array<Schema.Struct<{
        readonly file_patterns: Schema.$Array<Schema.String>;
        readonly minimum_approvals: Schema.Int;
        readonly reviewer: Schema.Struct<{
          readonly id: Schema.Natural;
          readonly type: Schema.Literal<"Team">;
        }>;
      }>>>;
    }>>;
    readonly merge_queue: Schema.optional<Schema.Struct<{
      readonly check_timeout: Schema.Int;
      readonly grouping: Schema.Literals<readonly ["ALLGREEN", "HEADGREEN"]>;
      readonly max_build: Schema.Int;
      readonly max_merge: Schema.Int;
      readonly merge_method: Schema.Literals<readonly ["MERGE", "SQUASH", "REBASE"]>;
      readonly min_merge: Schema.Int;
      readonly min_wait: Schema.Int;
    }>>;
    readonly copilot_review: Schema.optional<Schema.Struct<{
      readonly draft_prs: Schema.optional<Schema.Boolean>;
      readonly on_push: Schema.optional<Schema.Boolean>;
    }>>;
    readonly code_scanning: Schema.optional<Schema.$Array<Schema.Struct<{
      readonly tool: Schema.String;
      readonly alerts: Schema.Literals<readonly ["none", "errors", "errors_and_warnings", "all"]>;
      readonly security_alerts: Schema.Literals<readonly ["none", "critical", "high_or_higher", "medium_or_higher", "all"]>;
    }>>>;
    readonly workflows: Schema.optional<Schema.Struct<{
      readonly on_creation: Schema.optional<Schema.Boolean>;
      readonly required: Schema.$Array<Schema.Struct<{
        readonly path: Schema.String;
        readonly ref: Schema.optional<Schema.String>;
        readonly repository_id: Schema.Union<readonly [Schema.Natural, Schema.Struct<{
          readonly resolved: Schema.String;
        }>]>;
        readonly sha: Schema.optional<Schema.String>;
      }>>;
    }>>;
    readonly branch_name: Schema.optional<Schema.$Array<Schema.Struct<{
      readonly operator: Schema.Literals<readonly ["starts_with", "ends_with", "contains", "regex"]>;
      readonly pattern: Schema.String;
      readonly name: Schema.optional<Schema.String>;
      readonly negate: Schema.optional<Schema.Boolean>;
    }>>>;
  }>, Schema.Struct<{
    readonly name: Schema.String;
    readonly enforcement: Schema.Literals<readonly ["disabled", "active", "evaluate"]>;
    readonly conditions: Schema.optional<Schema.Struct<{
      readonly ref_name: Schema.optional<Schema.Struct<{
        readonly include: Schema.withDecodingDefaultKey<Schema.$Array<Schema.String>, never>;
        readonly exclude: Schema.withDecodingDefaultKey<Schema.$Array<Schema.String>, never>;
      }>>;
    }>>;
    readonly bypass_actors: Schema.optional<Schema.$Array<Schema.Struct<{
      readonly actor_id: Schema.optional<Schema.Union<readonly [Schema.Natural, Schema.Struct<{
        readonly resolved: Schema.String;
      }>]>>;
      readonly actor_type: Schema.Literals<readonly ["Integration", "OrganizationAdmin", "RepositoryRole", "Team", "DeployKey"]>;
      readonly bypass_mode: Schema.withDecodingDefaultKey<Schema.Literals<readonly ["always", "pull_request", "exempt"]>, never>;
    }>>>;
    readonly creation: Schema.optional<Schema.Boolean>;
    readonly update: Schema.optional<Schema.Boolean>;
    readonly deletion: Schema.optional<Schema.Boolean>;
    readonly required_linear_history: Schema.optional<Schema.Boolean>;
    readonly required_signatures: Schema.optional<Schema.Boolean>;
    readonly non_fast_forward: Schema.optional<Schema.Boolean>;
    readonly deployments: Schema.optional<Schema.$Array<Schema.String>>;
    readonly targets: Schema.optional<Schema.Union<readonly [Schema.Literals<readonly ["default", "all"]>, Schema.$Array<Schema.Union<readonly [Schema.Struct<{
