@homeflare/alchemy 0.14.0 → 0.15.0

package/src/proxmox/generated/constraints/pbs-config.ts

@@ -0,0 +1,141 @@
+/**
+ * Generated proxmox-backup-server parameter constraints for `/config` — DO NOT EDIT BY HAND.
+ *
+ * Run: bun codegen/constraints.ts
+ * Manifest entry: `pbs-apidoc` — proxmox-backup-server 4.2.6-1 (running 4.2.3)
+ *   sha256 274ab9f6fc075aea, read on a PBS host from
+ *   /usr/share/doc/proxmox-backup/html/api-viewer/apidoc.js
+ *
+ * 10 of this product's 144 POST/PUT endpoints are tabled across all areas: the ones
+ * this package writes to, named in its own source. Every other vendor write endpoint is UNTABLED
+ * and therefore unchecked at plan time.
+ *
+ * ⚠️ A `patternSource` with no `pattern` beside it is a rule that could NOT be carried into a
+ *   JavaScript RegExp faithfully (codegen/pattern.ts). It is recorded and NOT enforced.
+ */
+import type { EndpointConstraints } from '../../constraints.ts';
+
+export const PBS_CONFIG_CONSTRAINTS: Readonly<Record<string, EndpointConstraints>> = {
+  "pbs:POST /config/datastore": {
+    "backing-device": {"pattern":"^[0-9a-f]{8}(?:-[0-9a-f]{4}){3}-[0-9a-f]{12}$","patternSource":"/^[0-9a-f]{8}(?:-[0-9a-f]{4}){3}-[0-9a-f]{12}$/","type":"string"},
+    "comment": {"maxLength":128,"pattern":"^[^\\x00-\\x1f\\x7f]*$","patternSource":"/^[[:^cntrl:]]*$/","type":"string"},
+    "keep-daily": {"minimum":1,"type":"integer"},
+    "keep-hourly": {"minimum":1,"type":"integer"},
+    "keep-last": {"minimum":1,"type":"integer"},
+    "keep-monthly": {"minimum":1,"type":"integer"},
+    "keep-weekly": {"minimum":1,"type":"integer"},
+    "keep-yearly": {"minimum":1,"type":"integer"},
+    "name": {"maxLength":32,"minLength":3,"pattern":"^(?:[A-Za-z0-9_][A-Za-z0-9._\\-]*)$","patternSource":"/^(?:[A-Za-z0-9_][A-Za-z0-9._\\-]*)$/","required":true,"type":"string"},
+    "notification-mode": {"default":"notification-system","enum":["legacy-sendmail","notification-system"],"type":"string"},
+    "notify-user": {"maxLength":64,"minLength":3,"pattern":"^(?:[^\\s:/\\x00-\\x1f\\x7f]+)@(?:[A-Za-z0-9_][A-Za-z0-9._\\-]*)$","patternSource":"/^(?:[^\\s:/[:cntrl:]]+)@(?:[A-Za-z0-9_][A-Za-z0-9._\\-]*)$/","type":"string"},
+    "path": {"maxLength":4096,"minLength":1,"required":true,"type":"string"},
+  },
+  "pbs:POST /config/notifications/matchers": {
+    "comment": {"maxLength":128,"pattern":"^[^\\x00-\\x1f\\x7f]*$","patternSource":"/^[[:^cntrl:]]*$/","type":"string"},
+    "mode": {"default":"all","enum":["all","any"],"type":"string"},
+    "name": {"maxLength":32,"minLength":2,"pattern":"^(?:[A-Za-z0-9_][A-Za-z0-9._\\-]*)$","patternSource":"/^(?:[A-Za-z0-9_][A-Za-z0-9._\\-]*)$/","required":true,"type":"string"},
