@homeflare/alchemy 0.10.0 → 0.11.0

package/dist/proxmox/index.js

@@ -1048,7 +1048,7 @@ var ProxmoxHaRuleProvider = () => Provider12.effect(ProxmoxHaRule, Effect21.succ
 import { Resource as Resource13 } from "alchemy";
 import { isResolved as isResolved6 } from "alchemy/Diff";
 import * as Provider13 from "alchemy/Provider";
-import * as Effect29 from "effect/Effect";
+import * as Effect31 from "effect/Effect";
 
 // src/ownership/adopt.ts
 import { AdoptPolicy } from "alchemy/AdoptPolicy";
@@ -1230,19 +1230,21 @@ var claimFor = (owner) => (what) => refuseTakeover(owner, what);
 // src/ownership/probe.ts
 import { Unowned as Unowned2 } from "alchemy/AdoptPolicy";
 import * as Effect26 from "effect/Effect";
-var ownedRead = (ask, found, settled2) => Effect26.gen(function* () {
-  if (found === undefined || ask.output !== undefined)
-    return found;
+var provenOurs = (ask, settled2) => Effect26.gen(function* () {
   const recorded = yield* recordedInstance(ask.fqn, ask.instanceId);
   if (recorded === "absent")
-    return Unowned2(found);
+    return false;
   if (recorded === "partial") {
     yield* Effect26.logWarning(`${ask.fqn}: the interrupted create's state row lacks part of the declaration (a prop ` + "was still an Output when it was written), so the live object is not proven ours");
-    return Unowned2(found);
+    return false;
   }
   const unproven = (reason) => Effect26.as(Effect26.logWarning(`${ask.fqn}: the interrupted create's object could not be compared with its props ` + `(${reason instanceof Error ? reason.message : String(reason)}), so it is not treated as ours`), false);
-  const ours = yield* settled2.pipe(Effect26.catch(unproven), Effect26.catchDefect(unproven));
-  return ours ? found : Unowned2(found);
+  return yield* settled2.pipe(Effect26.catch(unproven), Effect26.catchDefect(unproven));
+});
+var ownedRead = (ask, found, settled2) => Effect26.gen(function* () {
+  if (found === undefined || ask.output !== undefined)
+    return found;
+  return (yield* provenOurs(ask, settled2)) ? found : Unowned2(found);
 });
 
 // src/proxmox/lxc-wire.ts
@@ -1693,12 +1695,28 @@ var identityRefusals = (news, olds, output) => {
   return reasons;
 };
 
+// src/proxmox/lxc-adoption.ts
+import * as Effect30 from "effect/Effect";
+
+// src/ownership/adopting.ts
+import * as Effect27 from "effect/Effect";
+var adopting = (owner, settled2) => Effect27.gen(function* () {
+  if (owner.output === undefined)
+    return false;
+  const generation = yield* recordedGeneration(owner.fqn, owner.instanceId);
+  if (generation === undefined || generation.adopting === true)
+    return true;
+  if (generation.attr !== undefined && generation.attr !== null)
+    return false;
+  return !(yield* provenOurs(owner, settled2(generation.props)));
+});
+
 // src/proxmox/lxc-lifecycle.ts
-import * as Effect28 from "effect/Effect";
+import * as Effect29 from "effect/Effect";
 