      readonly include: Schema.String;
    }>, Schema.Struct<{
      readonly exclude: Schema.String;
    }>]>>]>>;
    readonly status_checks: Schema.optional<Schema.Struct<{
      readonly update_branch: Schema.optional<Schema.Boolean>;
      readonly on_creation: Schema.optional<Schema.Boolean>;
      readonly default_integration_id: Schema.optional<Schema.Union<readonly [Schema.Natural, Schema.Struct<{
        readonly resolved: Schema.String;
      }>]>>;
      readonly required: Schema.$Array<Schema.Struct<{
        readonly context: Schema.String;
        readonly integration_id: Schema.optional<Schema.Union<readonly [Schema.Natural, Schema.Struct<{
          readonly resolved: Schema.String;
        }>]>>;
      }>>;
    }>>;
    readonly commit_message: Schema.optional<Schema.$Array<Schema.Struct<{
      readonly operator: Schema.Literals<readonly ["starts_with", "ends_with", "contains", "regex"]>;
      readonly pattern: Schema.String;
      readonly name: Schema.optional<Schema.String>;
      readonly negate: Schema.optional<Schema.Boolean>;
    }>>>;
    readonly commit_author_email: Schema.optional<Schema.$Array<Schema.Struct<{
      readonly operator: Schema.Literals<readonly ["starts_with", "ends_with", "contains", "regex"]>;
      readonly pattern: Schema.String;
      readonly name: Schema.optional<Schema.String>;
      readonly negate: Schema.optional<Schema.Boolean>;
    }>>>;
    readonly committer_email: Schema.optional<Schema.$Array<Schema.Struct<{
      readonly operator: Schema.Literals<readonly ["starts_with", "ends_with", "contains", "regex"]>;
      readonly pattern: Schema.String;
      readonly name: Schema.optional<Schema.String>;
      readonly negate: Schema.optional<Schema.Boolean>;
    }>>>;
    readonly type: Schema.Literal<"tag">;
    readonly tag_name: Schema.optional<Schema.$Array<Schema.Struct<{
      readonly operator: Schema.Literals<readonly ["starts_with", "ends_with", "contains", "regex"]>;
      readonly pattern: Schema.String;
      readonly name: Schema.optional<Schema.String>;
      readonly negate: Schema.optional<Schema.Boolean>;
    }>>>;
  }>]>>, never>;
  readonly environments: Schema.withDecodingDefaultKey<Schema.$Record<Schema.String, Schema.Struct<{
    readonly wait_timer: Schema.optional<Schema.Int>;
    readonly prevent_self_review: Schema.optional<Schema.Boolean>;
    readonly reviewers: Schema.optional<Schema.$Array<Schema.Struct<{
      readonly type: Schema.Literals<readonly ["User", "Team"]>;
      readonly id: Schema.Natural;
    }>>>;
    readonly deployment_branches: Schema.optional<Schema.Union<readonly [Schema.Literals<readonly ["all", "protected"]>, Schema.$Array<Schema.Struct<{
      readonly name: Schema.String;
      readonly type: Schema.withDecodingDefaultKey<Schema.Literals<readonly ["branch", "tag"]>, never>;
    }>>]>>;
  }>>, never>;
  readonly security: Schema.withDecodingDefaultKey<Schema.$Record<Schema.String, Schema.Struct<{
    readonly vulnerability_alerts: Schema.optional<Schema.Boolean>;
    readonly automated_security_fixes: Schema.optional<Schema.Boolean>;
    readonly private_vulnerability_reporting: Schema.optional<Schema.Boolean>;
  }>>, never>;
  readonly code_scanning: Schema.withDecodingDefaultKey<Schema.$Record<Schema.String, Schema.Struct<{
    readonly state: Schema.optional<Schema.Literals<readonly ["configured", "not-configured"]>>;
    readonly languages: Schema.optional<Schema.$Array<Schema.Literals<readonly ["actions", "c-cpp", "csharp", "go", "java-kotlin", "javascript-typescript", "python", "ruby", "swift"]>>>;