+    "origin": {"enum":["user-created","builtin","modified-builtin"],"type":"string"},
+  },
+  "pbs:POST /config/prune": {
+    "comment": {"maxLength":128,"pattern":"^[^\\x00-\\x1f\\x7f]*$","patternSource":"/^[[:^cntrl:]]*$/","type":"string"},
+    "id": {"maxLength":32,"minLength":3,"pattern":"^(?:[A-Za-z0-9_][A-Za-z0-9._\\-]*)$","patternSource":"/^(?:[A-Za-z0-9_][A-Za-z0-9._\\-]*)$/","required":true,"type":"string"},
+    "keep-daily": {"minimum":1,"type":"integer"},
+    "keep-hourly": {"minimum":1,"type":"integer"},
+    "keep-last": {"minimum":1,"type":"integer"},
+    "keep-monthly": {"minimum":1,"type":"integer"},
+    "keep-weekly": {"minimum":1,"type":"integer"},
+    "keep-yearly": {"minimum":1,"type":"integer"},
+    "max-depth": {"maximum":7,"minimum":0,"type":"integer"},
+    "ns": {"maxLength":256,"pattern":"^(?:(?:(?:[A-Za-z0-9_][A-Za-z0-9._\\-]*)/){0,7}(?:[A-Za-z0-9_][A-Za-z0-9._\\-]*))?$","patternSource":"/^(?:(?:(?:[A-Za-z0-9_][A-Za-z0-9._\\-]*)/){0,7}(?:[A-Za-z0-9_][A-Za-z0-9._\\-]*))?$/","type":"string"},
+    "schedule": {"required":true,"type":"string"},
+    "store": {"maxLength":32,"minLength":3,"pattern":"^(?:[A-Za-z0-9_][A-Za-z0-9._\\-]*)$","patternSource":"/^(?:[A-Za-z0-9_][A-Za-z0-9._\\-]*)$/","required":true,"type":"string"},
+  },
+  "pbs:POST /config/sync": {
+    "active-encryption-key": {"maxLength":32,"minLength":3,"pattern":"^(?:[A-Za-z0-9_][A-Za-z0-9._\\-]*)$","patternSource":"/^(?:[A-Za-z0-9_][A-Za-z0-9._\\-]*)$/","type":"string"},
+    "burst-in": {"maxLength":64,"minLength":1,"type":"string"},
+    "burst-out": {"maxLength":64,"minLength":1,"type":"string"},
+    "comment": {"maxLength":128,"pattern":"^[^\\x00-\\x1f\\x7f]*$","patternSource":"/^[[:^cntrl:]]*$/","type":"string"},
+    "id": {"maxLength":32,"minLength":3,"pattern":"^(?:[A-Za-z0-9_][A-Za-z0-9._\\-]*)$","patternSource":"/^(?:[A-Za-z0-9_][A-Za-z0-9._\\-]*)$/","required":true,"type":"string"},
+    "max-depth": {"maximum":7,"minimum":0,"type":"integer"},
+    "ns": {"maxLength":256,"pattern":"^(?:(?:(?:[A-Za-z0-9_][A-Za-z0-9._\\-]*)/){0,7}(?:[A-Za-z0-9_][A-Za-z0-9._\\-]*))?$","patternSource":"/^(?:(?:(?:[A-Za-z0-9_][A-Za-z0-9._\\-]*)/){0,7}(?:[A-Za-z0-9_][A-Za-z0-9._\\-]*))?$/","type":"string"},
+    "owner": {"maxLength":64,"minLength":3,"pattern":"^(?:(?:[^\\s:/\\x00-\\x1f\\x7f]+)@(?:[A-Za-z0-9_][A-Za-z0-9._\\-]*)|(?:[^\\s:/\\x00-\\x1f\\x7f]+)@(?:[A-Za-z0-9_][A-Za-z0-9._\\-]*)!(?:[A-Za-z0-9_][A-Za-z0-9._\\-]*))$","patternSource":"/^(?:(?:[^\\s:/[:cntrl:]]+)@(?:[A-Za-z0-9_][A-Za-z0-9._\\-]*)|(?:[^\\s:/[:cntrl:]]+)@(?:[A-Za-z0-9_][A-Za-z0-9._\\-]*)!(?:[A-Za-z0-9_][A-Za-z0-9._\\-]*))$/","type":"string"},