 // src/proxmox/network-apply-read.ts
-import * as Effect27 from "effect/Effect";
-var stagedDiff = (target, node) => Effect27.gen(function* () {
+import * as Effect28 from "effect/Effect";
+var stagedDiff = (target, node) => Effect28.gen(function* () {
   const path = `nodes/${node}/network`;
   const credential = yield* leased(target, "read");
   const envelope = yield* pveEnvelopeWith(target, credential, "GET", path);
@@ -1711,8 +1729,8 @@ var pendingLines = (diff) => {
 `).filter((line) => (line.startsWith("+") || line.startsWith("-")) && !line.startsWith("+++") && !line.startsWith("---")).length;
   return Math.max(changed, 1);
 };
-var pendingCount = (target, node) => stagedDiff(target, node).pipe(Effect27.map(pendingLines));
-var clusterHealth = (target) => pve(target, "read", "GET", "cluster/status").pipe(Effect27.map((rows) => {
+var pendingCount = (target, node) => stagedDiff(target, node).pipe(Effect28.map(pendingLines));
+var clusterHealth = (target) => pve(target, "read", "GET", "cluster/status").pipe(Effect28.map((rows) => {
   const all = rows ?? [];
   const cluster = all.find((row) => row.type === "cluster");
   return {
@@ -1720,21 +1738,21 @@ var clusterHealth = (target) => pve(target, "read", "GET", "cluster/status").pip
     quorate: cluster === undefined ? true : bool(cluster.quorate)
   };
 }));
-var degradedReason = (target) => clusterHealth(target).pipe(Effect27.map((health) => health.quorate && health.offline.length === 0 ? undefined : `quorate=${String(health.quorate)} offline=[${health.offline.join(", ")}]`));
+var degradedReason = (target) => clusterHealth(target).pipe(Effect28.map((health) => health.quorate && health.offline.length === 0 ? undefined : `quorate=${String(health.quorate)} offline=[${health.offline.join(", ")}]`));
 var UNREACHABLE = "the task could not be read -- the node stopped answering, or this lease cannot see it";
 var STILL_RUNNING = "still running when this provider stopped waiting";
 var ATTEMPTS = 30;
-var awaitTask = (target, credential, node, upid, attempts = ATTEMPTS) => Effect27.gen(function* () {
+var awaitTask = (target, credential, node, upid, attempts = ATTEMPTS) => Effect28.gen(function* () {
   const path = `nodes/${node}/tasks/${upid}/status`;
   for (let attempt = 0;attempt < attempts; attempt += 1) {
-    const status = yield* pveWith(target, credential, "GET", path).pipe(Effect27.orElseSucceed(() => {
+    const status = yield* pveWith(target, credential, "GET", path).pipe(Effect28.orElseSucceed(() => {
       return;
     }));
     if (status === undefined)
       return UNREACHABLE;
     if (status.status === "stopped")
       return text(status.exitstatus, "stopped with no exitstatus");
-    yield* Effect27.sleep("1 second");
+    yield* Effect28.sleep("1 second");
   }
   return STILL_RUNNING;
 });
@@ -1747,17 +1765,17 @@ var guestPath = (where) => `nodes/${where.node}/lxc/${String(where.vmid)}`;
 var CREATE_POLLS = 180;
 var TASK_POLLS = 60;
 var isServerError = (error) => error instanceof PveError && error.status === 500;
-var readLive = (where) => Effect28.gen(function* () {
-  const answer = yield* pve(where.target, "read", "GET", `${guestPath(where)}/config`).pipe(Effect28.map((data) => ({ data, error: undefined })), Effect28.catchIf(isServerError, (error) => Effect28.succeed({ data: undefined, error })));
+var readLive = (where) => Effect29.gen(function* () {
+  const answer = yield* pve(where.target, "read", "GET", `${guestPath(where)}/config`).pipe(Effect29.map((data) => ({ data, error: undefined })), Effect29.catchIf(isServerError, (error) => Effect29.succeed({ data: undefined, error })));
   if (answer.data !== undefined && answer.data !== null)
     return answer.data;
   const rows = yield* pve(where.target, "read", "GET", "cluster/resources?type=vm");
   const found = (rows ?? []).find((row) => Number(row.vmid) === where.vmid);
   if (found !== undefined && found.node === where.node && found.type === "lxc") {
-    return yield* Effect28.fail(answer.error ?? new LxcRefusedError(`CT ${String(where.vmid)} is listed but its config read empty.`));
+    return yield* Effect29.fail(answer.error ?? new LxcRefusedError(`CT ${String(where.vmid)} is listed but its config read empty.`));
   }
   if (found !== undefined) {
-    return yield* Effect28.fail(new LxcRefusedError(`vmid ${String(where.vmid)} is a ${text(found.type, "guest")} on ` + `${text(found.node, "?")}, not a container on ${where.node}. A migration is not an ` + "update and vmids are cluster-wide: declare the node it is on, or pick a free vmid."));
+    return yield* Effect29.fail(new LxcRefusedError(`vmid ${String(where.vmid)} is a ${text(found.type, "guest")} on ` + `${text(found.node, "?")}, not a container on ${where.node}. A migration is not an ` + "update and vmids are cluster-wide: declare the node it is on, or pick a free vmid."));
   }
   return;
 });
@@ -1767,19 +1785,19 @@ var attributesOf = (where, live) => ({
   rawKeys: rawKeysOf(live),
   vmid: where.vmid
 });
-var task = (where, method, path, what, polls, form) => Effect28.gen(function* () {
+var task = (where, method, path, what, polls, form) => Effect29.gen(function* () {
   const credential = yield* mint(where.target, "provision");
   const upid = text(yield* pveWith(where.target, credential, method, path, form));
   if (upid === "") {
-    return yield* Effect28.fail(new LxcRefusedError(`${what}: PVE returned no task id, so the write cannot be confirmed and is not claimed.`));
+    return yield* Effect29.fail(new LxcRefusedError(`${what}: PVE returned no task id, so the write cannot be confirmed and is not claimed.`));
   }
   const exit = yield* awaitTask(where.target, credential, where.node, upid, polls);
   if (exit !== "OK") {
-    return yield* Effect28.fail(new LxcRefusedError(`${what}: task ${upid} ended "${exit}". Read \`pvesh get /nodes/${where.node}/tasks/` + `${upid}/log\` before running the deploy again.`));
+    return yield* Effect29.fail(new LxcRefusedError(`${what}: task ${upid} ended "${exit}". Read \`pvesh get /nodes/${where.node}/tasks/` + `${upid}/log\` before running the deploy again.`));
   }
 });
 var createGuest = (props) => task(props, "POST", `nodes/${props.node}/lxc`, `create CT ${String(props.vmid)}`, CREATE_POLLS, createForm3(props));
-var updateGuest = (props, change, digest) => Effect28.gen(function* () {
+var updateGuest = (props, change, digest) => Effect29.gen(function* () {
   if (Object.keys(change.put).length > 0 || change.clear.length > 0) {
     const form = withClears({ ...change.put, ...digest === "" ? {} : { digest } }, change.clear);
     yield* pve(props.target, "provision", "PUT", `${guestPath(props)}/config`, form);
@@ -1788,22 +1806,34 @@ var updateGuest = (props, change, digest) => Effect28.gen(function* () {
     yield* task(props, "PUT", `${guestPath(props)}/resize`, `grow ${grow.disk} of CT ${String(props.vmid)} to ${grow.size}`, TASK_POLLS, { disk: grow.disk, size: grow.size });
   }
 });
-var destroyGuest = (where, declared) => Effect28.gen(function* () {
+var destroyGuest = (where, declared) => Effect29.gen(function* () {
   const live = yield* readLive(where);
   if (live === undefined)
     return;
   const drift = judge(declared, live).drift;
   if (drift.length > 0) {
-    return yield* Effect28.fail(new LxcRefusedError(`destroy CT ${String(where.vmid)}: the guest on ${where.node} no longer matches its last ` + `declaration (${drift.join(", ")}), so it may not be the guest this stack made. ` + "Nothing was deleted. Delete it by hand if it should go, or declare it again."));
+    return yield* Effect29.fail(new LxcRefusedError(`destroy CT ${String(where.vmid)}: the guest on ${where.node} no longer matches its last ` + `declaration (${drift.join(", ")}), so it may not be the guest this stack made. ` + "Nothing was deleted. Delete it by hand if it should go, or declare it again."));
   }
   yield* task(where, "DELETE", guestPath(where), `destroy CT ${String(where.vmid)}`, TASK_POLLS);
 });
 