    readonly query_suite: Schema.optional<Schema.Literals<readonly ["default", "extended"]>>;
    readonly threat_model: Schema.optional<Schema.Literals<readonly ["remote", "remote_and_local"]>>;
    readonly runner_type: Schema.optional<Schema.Literals<readonly ["standard", "labeled"]>>;
    readonly runner_label: Schema.optional<Schema.String>;
  }>>, never>;
  readonly groups: Schema.withDecodingDefaultKey<Schema.$Record<Schema.String, Schema.Struct<{
    readonly repos: Schema.$Array<Schema.String>;
    readonly credentials: Schema.String;
    readonly settings: Schema.optional<Schema.$Array<Schema.String>>;
    readonly environments: Schema.optional<Schema.$Array<Schema.String>>;
    readonly secrets: Schema.optional<Schema.Struct<{
      readonly actions: Schema.optional<Schema.$Array<Schema.String>>;
      readonly dependabot: Schema.optional<Schema.$Array<Schema.String>>;
      readonly codespaces: Schema.optional<Schema.$Array<Schema.String>>;
      readonly environments: Schema.optional<Schema.$Record<Schema.String, Schema.$Array<Schema.String>>>;
    }>>;
    readonly variables: Schema.optional<Schema.Struct<{
      readonly actions: Schema.optional<Schema.$Array<Schema.String>>;
      readonly environments: Schema.optional<Schema.$Record<Schema.String, Schema.$Array<Schema.String>>>;
    }>>;
    readonly rulesets: Schema.optional<Schema.$Array<Schema.String>>;
    readonly security: Schema.optional<Schema.$Array<Schema.String>>;
    readonly code_scanning: Schema.optional<Schema.$Array<Schema.String>>;
    readonly cleanup: Schema.optional<Schema.Struct<{
      readonly secrets: Schema.withDecodingDefaultKey<Schema.Struct<{
        readonly actions: Schema.withDecodingDefaultKey<Schema.Union<readonly [Schema.Boolean, Schema.Struct<{
          readonly preserve: Schema.$Array<Schema.String>;
        }>]>, never>;
        readonly dependabot: Schema.withDecodingDefaultKey<Schema.Union<readonly [Schema.Boolean, Schema.Struct<{
          readonly preserve: Schema.$Array<Schema.String>;
        }>]>, never>;
        readonly codespaces: Schema.withDecodingDefaultKey<Schema.Union<readonly [Schema.Boolean, Schema.Struct<{
          readonly preserve: Schema.$Array<Schema.String>;
        }>]>, never>;
        readonly environments: Schema.withDecodingDefaultKey<Schema.Union<readonly [Schema.Boolean, Schema.Struct<{
          readonly preserve: Schema.$Array<Schema.String>;
        }>]>, never>;
      }>, never>;
      readonly variables: Schema.withDecodingDefaultKey<Schema.Struct<{
        readonly actions: Schema.withDecodingDefaultKey<Schema.Union<readonly [Schema.Boolean, Schema.Struct<{
          readonly preserve: Schema.$Array<Schema.String>;
        }>]>, never>;
        readonly environments: Schema.withDecodingDefaultKey<Schema.Union<readonly [Schema.Boolean, Schema.Struct<{
          readonly preserve: Schema.$Array<Schema.String>;
        }>]>, never>;
      }>, never>;
      readonly rulesets: Schema.withDecodingDefaultKey<Schema.Union<readonly [Schema.Boolean, Schema.Struct<{
        readonly preserve: Schema.$Array<Schema.String>;
      }>]>, never>;
      readonly environments: Schema.withDecodingDefaultKey<Schema.Union<readonly [Schema.Boolean, Schema.Struct<{
        readonly preserve: Schema.$Array<Schema.String>;
      }>]>, never>;
    }>>;
  }>>, never>;
}>;
/**
 * The decoded shape of {@link ConfigSchema}.
 *
 * @public
 */
type Config = typeof ConfigSchema.Type;
//#endregion
//#region src/services/ConfigFiles.d.ts
/**
 * The config file's fixed name, in every tier of the resolver chain.