+    "rate-in": {"maxLength":64,"minLength":1,"type":"string"},
+    "rate-out": {"maxLength":64,"minLength":1,"type":"string"},
+    "remote": {"maxLength":32,"minLength":3,"pattern":"^(?:[A-Za-z0-9_][A-Za-z0-9._\\-]*)$","patternSource":"/^(?:[A-Za-z0-9_][A-Za-z0-9._\\-]*)$/","type":"string"},
+    "remote-ns": {"maxLength":256,"pattern":"^(?:(?:(?:[A-Za-z0-9_][A-Za-z0-9._\\-]*)/){0,7}(?:[A-Za-z0-9_][A-Za-z0-9._\\-]*))?$","patternSource":"/^(?:(?:(?:[A-Za-z0-9_][A-Za-z0-9._\\-]*)/){0,7}(?:[A-Za-z0-9_][A-Za-z0-9._\\-]*))?$/","type":"string"},
+    "remote-store": {"maxLength":32,"minLength":3,"pattern":"^(?:[A-Za-z0-9_][A-Za-z0-9._\\-]*)$","patternSource":"/^(?:[A-Za-z0-9_][A-Za-z0-9._\\-]*)$/","required":true,"type":"string"},
+    "store": {"maxLength":32,"minLength":3,"pattern":"^(?:[A-Za-z0-9_][A-Za-z0-9._\\-]*)$","patternSource":"/^(?:[A-Za-z0-9_][A-Za-z0-9._\\-]*)$/","required":true,"type":"string"},
+    "sync-direction": {"default":"pull","enum":["pull","push"],"type":"string"},
+    "transfer-last": {"minimum":1,"type":"integer"},
+    "worker-threads": {"default":"1","maximum":32,"minimum":1,"type":"integer"},
+  },
+  "pbs:POST /config/verify": {
+    "comment": {"maxLength":128,"pattern":"^[^\\x00-\\x1f\\x7f]*$","patternSource":"/^[[:^cntrl:]]*$/","type":"string"},
+    "id": {"maxLength":32,"minLength":3,"pattern":"^(?:[A-Za-z0-9_][A-Za-z0-9._\\-]*)$","patternSource":"/^(?:[A-Za-z0-9_][A-Za-z0-9._\\-]*)$/","required":true,"type":"string"},
+    "max-depth": {"default":"7","maximum":7,"minimum":0,"type":"integer"},
+    "ns": {"maxLength":256,"pattern":"^(?:(?:(?:[A-Za-z0-9_][A-Za-z0-9._\\-]*)/){0,7}(?:[A-Za-z0-9_][A-Za-z0-9._\\-]*))?$","patternSource":"/^(?:(?:(?:[A-Za-z0-9_][A-Za-z0-9._\\-]*)/){0,7}(?:[A-Za-z0-9_][A-Za-z0-9._\\-]*))?$/","type":"string"},
+    "outdated-after": {"minimum":0,"type":"integer"},
+    "read-threads": {"default":"1","maximum":32,"minimum":1,"type":"integer"},
+    "store": {"maxLength":32,"minLength":3,"pattern":"^(?:[A-Za-z0-9_][A-Za-z0-9._\\-]*)$","patternSource":"/^(?:[A-Za-z0-9_][A-Za-z0-9._\\-]*)$/","required":true,"type":"string"},
+    "verify-threads": {"default":"4","maximum":32,"minimum":1,"type":"integer"},
+  },
+  "pbs:PUT /config/datastore/{name}": {
+    "comment": {"maxLength":128,"pattern":"^[^\\x00-\\x1f\\x7f]*$","patternSource":"/^[[:^cntrl:]]*$/","type":"string"},
+    "digest": {"pattern":"^[a-f0-9]{64}$","patternSource":"/^[a-f0-9]{64}$/","type":"string"},
+    "keep-daily": {"minimum":1,"type":"integer"},
+    "keep-hourly": {"minimum":1,"type":"integer"},
+    "keep-last": {"minimum":1,"type":"integer"},