+// src/proxmox/lxc-adoption.ts
+var adoptionRefusal = (props, drift) => `CT ${String(props.vmid)} on ${props.node}: adopting it would change ${drift.join(", ")}. An ` + "adoption never changes a guest, so nothing is written. Declare what is live for these keys " + "(the plan names keys, never values) and plan again; change them after the adoption, as an " + "update.";
+var refuseAdoptedDrift = (owner, props, live, change) => Effect30.gen(function* () {
+  if (change.drift.length === 0)
+    return;
+  const settled2 = (recorded) => Effect30.sync(() => judge(recorded, live).drift.length === 0);
+  if (!(yield* adopting(owner, settled2)))
+    return;
+  return yield* Effect30.fail(new LxcRefusedError(adoptionRefusal(props, change.drift)));
+});
+
 // src/proxmox/lxc.ts
 var ProxmoxLxc = Resource13("Proxmox.Lxc", { defaultRemovalPolicy: "retain" });
-var refused = (reasons) => Effect29.fail(new LxcRefusedError(reasons.join(`
+var refused = (reasons) => Effect31.fail(new LxcRefusedError(reasons.join(`
 `)));
-var diff = (news, olds, output) => Effect29.gen(function* () {
+var diff = (owner, news, olds) => Effect31.gen(function* () {
+  const { output } = owner;
   const identity2 = identityRefusals(news, olds, output);
   if (identity2.length > 0)
     return yield* refused(identity2);
@@ -1816,20 +1846,21 @@ var diff = (news, olds, output) => Effect29.gen(function* () {
     const refusals = createRefusals(news);
     if (refusals.length > 0)
       return yield* refused(refusals);
-    yield* Effect29.logWarning(`Proxmox.Lxc ${news.node}/${String(news.vmid)}: the cluster lists no guest with this ` + "vmid -- a deploy CREATES it again from ostemplate, with new, empty volumes.");
+    yield* Effect31.logWarning(`Proxmox.Lxc ${news.node}/${String(news.vmid)}: the cluster lists no guest with this ` + "vmid -- a deploy CREATES it again from ostemplate, with new, empty volumes.");
     return { action: "update" };
   }
   const change = judge(news, live);
+  yield* refuseAdoptedDrift(owner, news, live, change);
   if (change.refuse.length > 0)
     return yield* refused(change.refuse);
   const moved = news.node !== output.node;
   if (change.drift.length === 0 && !moved)
     return { action: "noop" };
   const what = change.drift.length === 0 ? `the guest is on ${news.node} now, not ${output.node} -- a deploy re-records it, ` + "writing nothing." : `live config differs from the declaration in ${change.drift.join(", ")} -- a ` + "deploy writes these.";
-  yield* Effect29.logWarning(`Proxmox.Lxc ${news.node}/${String(news.vmid)}: ${what}`);
+  yield* Effect31.logWarning(`Proxmox.Lxc ${news.node}/${String(news.vmid)}: ${what}`);
   return { action: "update" };
 });
-var reconcile = (owner, news) => Effect29.gen(function* () {
+var reconcile = (owner, news) => Effect31.gen(function* () {
   const { output } = owner;
   const identity2 = identityRefusals(news, news, output);
   if (identity2.length > 0)
@@ -1850,6 +1881,7 @@ var reconcile = (owner, news) => Effect29.gen(function* () {
         `CT ${String(news.vmid)} already exists on ${news.node} and differs in ` + `${change.drift.join(", ")}, but this deploy planned a create. A create never writes ` + "onto an existing guest: plan again, so the plan can show it and adopt it."
       ]);
     }
+    yield* refuseAdoptedDrift(owner, news, live, change);
     if (change.refuse.length > 0)
       return yield* refused(change.refuse);
     if (change.drift.length > 0)
@@ -1874,22 +1906,24 @@ var whereOf = (olds, output) => ({
   target: olds.target,
   vmid: output?.vmid ?? olds.vmid
 });
-var read = (owner, olds) => Effect29.gen(function* () {
+var read = (owner, olds) => Effect31.gen(function* () {
   const where = whereOf(olds, owner.output);
   const live = yield* readLive(where);
   if (live === undefined)
     return;
-  const settled2 = Effect29.sync(() => judge(olds, live).drift.length === 0);
+  const settled2 = Effect31.sync(() => judge(olds, live).drift.length === 0);
   return yield* ownedRead(owner, attributesOf(where, live), settled2);
 });
 var handlers10 = {
   delete: ({ olds, output }) => destroyGuest(whereOf(olds, output), olds),
   diff: ({
+    fqn,
+    instanceId,
     news,
     olds,
     output
-  }) => diff(news, olds, output),
-  list: () => Effect29.succeed([]),
+  }) => diff({ fqn, instanceId, output }, news, olds),
+  list: () => Effect31.succeed([]),
   read: ({
     fqn,
     instanceId,
@@ -1903,11 +1937,11 @@ var handlers10 = {
     output
   }) => reconcile({ fqn, instanceId, output }, news)
 };
-var ProxmoxLxcProvider = () => Provider13.effect(ProxmoxLxc, Effect29.succeed(ProxmoxLxc.Provider.of(handlers10)).pipe(Effect29.map(provingResumes)));
+var ProxmoxLxcProvider = () => Provider13.effect(ProxmoxLxc, Effect31.succeed(ProxmoxLxc.Provider.of(handlers10)).pipe(Effect31.map(provingResumes)));
 // src/proxmox/metric-server.ts
 import { Resource as Resource14 } from "alchemy";
 import * as Provider14 from "alchemy/Provider";
-import * as Effect30 from "effect/Effect";
+import * as Effect32 from "effect/Effect";
 