 *
 * @public
 */
export declare const CONFIG_FILENAME = "reposets.config.toml";
declare const ReposetsConfigFile_base: import("effect/Context").ServiceClass<ReposetsConfigFile, "reposets/Config", import("@effected/config-file").ConfigFileShape<{
  readonly settings: {
    readonly [x: string]: {
      readonly [x: string]: import("effect/Schema").Json;
      readonly is_template?: boolean | undefined;
      readonly has_wiki?: boolean | undefined;
      readonly has_issues?: boolean | undefined;
      readonly has_projects?: boolean | undefined;
      readonly has_discussions?: boolean | undefined;
      readonly has_sponsorships?: boolean | undefined;
      readonly has_pull_requests?: boolean | undefined;
      readonly allow_forking?: boolean | undefined;
      readonly allow_merge_commit?: boolean | undefined;
      readonly allow_squash_merge?: boolean | undefined;
      readonly allow_rebase_merge?: boolean | undefined;
      readonly allow_auto_merge?: boolean | undefined;
      readonly allow_update_branch?: boolean | undefined;
      readonly squash_merge_commit_title?: "COMMIT_OR_PR_TITLE" | "PR_TITLE" | undefined;
      readonly squash_merge_commit_message?: "BLANK" | "COMMIT_MESSAGES" | "PR_BODY" | undefined;
      readonly merge_commit_title?: "MERGE_MESSAGE" | "PR_TITLE" | undefined;
      readonly merge_commit_message?: "BLANK" | "PR_BODY" | "PR_TITLE" | undefined;
      readonly delete_branch_on_merge?: boolean | undefined;
      readonly web_commit_signoff_required?: boolean | undefined;
      readonly security_and_analysis?: {
        readonly advanced_security?: "disabled" | "enabled" | undefined;
        readonly code_security?: "disabled" | "enabled" | undefined;
        readonly secret_scanning?: "disabled" | "enabled" | undefined;
        readonly secret_scanning_push_protection?: "disabled" | "enabled" | undefined;
        readonly secret_scanning_ai_detection?: "disabled" | "enabled" | undefined;
        readonly secret_scanning_non_provider_patterns?: "disabled" | "enabled" | undefined;
        readonly secret_scanning_delegated_alert_dismissal?: "disabled" | "enabled" | undefined;
        readonly secret_scanning_delegated_bypass?: "disabled" | "enabled" | undefined;
        readonly delegated_bypass_reviewers?: readonly ({
          readonly team: string;
          readonly mode?: "ALWAYS" | "EXEMPT" | undefined;
        } | {
          readonly role: string;
          readonly mode?: "ALWAYS" | "EXEMPT" | undefined;
        })[] | undefined;
        readonly dependabot_security_updates?: "disabled" | "enabled" | undefined;
      } | undefined;
    };
  };
  readonly secrets: {
    readonly [x: string]: {
      readonly file: {
        readonly [x: string]: string;
      };
    } | {
      readonly value: {
        readonly [x: string]: string | {
          readonly [x: string]: import("effect/Schema").Json;
        };
      };
    } | {
      readonly resolved: {
        readonly [x: string]: string;
      };
    };
  };
  readonly variables: {
    readonly [x: string]: {
      readonly file: {
        readonly [x: string]: string;
      };
    } | {
      readonly value: {
        readonly [x: string]: string | {
          readonly [x: string]: import("effect/Schema").Json;
        };
      };
    } | {
      readonly resolved: {
        readonly [x: string]: string;
      };
    };
  };
  readonly rulesets: {
    readonly [x: string]: {
      readonly name: string;
      readonly enforcement: "active" | "disabled" | "evaluate";
      readonly conditions?: {
        readonly ref_name?: {
          readonly include: readonly string[];
          readonly exclude: readonly string[];
        } | undefined;
      } | undefined;
      readonly bypass_actors?: readonly {
        readonly actor_id?: number | {
          readonly resolved: string;
        } | undefined;
        readonly actor_type: "DeployKey" | "Integration" | "OrganizationAdmin" | "RepositoryRole" | "Team";
        readonly bypass_mode: "always" | "exempt" | "pull_request";
      }[] | undefined;
      readonly creation?: boolean | undefined;
      readonly update?: boolean | undefined;
      readonly deletion?: boolean | undefined;
      readonly required_linear_history?: boolean | undefined;
      readonly required_signatures?: boolean | undefined;
      readonly non_fast_forward?: boolean | undefined;
      readonly deployments?: readonly string[] | undefined;
      readonly targets?: "all" | "default" | readonly ({
        readonly include: string;
      } | {
        readonly exclude: string;
      })[] | undefined;
      readonly status_checks?: {
        readonly update_branch?: boolean | undefined;
