Build the maintenance handle for one CodeArtifact repository, over an environment whose AWS credentials are discovered the standard way.

Build the observing calls alone for one repository, over an environment discovered the same way. No deletion, no tag write, and no publication is built, so the caller holds none.

Probe one repository's chain over an environment discovered the standard way, for a role that holds no maintenance handle for the repository it serves private content from.

Build cache deletion with target-local reads and consent, allowing its declared refill role.

Observe the configured cache under its distinct refill classification without constructing writes.

Build the configured cache capability over injected calls without relaxing the mirror constructor.

The control-plane calls this leaf makes, so the sequencing around them is drivable from response values of amazonka's own types. The reads are held apart from the writes.

Every call sent over one env, with the AWS error folded into a StoreFault.

Build the handle over a caller-supplied ControlPlane and the manifest read the root assembled, which together are every effect it has.

The observing calls over one ReadPlane, which is every effect they have.

Build observation with version pagination bounded before another page is requested.

Walk the repository's upstream chain, under the bounds the walk itself holds. The reads are the ambient role's own, so no caller's credential reaches this call.