 // src/proxmox/metric-server-form.ts
 var UNSET2 = -1;
@@ -2015,22 +2049,22 @@ var handlers11 = pveHandlers({
   path: (props) => `cluster/metrics/server/${props.id}`,
   updateForm: update
 });
-var ProxmoxMetricServerProvider = () => Provider14.effect(ProxmoxMetricServer, Effect30.succeed(ProxmoxMetricServer.Provider.of(handlers11)));
+var ProxmoxMetricServerProvider = () => Provider14.effect(ProxmoxMetricServer, Effect32.succeed(ProxmoxMetricServer.Provider.of(handlers11)));
 // src/proxmox/network-apply.ts
 import { Resource as Resource15 } from "alchemy";
 import { isResolved as isResolved7 } from "alchemy/Diff";
 import * as Provider15 from "alchemy/Provider";
-import * as Effect31 from "effect/Effect";
+import * as Effect33 from "effect/Effect";
 var ProxmoxNetworkApply = Resource15("Proxmox.NetworkApply");
-var read2 = (props) => pendingCount(props.target, props.node).pipe(Effect31.map((pending) => ({ node: props.node, pending })));
-var diff2 = (news) => Effect31.gen(function* () {
+var read2 = (props) => pendingCount(props.target, props.node).pipe(Effect33.map((pending) => ({ node: props.node, pending })));
+var diff2 = (news) => Effect33.gen(function* () {
   if (!isResolved7(news))
     return;
   const { pending } = yield* read2(news);
   return pending === 0 ? { action: "noop" } : { action: "update" };
 });
-var refuse = (node, why) => Effect31.die(new Error(`Proxmox.NetworkApply ${node}: ${why}`));
-var apply = (props) => Effect31.gen(function* () {
+var refuse = (node, why) => Effect33.die(new Error(`Proxmox.NetworkApply ${node}: ${why}`));
+var apply = (props) => Effect33.gen(function* () {
   const node = props.node;
   const staged = yield* pendingCount(props.target, node);
   if (staged === 0)
@@ -2059,17 +2093,17 @@ var apply = (props) => Effect31.gen(function* () {
   return { node, pending: left };
 });
 var handlers12 = {
-  delete: () => Effect31.void,
+  delete: () => Effect33.void,
   diff: ({ news }) => diff2(news),
-  list: () => Effect31.succeed([]),
+  list: () => Effect33.succeed([]),
   read: ({ olds }) => read2(olds),
   reconcile: ({ news }) => apply(news)
 };
-var ProxmoxNetworkApplyProvider = () => Provider15.effect(ProxmoxNetworkApply, Effect31.succeed(ProxmoxNetworkApply.Provider.of(handlers12)));
+var ProxmoxNetworkApplyProvider = () => Provider15.effect(ProxmoxNetworkApply, Effect33.succeed(ProxmoxNetworkApply.Provider.of(handlers12)));
 // src/proxmox/node-network.ts
 import { Resource as Resource16 } from "alchemy";
 import * as Provider16 from "alchemy/Provider";
-import * as Effect32 from "effect/Effect";
+import * as Effect34 from "effect/Effect";
 
 // src/proxmox/node-network-form.ts
 var UNSET3 = -1;
@@ -2149,11 +2183,11 @@ var handlers13 = pveHandlers({
   path: (props) => `nodes/${props.node}/network/${props.iface}`,
   updateForm: updateBody2
 });
-var ProxmoxNodeNetworkProvider = () => Provider16.effect(ProxmoxNodeNetwork, Effect32.succeed(ProxmoxNodeNetwork.Provider.of(handlers13)));
+var ProxmoxNodeNetworkProvider = () => Provider16.effect(ProxmoxNodeNetwork, Effect34.succeed(ProxmoxNodeNetwork.Provider.of(handlers13)));
 // src/proxmox/notification-target.ts
 import { Resource as Resource17 } from "alchemy";
 import * as Provider17 from "alchemy/Provider";
-import * as Effect33 from "effect/Effect";
+import * as Effect35 from "effect/Effect";
 
 // src/proxmox/notification-target-form.ts
 var REPEATED_KEY = "\x00";
@@ -2209,15 +2243,15 @@ var handlers14 = pveHandlers({
   path: (props) => `cluster/notifications/endpoints/${props.type}/${props.name}`,
   updateForm: shape4
 });
-var ProxmoxNotificationTargetProvider = () => Provider17.effect(ProxmoxNotificationTarget, Effect33.succeed(ProxmoxNotificationTarget.Provider.of(handlers14)));
+var ProxmoxNotificationTargetProvider = () => Provider17.effect(ProxmoxNotificationTarget, Effect35.succeed(ProxmoxNotificationTarget.Provider.of(handlers14)));
 // src/proxmox/pbs-datastore.ts
 import { Resource as Resource18 } from "alchemy";
 import { isResolved as isResolved8 } from "alchemy/Diff";
 import * as Provider18 from "alchemy/Provider";
-import * as Effect36 from "effect/Effect";
+import * as Effect38 from "effect/Effect";
 
 // src/proxmox/pbs-datastore-form.ts
-import * as Effect34 from "effect/Effect";
+import * as Effect36 from "effect/Effect";
 var attributes = (live, props) => ({
   backend: propertyString(live["backend"]),
   comment: text(live["comment"]),
@@ -2269,24 +2303,24 @@ var createForm4 = (props) => ({
 });
 var updateForm = (props) => mutable(props);
 var object2 = (props) => `config/datastore/${props.name}`;
-var readOne = (props) => pve(props.target, "read", "GET", object2(props)).pipe(Effect34.map((live) => live === undefined || typeof live["name"] !== "string" ? undefined : attributes(live, props)), Effect34.orElseSucceed(() => {
+var readOne = (props) => pve(props.target, "read", "GET", object2(props)).pipe(Effect36.map((live) => live === undefined || typeof live["name"] !== "string" ? undefined : attributes(live, props)), Effect36.orElseSucceed(() => {
   return;
 }));
 