+    "keep-monthly": {"minimum":1,"type":"integer"},
+    "keep-weekly": {"minimum":1,"type":"integer"},
+    "keep-yearly": {"minimum":1,"type":"integer"},
+    "notification-mode": {"default":"notification-system","enum":["legacy-sendmail","notification-system"],"type":"string"},
+    "notify-user": {"maxLength":64,"minLength":3,"pattern":"^(?:[^\\s:/\\x00-\\x1f\\x7f]+)@(?:[A-Za-z0-9_][A-Za-z0-9._\\-]*)$","patternSource":"/^(?:[^\\s:/[:cntrl:]]+)@(?:[A-Za-z0-9_][A-Za-z0-9._\\-]*)$/","type":"string"},
+  },
+  "pbs:PUT /config/notifications/matchers/{name}": {
+    "comment": {"maxLength":128,"pattern":"^[^\\x00-\\x1f\\x7f]*$","patternSource":"/^[[:^cntrl:]]*$/","type":"string"},
+    "digest": {"pattern":"^[a-f0-9]{64}$","patternSource":"/^[a-f0-9]{64}$/","type":"string"},
+    "mode": {"default":"all","enum":["all","any"],"type":"string"},
+  },
+  "pbs:PUT /config/prune/{id}": {
+    "comment": {"maxLength":128,"pattern":"^[^\\x00-\\x1f\\x7f]*$","patternSource":"/^[[:^cntrl:]]*$/","type":"string"},
+    "digest": {"pattern":"^[a-f0-9]{64}$","patternSource":"/^[a-f0-9]{64}$/","type":"string"},
+    "keep-daily": {"minimum":1,"type":"integer"},
+    "keep-hourly": {"minimum":1,"type":"integer"},
+    "keep-last": {"minimum":1,"type":"integer"},
+    "keep-monthly": {"minimum":1,"type":"integer"},
+    "keep-weekly": {"minimum":1,"type":"integer"},
+    "keep-yearly": {"minimum":1,"type":"integer"},
+    "max-depth": {"maximum":7,"minimum":0,"type":"integer"},
+    "ns": {"maxLength":256,"pattern":"^(?:(?:(?:[A-Za-z0-9_][A-Za-z0-9._\\-]*)/){0,7}(?:[A-Za-z0-9_][A-Za-z0-9._\\-]*))?$","patternSource":"/^(?:(?:(?:[A-Za-z0-9_][A-Za-z0-9._\\-]*)/){0,7}(?:[A-Za-z0-9_][A-Za-z0-9._\\-]*))?$/","type":"string"},
+    "store": {"maxLength":32,"minLength":3,"pattern":"^(?:[A-Za-z0-9_][A-Za-z0-9._\\-]*)$","patternSource":"/^(?:[A-Za-z0-9_][A-Za-z0-9._\\-]*)$/","type":"string"},
+  },
+  "pbs:PUT /config/sync/{id}": {
+    "active-encryption-key": {"maxLength":32,"minLength":3,"pattern":"^(?:[A-Za-z0-9_][A-Za-z0-9._\\-]*)$","patternSource":"/^(?:[A-Za-z0-9_][A-Za-z0-9._\\-]*)$/","type":"string"},
+    "burst-in": {"maxLength":64,"minLength":1,"type":"string"},
+    "burst-out": {"maxLength":64,"minLength":1,"type":"string"},
+    "comment": {"maxLength":128,"pattern":"^[^\\x00-\\x1f\\x7f]*$","patternSource":"/^[[:^cntrl:]]*$/","type":"string"},
+    "digest": {"pattern":"^[a-f0-9]{64}$","patternSource":"/^[a-f0-9]{64}$/","type":"string"},
+    "max-depth": {"maximum":7,"minimum":0,"type":"integer"},