        readonly on_creation?: boolean | undefined;
        readonly default_integration_id?: number | {
          readonly resolved: string;
        } | undefined;
        readonly required: readonly {
          readonly context: string;
          readonly integration_id?: number | {
            readonly resolved: string;
          } | undefined;
        }[];
      } | undefined;
      readonly commit_message?: readonly {
        readonly operator: "contains" | "ends_with" | "regex" | "starts_with";
        readonly pattern: string;
        readonly name?: string | undefined;
        readonly negate?: boolean | undefined;
      }[] | undefined;
      readonly commit_author_email?: readonly {
        readonly operator: "contains" | "ends_with" | "regex" | "starts_with";
        readonly pattern: string;
        readonly name?: string | undefined;
        readonly negate?: boolean | undefined;
      }[] | undefined;
      readonly committer_email?: readonly {
        readonly operator: "contains" | "ends_with" | "regex" | "starts_with";
        readonly pattern: string;
        readonly name?: string | undefined;
        readonly negate?: boolean | undefined;
      }[] | undefined;
      readonly type: "branch";
      readonly pull_requests?: {
        readonly approvals: number;
        readonly dismiss_stale_reviews: boolean;
        readonly code_owner_review: boolean;
        readonly last_push_approval: boolean;
        readonly resolve_threads: boolean;
        readonly merge_methods?: readonly ("merge" | "rebase" | "squash")[] | undefined;
        readonly reviewers?: readonly {
          readonly file_patterns: readonly string[];
          readonly minimum_approvals: number;
          readonly reviewer: {
            readonly id: number;
            readonly type: "Team";
          };
        }[] | undefined;
      } | undefined;
      readonly merge_queue?: {
        readonly check_timeout: number;
        readonly grouping: "ALLGREEN" | "HEADGREEN";
        readonly max_build: number;
        readonly max_merge: number;
        readonly merge_method: "MERGE" | "REBASE" | "SQUASH";
        readonly min_merge: number;
        readonly min_wait: number;
      } | undefined;
      readonly copilot_review?: {
        readonly draft_prs?: boolean | undefined;
        readonly on_push?: boolean | undefined;
      } | undefined;
      readonly code_scanning?: readonly {
        readonly tool: string;
        readonly alerts: "all" | "errors" | "errors_and_warnings" | "none";
        readonly security_alerts: "all" | "critical" | "high_or_higher" | "medium_or_higher" | "none";
      }[] | undefined;
      readonly workflows?: {
        readonly on_creation?: boolean | undefined;
        readonly required: readonly {
          readonly path: string;
          readonly ref?: string | undefined;
          readonly repository_id: number | {
            readonly resolved: string;
          };
          readonly sha?: string | undefined;
        }[];
      } | undefined;
      readonly branch_name?: readonly {
        readonly operator: "contains" | "ends_with" | "regex" | "starts_with";
        readonly pattern: string;
        readonly name?: string | undefined;
        readonly negate?: boolean | undefined;
      }[] | undefined;
    } | {
      readonly name: string;
      readonly enforcement: "active" | "disabled" | "evaluate";
      readonly conditions?: {
        readonly ref_name?: {
          readonly include: readonly string[];
          readonly exclude: readonly string[];
        } | undefined;
      } | undefined;
      readonly bypass_actors?: readonly {
        readonly actor_id?: number | {
          readonly resolved: string;
        } | undefined;
        readonly actor_type: "DeployKey" | "Integration" | "OrganizationAdmin" | "RepositoryRole" | "Team";
        readonly bypass_mode: "always" | "exempt" | "pull_request";
      }[] | undefined;
      readonly creation?: boolean | undefined;
      readonly update?: boolean | undefined;
      readonly deletion?: boolean | undefined;
      readonly required_linear_history?: boolean | undefined;
      readonly required_signatures?: boolean | undefined;
      readonly non_fast_forward?: boolean | undefined;
      readonly deployments?: readonly string[] | undefined;
      readonly targets?: "all" | "default" | readonly ({
        readonly include: string;
      } | {
        readonly exclude: string;
      })[] | undefined;
      readonly status_checks?: {
        readonly update_branch?: boolean | undefined;
        readonly on_creation?: boolean | undefined;
        readonly default_integration_id?: number | {