 // src/proxmox/pbs-datastore-guard.ts
-import * as Effect35 from "effect/Effect";
+import * as Effect37 from "effect/Effect";
 var samePath = (left, right) => {
   const trim = (value) => value.length > 1 ? value.replace(/\/+$/, "") : value;
   return trim(left) === trim(right);
 };
-var guardPath = (live, props) => live.path === "" || samePath(live.path, props.path) ? Effect35.void : Effect35.die(new Error(`${object2(props)}: declared path ${props.path} but PBS holds ${live.path}. \`path\` ` + "is create-only, so this cannot be reconciled and will NOT be planned as a silent " + "noop: backups would keep landing in the old directory behind a green plan. Correct " + "the declaration, or remove the datastore and declare a new one -- the contents live, " + "because `destroy-data` is never sent."));
-var guardBackend = (live, props) => props.backend === undefined || propertyString(props.backend) === live.backend ? Effect35.void : Effect35.die(new Error(`${object2(props)}: declared backend ${props.backend} but PBS holds ` + `${live.backend === "" ? "(none — a local datastore)" : live.backend}. \`backend\` ` + "is create-only: PBS has no update for it, so this cannot be reconciled and will NOT " + "be planned as a silent noop. Correct the declaration to match what is really there, " + "or remove the datastore and declare a new one -- the contents live, because " + "`destroy-data` is never sent."));
-var settle3 = (read3, done) => Effect35.gen(function* () {
+var guardPath = (live, props) => live.path === "" || samePath(live.path, props.path) ? Effect37.void : Effect37.die(new Error(`${object2(props)}: declared path ${props.path} but PBS holds ${live.path}. \`path\` ` + "is create-only, so this cannot be reconciled and will NOT be planned as a silent " + "noop: backups would keep landing in the old directory behind a green plan. Correct " + "the declaration, or remove the datastore and declare a new one -- the contents live, " + "because `destroy-data` is never sent."));
+var guardBackend = (live, props) => props.backend === undefined || propertyString(props.backend) === live.backend ? Effect37.void : Effect37.die(new Error(`${object2(props)}: declared backend ${props.backend} but PBS holds ` + `${live.backend === "" ? "(none — a local datastore)" : live.backend}. \`backend\` ` + "is create-only: PBS has no update for it, so this cannot be reconciled and will NOT " + "be planned as a silent noop. Correct the declaration to match what is really there, " + "or remove the datastore and declare a new one -- the contents live, because " + "`destroy-data` is never sent."));
+var settle3 = (read3, done) => Effect37.gen(function* () {
   for (let attempt = 0;attempt < 60; attempt += 1) {
     const live = yield* read3;
     if (done(live))
       return live;
-    yield* Effect35.sleep("2 seconds");
+    yield* Effect37.sleep("2 seconds");
   }
   return yield* read3;
 });
@@ -2295,10 +2329,10 @@ var settle3 = (read3, done) => Effect35.gen(function* () {
 var PbsDatastore = Resource18("Pbs.Datastore", {
   defaultRemovalPolicy: "retain"
 });
-var PbsDatastoreProvider = () => Provider18.effect(PbsDatastore, Effect36.succeed(PbsDatastore.Provider.of({
-  list: () => Effect36.succeed([]),
+var PbsDatastoreProvider = () => Provider18.effect(PbsDatastore, Effect38.succeed(PbsDatastore.Provider.of({
+  list: () => Effect38.succeed([]),
   read: ({ olds }) => readOne(olds),
-  diff: ({ news, output }) => Effect36.gen(function* () {
+  diff: ({ news, output }) => Effect38.gen(function* () {
     if (output === undefined || !isResolved8(news))
       return;
     const live = yield* readOne(news);
@@ -2308,7 +2342,7 @@ var PbsDatastoreProvider = () => Provider18.effect(PbsDatastore, Effect36.succee
     yield* guardBackend(live, news);
     return matches(live, news) ? { action: "noop" } : { action: "update" };
   }),
-  reconcile: Effect36.fn(function* ({ news }) {
+  reconcile: Effect38.fn(function* ({ news }) {
     const live = yield* readOne(news);
     let upid;
     if (live === undefined) {
@@ -2323,22 +2357,22 @@ var PbsDatastoreProvider = () => Provider18.effect(PbsDatastore, Effect36.succee
     }
     const after = yield* settle3(readOne(news), (row) => row !== undefined && matches(row, news));
     if (after === undefined || !matches(after, news)) {
-      return yield* Effect36.die(new Error(`${object2(news)}: the write returned no error but the datastore still does not ` + `match the declaration after 120s. PBS answered with task ${upid ?? "(none)"} ` + "-- read it with `proxmox-backup-manager task log <upid>`. A slow disk is a " + "plausible cause (see `settle`); a create over an existing chunk store is not, " + "because PBS refuses that outright rather than timing out."));
+      return yield* Effect38.die(new Error(`${object2(news)}: the write returned no error but the datastore still does not ` + `match the declaration after 120s. PBS answered with task ${upid ?? "(none)"} ` + "-- read it with `proxmox-backup-manager task log <upid>`. A slow disk is a " + "plausible cause (see `settle`); a create over an existing chunk store is not, " + "because PBS refuses that outright rather than timing out."));
     }
     return after;
   }),
-  delete: Effect36.fn(function* ({ olds }) {
+  delete: Effect38.fn(function* ({ olds }) {
     yield* pve(olds.target, "provision", "DELETE", object2(olds));
     const left = yield* settle3(readOne(olds), (row) => row === undefined);
     if (left !== undefined) {
-      return yield* Effect36.die(new Error(`${object2(olds)}: the DELETE returned no error but the datastore is still in ` + "datastore.cfg after 120s. Either a backup, verify or GC task still holds it, " + "or the provision role lacks Datastore.Allocate on /datastore/" + `${olds.name}. Read the task log with \`proxmox-backup-manager task log <upid>\`.`));
+      return yield* Effect38.die(new Error(`${object2(olds)}: the DELETE returned no error but the datastore is still in ` + "datastore.cfg after 120s. Either a backup, verify or GC task still holds it, " + "or the provision role lacks Datastore.Allocate on /datastore/" + `${olds.name}. Read the task log with \`proxmox-backup-manager task log <upid>\`.`));
     }
   })
 })));
 // src/proxmox/pbs-prune-job.ts
 import { Resource as Resource19 } from "alchemy";
 import * as Provider19 from "alchemy/Provider";
-import * as Effect37 from "effect/Effect";
+import * as Effect39 from "effect/Effect";
 
 // src/proxmox/pbs-prune-job-form.ts
 var KEEP_KEYS = [
@@ -2413,11 +2447,11 @@ var handlers15 = pveHandlers({
   path: (props) => `config/prune/${props.id}`,
   updateForm: updateBody3
 });
-var PbsPruneJobProvider = () => Provider19.effect(PbsPruneJob, Effect37.succeed(PbsPruneJob.Provider.of(handlers15)));
+var PbsPruneJobProvider = () => Provider19.effect(PbsPruneJob, Effect39.succeed(PbsPruneJob.Provider.of(handlers15)));
 // src/proxmox/pbs-sync-job.ts
 import { Resource as Resource20 } from "alchemy";
 import * as Provider20 from "alchemy/Provider";
-import * as Effect38 from "effect/Effect";
+import * as Effect40 from "effect/Effect";
 
 // src/proxmox/pbs-sync-job-form.ts
 var UNSET4 = -1;
@@ -2493,11 +2527,11 @@ var handlers16 = pveHandlers({
 
 // src/proxmox/pbs-sync-job.ts
 var PbsSyncJob = Resource20("Pbs.SyncJob");
-var PbsSyncJobProvider = () => Provider20.effect(PbsSyncJob, Effect38.succeed(PbsSyncJob.Provider.of(handlers16)));
+var PbsSyncJobProvider = () => Provider20.effect(PbsSyncJob, Effect40.succeed(PbsSyncJob.Provider.of(handlers16)));
 // src/proxmox/pbs-verify-job.ts
 import { Resource as Resource21 } from "alchemy";
 import * as Provider21 from "alchemy/Provider";
-import * as Effect39 from "effect/Effect";
+import * as Effect41 from "effect/Effect";
 
 // src/proxmox/pbs-verify-job-form.ts
 var rechecks = (ignoreVerified, outdatedAfter) => {
@@ -2541,11 +2575,11 @@ var handlers17 = pveHandlers({
   path: (props) => `config/verify/${props.id}`,
   updateForm: shape7
 });
-var PbsVerifyJobProvider = () => Provider21.effect(PbsVerifyJob, Effect39.succeed(PbsVerifyJob.Provider.of(handlers17)));
+var PbsVerifyJobProvider = () => Provider21.effect(PbsVerifyJob, Effect41.succeed(PbsVerifyJob.Provider.of(handlers17)));
 // src/proxmox/pool.ts
 import { Resource as Resource22 } from "alchemy";
 import * as Provider22 from "alchemy/Provider";
-import * as Effect40 from "effect/Effect";
+import * as Effect42 from "effect/Effect";
 var ProxmoxPool = Resource22("Proxmox.Pool");
 var poolCreateForm = (props) => ({
   comment: props.comment ?? "",
@@ -2569,11 +2603,11 @@ var handlers18 = pveHandlers({
   path: (props) => `pools/${props.poolid}`,
   updateForm: poolUpdateForm
 });
-var ProxmoxPoolProvider = () => Provider22.effect(ProxmoxPool, Effect40.succeed(ProxmoxPool.Provider.of(handlers18)));
+var ProxmoxPoolProvider = () => Provider22.effect(ProxmoxPool, Effect42.succeed(ProxmoxPool.Provider.of(handlers18)));
 // src/proxmox/qemu.ts
 import { Resource as Resource23 } from "alchemy";
 import * as Provider23 from "alchemy/Provider";
-import * as Effect41 from "effect/Effect";
+import * as Effect43 from "effect/Effect";
 var ProxmoxVm = Resource23("Proxmox.Vm");
 var shape8 = (props) => ({
   cores: String(props.cores ?? 1),
@@ -2599,11 +2633,11 @@ var handlers19 = pveHandlers({
   path: (props) => `nodes/${props.node}/qemu/${String(props.vmid)}/config`,
   updateForm: shape8
 });
-var ProxmoxVmProvider = () => Provider23.effect(ProxmoxVm, Effect41.succeed(ProxmoxVm.Provider.of(handlers19)));
+var ProxmoxVmProvider = () => Provider23.effect(ProxmoxVm, Effect43.succeed(ProxmoxVm.Provider.of(handlers19)));
 // src/proxmox/replication-job.ts
 import { Resource as Resource24 } from "alchemy";
 import * as Provider24 from "alchemy/Provider";
-import * as Effect42 from "effect/Effect";
+import * as Effect44 from "effect/Effect";
 
 // src/proxmox/replication-job-form.ts
 var DEFAULT_SCHEDULE = "*/15";
@@ -2653,11 +2687,11 @@ var handlers20 = pveHandlers({
   path: (props) => `cluster/replication/${jobId(props)}`,
   updateForm: updateBody5
 });
-var ProxmoxReplicationJobProvider = () => Provider24.effect(ProxmoxReplicationJob, Effect42.succeed(ProxmoxReplicationJob.Provider.of(handlers20)));
+var ProxmoxReplicationJobProvider = () => Provider24.effect(ProxmoxReplicationJob, Effect44.succeed(ProxmoxReplicationJob.Provider.of(handlers20)));
 // src/proxmox/role.ts
 import { Resource as Resource25 } from "alchemy";
 import * as Provider25 from "alchemy/Provider";
-import * as Effect43 from "effect/Effect";
+import * as Effect45 from "effect/Effect";
 var ProxmoxRole = Resource25("Proxmox.Role");
 var canonical = (privs) => [...new Set(privs.map((priv) => priv.trim()).filter((priv) => priv.length > 0))].sort();
 var livePrivs = (live) => {
@@ -2674,15 +2708,15 @@ var handlers21 = pveHandlers({
   path: (props) => `access/roles/${props.roleid}`,
   updateForm: (props) => ({ privs: canonical(props.privs).join(",") })
 });
-var ProxmoxRoleProvider = () => Provider25.effect(ProxmoxRole, Effect43.succeed(ProxmoxRole.Provider.of(handlers21)));
+var ProxmoxRoleProvider = () => Provider25.effect(ProxmoxRole, Effect45.succeed(ProxmoxRole.Provider.of(handlers21)));
 // src/proxmox/sdn-apply.ts
 import { Resource as Resource26 } from "alchemy";
 import { isResolved as isResolved9 } from "alchemy/Diff";
 import * as Provider26 from "alchemy/Provider";
-import * as Effect45 from "effect/Effect";
+import * as Effect47 from "effect/Effect";
 