          readonly resolved: string;
        } | undefined;
        readonly required: readonly {
          readonly context: string;
          readonly integration_id?: number | {
            readonly resolved: string;
          } | undefined;
        }[];
      } | undefined;
      readonly commit_message?: readonly {
        readonly operator: "contains" | "ends_with" | "regex" | "starts_with";
        readonly pattern: string;
        readonly name?: string | undefined;
        readonly negate?: boolean | undefined;
      }[] | undefined;
      readonly commit_author_email?: readonly {
        readonly operator: "contains" | "ends_with" | "regex" | "starts_with";
        readonly pattern: string;
        readonly name?: string | undefined;
        readonly negate?: boolean | undefined;
      }[] | undefined;
      readonly committer_email?: readonly {
        readonly operator: "contains" | "ends_with" | "regex" | "starts_with";
        readonly pattern: string;
        readonly name?: string | undefined;
        readonly negate?: boolean | undefined;
      }[] | undefined;
      readonly type: "tag";
      readonly tag_name?: readonly {
        readonly operator: "contains" | "ends_with" | "regex" | "starts_with";
        readonly pattern: string;
        readonly name?: string | undefined;
        readonly negate?: boolean | undefined;
      }[] | undefined;
    };
  };
  readonly environments: {
    readonly [x: string]: {
      readonly wait_timer?: number | undefined;
      readonly prevent_self_review?: boolean | undefined;
      readonly reviewers?: readonly {
        readonly type: "Team" | "User";
        readonly id: number;
      }[] | undefined;
      readonly deployment_branches?: "all" | "protected" | readonly {
        readonly name: string;
        readonly type: "branch" | "tag";
      }[] | undefined;
    };
  };
  readonly security: {
    readonly [x: string]: {
      readonly vulnerability_alerts?: boolean | undefined;
      readonly automated_security_fixes?: boolean | undefined;
      readonly private_vulnerability_reporting?: boolean | undefined;
    };
  };
  readonly code_scanning: {
    readonly [x: string]: {
      readonly state?: "configured" | "not-configured" | undefined;
      readonly languages?: readonly ("actions" | "c-cpp" | "csharp" | "go" | "java-kotlin" | "javascript-typescript" | "python" | "ruby" | "swift")[] | undefined;
      readonly query_suite?: "default" | "extended" | undefined;
      readonly threat_model?: "remote" | "remote_and_local" | undefined;
      readonly runner_type?: "labeled" | "standard" | undefined;
      readonly runner_label?: string | undefined;
    };
  };
  readonly groups: {
    readonly [x: string]: {
      readonly repos: readonly string[];
      readonly credentials: string;
      readonly settings?: readonly string[] | undefined;
      readonly environments?: readonly string[] | undefined;
      readonly secrets?: {
        readonly actions?: readonly string[] | undefined;
        readonly dependabot?: readonly string[] | undefined;
        readonly codespaces?: readonly string[] | undefined;
        readonly environments?: {
          readonly [x: string]: readonly string[];
        } | undefined;
      } | undefined;
      readonly variables?: {
        readonly actions?: readonly string[] | undefined;
        readonly environments?: {
          readonly [x: string]: readonly string[];
        } | undefined;
      } | undefined;
      readonly rulesets?: readonly string[] | undefined;
      readonly security?: readonly string[] | undefined;
      readonly code_scanning?: readonly string[] | undefined;
      readonly cleanup?: {
        readonly secrets: {
          readonly actions: boolean | {
            readonly preserve: readonly string[];
          };
          readonly dependabot: boolean | {
            readonly preserve: readonly string[];
          };
          readonly codespaces: boolean | {
            readonly preserve: readonly string[];
          };
          readonly environments: boolean | {
            readonly preserve: readonly string[];
          };
        };
        readonly variables: {
          readonly actions: boolean | {
            readonly preserve: readonly string[];
          };
          readonly environments: boolean | {
            readonly preserve: readonly string[];
          };
        };
        readonly rulesets: boolean | {
          readonly preserve: readonly string[];
        };
        readonly environments: boolean | {
          readonly preserve: readonly string[];
        };
      } | undefined;
    };
  };
}>>;
/**
 * Service identity for the parsed `reposets.config.toml`.