 // src/proxmox/sdn-apply-read.ts
-import * as Effect44 from "effect/Effect";
+import * as Effect46 from "effect/Effect";
 var MARKED = [
   "cluster/sdn/zones",
   "cluster/sdn/vnets",
@@ -2691,7 +2725,7 @@ var MARKED = [
   "cluster/sdn/route-maps"
 ];
 var subsystemAbsent = (error) => error instanceof PveError && error.status === 501;
-var markedPending = (target) => Effect44.all(MARKED.map((collection2) => pve(target, "read", "GET", `${collection2}?pending=1`).pipe(Effect44.map((rows) => (rows ?? []).filter((row) => row.state !== undefined).length), Effect44.catchIf(subsystemAbsent, () => Effect44.succeed(0)))), { concurrency: "unbounded" }).pipe(Effect44.map((counts) => counts.reduce((total, count2) => total + count2, 0)));
+var markedPending = (target) => Effect46.all(MARKED.map((collection2) => pve(target, "read", "GET", `${collection2}?pending=1`).pipe(Effect46.map((rows) => (rows ?? []).filter((row) => row.state !== undefined).length), Effect46.catchIf(subsystemAbsent, () => Effect46.succeed(0)))), { concurrency: "unbounded" }).pipe(Effect46.map((counts) => counts.reduce((total, count2) => total + count2, 0)));
 var fabricStaged = (staged, running) => {
   if (staged === undefined && running === undefined)
     return 0;
@@ -2699,9 +2733,9 @@ var fabricStaged = (staged, running) => {
     return "inconsistent";
   return staged === running ? 0 : 1;
 };
-var fabricPending = (target) => Effect44.all(["pending", "running"].map((view) => pve(target, "read", "GET", `cluster/sdn/fabrics/all?${view}=1`).pipe(Effect44.map(canonical2), Effect44.catchIf(subsystemAbsent, () => Effect44.succeed(undefined)))), { concurrency: "unbounded" }).pipe(Effect44.flatMap(([staged, running]) => {
+var fabricPending = (target) => Effect46.all(["pending", "running"].map((view) => pve(target, "read", "GET", `cluster/sdn/fabrics/all?${view}=1`).pipe(Effect46.map(canonical2), Effect46.catchIf(subsystemAbsent, () => Effect46.succeed(undefined)))), { concurrency: "unbounded" }).pipe(Effect46.flatMap(([staged, running]) => {
   const verdict = fabricStaged(staged, running);
-  return verdict === "inconsistent" ? Effect44.die(new Error("cluster/sdn/fabrics/all answered 501 for one of ?pending=1 and ?running=1 and not " + "the other. Refusing to read that as a staged fabric change.")) : Effect44.succeed(verdict);
+  return verdict === "inconsistent" ? Effect46.die(new Error("cluster/sdn/fabrics/all answered 501 for one of ?pending=1 and ?running=1 and not " + "the other. Refusing to read that as a staged fabric change.")) : Effect46.succeed(verdict);
 }));
 var canonical2 = (value) => JSON.stringify(sortDeep(value));
 var sortDeep = (value) => {
@@ -2714,39 +2748,39 @@ var sortDeep = (value) => {
   }
   return value;
 };
-var sdnPendingCount = (target) => Effect44.all([markedPending(target), fabricPending(target)], { concurrency: "unbounded" }).pipe(Effect44.map(([marked, fabric]) => marked + fabric));
+var sdnPendingCount = (target) => Effect46.all([markedPending(target), fabricPending(target)], { concurrency: "unbounded" }).pipe(Effect46.map(([marked, fabric]) => marked + fabric));
 
 // src/proxmox/sdn-apply.ts
 var ProxmoxSdnApply = Resource26("Proxmox.SdnApply");
-var read3 = (props) => sdnPendingCount(props.target).pipe(Effect45.map((pending) => ({ pending })));
-var ProxmoxSdnApplyProvider = () => Provider26.effect(ProxmoxSdnApply, Effect45.succeed(ProxmoxSdnApply.Provider.of({
-  list: () => Effect45.succeed([]),
-  read: Effect45.fn(function* ({ olds }) {
+var read3 = (props) => sdnPendingCount(props.target).pipe(Effect47.map((pending) => ({ pending })));
+var ProxmoxSdnApplyProvider = () => Provider26.effect(ProxmoxSdnApply, Effect47.succeed(ProxmoxSdnApply.Provider.of({
+  list: () => Effect47.succeed([]),
+  read: Effect47.fn(function* ({ olds }) {
     return yield* read3(olds);
   }),
-  diff: Effect45.fn(function* ({ news }) {
+  diff: Effect47.fn(function* ({ news }) {
     if (!isResolved9(news))
       return;
     const { pending } = yield* read3(news);
     return pending === 0 ? { action: "noop" } : { action: "update" };
   }),
-  reconcile: Effect45.fn(function* ({ news }) {
+  reconcile: Effect47.fn(function* ({ news }) {
     const staged = yield* read3(news);
     if (staged.pending === 0)
       return staged;
     yield* pve(news.target, "provision", "PUT", "cluster/sdn");
     const after = yield* read3(news);
     if (after.pending !== 0) {
-      return yield* Effect45.die(new Error(`PUT /cluster/sdn returned no error but ${String(after.pending)} SDN object(s) ` + "are still staged. The running config does not match the declared one -- check " + "`pvesh get /cluster/sdn/zones --pending 1` for the objects PVE refused."));
+      return yield* Effect47.die(new Error(`PUT /cluster/sdn returned no error but ${String(after.pending)} SDN object(s) ` + "are still staged. The running config does not match the declared one -- check " + "`pvesh get /cluster/sdn/zones --pending 1` for the objects PVE refused."));
     }
     return after;
   }),
-  delete: () => Effect45.void
+  delete: () => Effect47.void
 })));
 // src/proxmox/sdn-subnet.ts
 import { Resource as Resource27 } from "alchemy";
 import * as Provider27 from "alchemy/Provider";
-import * as Effect46 from "effect/Effect";
+import * as Effect48 from "effect/Effect";
 
 // src/proxmox/sdn-subnet-form.ts
 var subnetId = (props) => `${props.zone}-${props.cidr.replace("/", "-")}`;
@@ -2802,11 +2836,11 @@ var handlers22 = pveHandlers({
   path: (props) => `cluster/sdn/vnets/${props.vnet}/subnets/${subnetId(props)}`,
   updateForm: updateForm2
 });
-var ProxmoxSdnSubnetProvider = () => Provider27.effect(ProxmoxSdnSubnet, Effect46.succeed(ProxmoxSdnSubnet.Provider.of(handlers22)));
+var ProxmoxSdnSubnetProvider = () => Provider27.effect(ProxmoxSdnSubnet, Effect48.succeed(ProxmoxSdnSubnet.Provider.of(handlers22)));
 // src/proxmox/sdn-vnet.ts
 import { Resource as Resource28 } from "alchemy";
 import * as Provider28 from "alchemy/Provider";
-import * as Effect47 from "effect/Effect";
+import * as Effect49 from "effect/Effect";
 var ProxmoxSdnVnet = Resource28("Proxmox.SdnVnet");
 var tagOf = (value) => typeof value === "number" ? value : undefined;
 var shape10 = (props) => {
@@ -2843,11 +2877,11 @@ var handlers23 = pveHandlers({
   path: (props) => `cluster/sdn/vnets/${props.vnet}`,
   updateForm: updateForm3
 });
-var ProxmoxSdnVnetProvider = () => Provider28.effect(ProxmoxSdnVnet, Effect47.succeed(ProxmoxSdnVnet.Provider.of(handlers23)));
+var ProxmoxSdnVnetProvider = () => Provider28.effect(ProxmoxSdnVnet, Effect49.succeed(ProxmoxSdnVnet.Provider.of(handlers23)));
 // src/proxmox/sdn-zone.ts
 import { Resource as Resource29 } from "alchemy";
 import * as Provider29 from "alchemy/Provider";
-import * as Effect48 from "effect/Effect";
+import * as Effect50 from "effect/Effect";
 var ProxmoxSdnZone = Resource29("Proxmox.SdnZone");
 var sameIpam = (live, declared) => (live === "" ? "pve" : live) === (declared === undefined || declared === "" ? "pve" : declared);
 var body6 = (props) => ({
@@ -2899,11 +2933,11 @@ var handlers24 = pveHandlers({
     return withClears(fields, clear);
   }
 });
-var ProxmoxSdnZoneProvider = () => Provider29.effect(ProxmoxSdnZone, Effect48.succeed(ProxmoxSdnZone.Provider.of(handlers24)));
+var ProxmoxSdnZoneProvider = () => Provider29.effect(ProxmoxSdnZone, Effect50.succeed(ProxmoxSdnZone.Provider.of(handlers24)));
 // src/proxmox/storage.ts
 import { Resource as Resource30 } from "alchemy";
 import * as Provider30 from "alchemy/Provider";
-import * as Effect49 from "effect/Effect";
+import * as Effect51 from "effect/Effect";
 var ProxmoxStorage = Resource30("Proxmox.Storage", {
   defaultRemovalPolicy: "retain"
 });
@@ -2948,11 +2982,11 @@ var handlers25 = pveHandlers({
   path: (props) => `storage/${props.storage}`,
   updateForm: mutable2
 });
-var ProxmoxStorageProvider = () => Provider30.effect(ProxmoxStorage, Effect49.succeed(ProxmoxStorage.Provider.of(handlers25)));
+var ProxmoxStorageProvider = () => Provider30.effect(ProxmoxStorage, Effect51.succeed(ProxmoxStorage.Provider.of(handlers25)));
 // src/proxmox/user.ts
 import { Resource as Resource31 } from "alchemy";
 import * as Provider31 from "alchemy/Provider";
-import * as Effect50 from "effect/Effect";
+import * as Effect52 from "effect/Effect";
 var ProxmoxUser = Resource31("Proxmox.User");
 var str3 = (value) => typeof value === "string" ? value : "";
 var int2 = (value) => {
@@ -2992,14 +3026,14 @@ var handlers26 = pveHandlers({
   path: (props) => `access/users/${props.userid}`,
   updateForm: shape11
 });
-var ProxmoxUserProvider = () => Provider31.effect(ProxmoxUser, Effect50.succeed(ProxmoxUser.Provider.of(handlers26)));
+var ProxmoxUserProvider = () => Provider31.effect(ProxmoxUser, Effect52.succeed(ProxmoxUser.Provider.of(handlers26)));
 // src/proxmox/zfs-pool.ts
 import { Resource as Resource32 } from "alchemy";
 import * as Provider32 from "alchemy/Provider";
-import * as Effect52 from "effect/Effect";
+import * as Effect54 from "effect/Effect";
 
 // src/proxmox/zfs-pool-write.ts
-import * as Effect51 from "effect/Effect";
+import * as Effect53 from "effect/Effect";
 var createForm6 = (props) => ({
   devices: props.devices.join(","),
   name: props.name,
@@ -3009,21 +3043,21 @@ var createForm6 = (props) => ({
   ...props["draid-config"] === undefined ? {} : { "draid-config": props["draid-config"] }
 });
 var SETTLE_ATTEMPTS = 30;
-var createPool = (props, collection2, path, read4) => Effect51.gen(function* () {
+var createPool = (props, collection2, path, read4) => Effect53.gen(function* () {
   const existing = yield* read4(props);
   if (existing !== undefined)
     return existing;
   const upid = yield* pve(props.target, "provision", "POST", collection2, createForm6(props));
-  const settle4 = (attempts) => Effect51.gen(function* () {
+  const settle4 = (attempts) => Effect53.gen(function* () {
     const live = yield* read4(props);
     if (live !== undefined || attempts <= 0)
       return live;
-    yield* Effect51.sleep("2 seconds");
+    yield* Effect53.sleep("2 seconds");
     return yield* settle4(attempts - 1);
   });
   const after = yield* settle4(SETTLE_ATTEMPTS);
   if (after === undefined) {
-    return yield* Effect51.die(new Error(`${path}: POST returned ${text(upid, "(no UPID)")} but the pool has not appeared. That ` + "POST only forks a `zfscreate` worker, so the task holds the real error -- read it " + `with \`pvesh get /nodes/${props.node}/tasks/<upid>/log\`. NOTHING WAS RETRIED AND ` + "NOTHING WAS CLEANED UP: if the worker reached `zpool create`, the declared devices " + "have already been written to."));
+    return yield* Effect53.die(new Error(`${path}: POST returned ${text(upid, "(no UPID)")} but the pool has not appeared. That ` + "POST only forks a `zfscreate` worker, so the task holds the real error -- read it " + `with \`pvesh get /nodes/${props.node}/tasks/<upid>/log\`. NOTHING WAS RETRIED AND ` + "NOTHING WAS CLEANED UP: if the worker reached `zpool create`, the declared devices " + "have already been written to."));
   }
   return after;
 });
@@ -3058,12 +3092,12 @@ var spec2 = {
 var ops5 = pveOperations(spec2);
 var handlers27 = {
   ...pveHandlers(spec2),
-  delete: Effect52.fn(function* ({ olds }) {
+  delete: Effect54.fn(function* ({ olds }) {
     yield* destroyPool(olds, spec2.path(olds));
   }),
   reconcile: ({ news }) => createPool(news, spec2.collection(news), spec2.path(news), ops5.read)
 };
-var ProxmoxZfsPoolProvider = () => Provider32.effect(ProxmoxZfsPool, Effect52.succeed(ProxmoxZfsPool.Provider.of(handlers27)));
+var ProxmoxZfsPoolProvider = () => Provider32.effect(ProxmoxZfsPool, Effect54.succeed(ProxmoxZfsPool.Provider.of(handlers27)));
 export {
   PbsDatastore,
   PbsDatastoreProvider,
@@ -3120,5 +3154,5 @@ export {
   ProxmoxZfsPoolProvider
 };
 
-//# debugId=2E96DC8F7406C81F64756E2164756E21
+//# debugId=6EEA5191A9F0C54064756E2164756E21
 //# sourceMappingURL=index.js.map