 *
 * @public
 */
export declare class ReposetsConfigFile extends ReposetsConfigFile_base {}
declare const ConfigFlagNotFound_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
  readonly _tag: "ConfigFlagNotFound";
} & Readonly<A>;
/**
 * Raised when `--config` names a path that does not exist.
 *
 * @remarks
 * Config discovery is best-effort by contract — every `ConfigResolver` has
 * `never` in its error channel — so a resolver that finds nothing falls through
 * to the next tier. That is right for a probe and wrong for an explicit request:
 * `--config /nope.toml` would otherwise load the XDG config instead. The
 * distinction is enforced here rather than pushed into the resolver contract.
 *
 * @public
 */
export declare class ConfigFlagNotFound extends ConfigFlagNotFound_base<{
  readonly path: string;
}> {
  /**
   * @remarks
   * Without this, the class renders as a bare `ConfigFlagNotFound:` and the
   * `path` never reaches the log line. The kit does the same on its own errors.
   */
  get message(): string;
}
declare const ConfigFlagMissingConfig_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
  readonly _tag: "ConfigFlagMissingConfig";
} & Readonly<A>;
/**
 * Raised when `--config` names a directory that holds no `reposets.config.toml`.
 *
 * @remarks
 * The sibling of {@link ConfigFlagNotFound}, for the case it cannot see: the
 * path exists, so the existence check passes, but the directory resolver then
 * finds nothing and — being a probe with `never` in its error channel — falls
 * through to `AppConfig`'s XDG tier. `reposets doctor --config ./empty-dir`
 * would report on the user's XDG config, a different file from the one asked
 * about, with nothing to say so. An explicit request fails loudly here for the
 * same reason a missing path does.
 *
 * A separate tag rather than a widened `ConfigFlagNotFound`, because the two
 * call for different fixes — a mistyped path, versus a right directory with
 * the file missing or misnamed — and the message names both the directory and
 * the filename it looked for. Both are paths the user typed or a fixed name;
 * nothing secret reaches the message.
 *
 * @public
 */
export declare class ConfigFlagMissingConfig extends ConfigFlagMissingConfig_base<{
  readonly dir: string;
  readonly filename: string;
}> {
  /**
   * @remarks
   * As on {@link ConfigFlagNotFound}: without it the error renders as a bare
   * tag and the directory never reaches the log line.
   */
  get message(): string;
}
/**
 * Builds the config-file layer for one invocation's `--config` flag.
 *
 * @remarks
 * Mints a fresh layer per call, so bind the result once per run rather than
 * inlining it at two provide sites.
 *
 * @public
 */
export declare const makeConfigFilesLive: (configFlag: string | undefined) => Layer.Layer<ReposetsConfigFile, ConfigFlagNotFound | ConfigFlagMissingConfig, FileSystem.FileSystem | Path.Path | AppDirs | Xdg>;
//#endregion
export type { Config };
//# sourceMappingURL=index.d.ts.map