+    "ns": {"maxLength":256,"pattern":"^(?:(?:(?:[A-Za-z0-9_][A-Za-z0-9._\\-]*)/){0,7}(?:[A-Za-z0-9_][A-Za-z0-9._\\-]*))?$","patternSource":"/^(?:(?:(?:[A-Za-z0-9_][A-Za-z0-9._\\-]*)/){0,7}(?:[A-Za-z0-9_][A-Za-z0-9._\\-]*))?$/","type":"string"},
+    "owner": {"maxLength":64,"minLength":3,"pattern":"^(?:(?:[^\\s:/\\x00-\\x1f\\x7f]+)@(?:[A-Za-z0-9_][A-Za-z0-9._\\-]*)|(?:[^\\s:/\\x00-\\x1f\\x7f]+)@(?:[A-Za-z0-9_][A-Za-z0-9._\\-]*)!(?:[A-Za-z0-9_][A-Za-z0-9._\\-]*))$","patternSource":"/^(?:(?:[^\\s:/[:cntrl:]]+)@(?:[A-Za-z0-9_][A-Za-z0-9._\\-]*)|(?:[^\\s:/[:cntrl:]]+)@(?:[A-Za-z0-9_][A-Za-z0-9._\\-]*)!(?:[A-Za-z0-9_][A-Za-z0-9._\\-]*))$/","type":"string"},
+    "rate-in": {"maxLength":64,"minLength":1,"type":"string"},
+    "rate-out": {"maxLength":64,"minLength":1,"type":"string"},
+    "remote": {"maxLength":32,"minLength":3,"pattern":"^(?:[A-Za-z0-9_][A-Za-z0-9._\\-]*)$","patternSource":"/^(?:[A-Za-z0-9_][A-Za-z0-9._\\-]*)$/","type":"string"},
+    "remote-ns": {"maxLength":256,"pattern":"^(?:(?:(?:[A-Za-z0-9_][A-Za-z0-9._\\-]*)/){0,7}(?:[A-Za-z0-9_][A-Za-z0-9._\\-]*))?$","patternSource":"/^(?:(?:(?:[A-Za-z0-9_][A-Za-z0-9._\\-]*)/){0,7}(?:[A-Za-z0-9_][A-Za-z0-9._\\-]*))?$/","type":"string"},
+    "remote-store": {"maxLength":32,"minLength":3,"pattern":"^(?:[A-Za-z0-9_][A-Za-z0-9._\\-]*)$","patternSource":"/^(?:[A-Za-z0-9_][A-Za-z0-9._\\-]*)$/","type":"string"},
+    "store": {"maxLength":32,"minLength":3,"pattern":"^(?:[A-Za-z0-9_][A-Za-z0-9._\\-]*)$","patternSource":"/^(?:[A-Za-z0-9_][A-Za-z0-9._\\-]*)$/","type":"string"},
+    "sync-direction": {"default":"pull","enum":["pull","push"],"type":"string"},
+    "transfer-last": {"minimum":1,"type":"integer"},
+    "worker-threads": {"default":"1","maximum":32,"minimum":1,"type":"integer"},
+  },
+  "pbs:PUT /config/verify/{id}": {
+    "comment": {"maxLength":128,"pattern":"^[^\\x00-\\x1f\\x7f]*$","patternSource":"/^[[:^cntrl:]]*$/","type":"string"},
+    "digest": {"pattern":"^[a-f0-9]{64}$","patternSource":"/^[a-f0-9]{64}$/","type":"string"},
+    "max-depth": {"default":"7","maximum":7,"minimum":0,"type":"integer"},
+    "ns": {"maxLength":256,"pattern":"^(?:(?:(?:[A-Za-z0-9_][A-Za-z0-9._\\-]*)/){0,7}(?:[A-Za-z0-9_][A-Za-z0-9._\\-]*))?$","patternSource":"/^(?:(?:(?:[A-Za-z0-9_][A-Za-z0-9._\\-]*)/){0,7}(?:[A-Za-z0-9_][A-Za-z0-9._\\-]*))?$/","type":"string"},
+    "outdated-after": {"minimum":0,"type":"integer"},
+    "read-threads": {"default":"1","maximum":32,"minimum":1,"type":"integer"},
+    "store": {"maxLength":32,"minLength":3,"pattern":"^(?:[A-Za-z0-9_][A-Za-z0-9._\\-]*)$","patternSource":"/^(?:[A-Za-z0-9_][A-Za-z0-9._\\-]*)$/","type":"string"},
+    "verify-threads": {"default":"4","maximum":32,"minimum":1,"type":"integer"},
+  },
+};

package/src/proxmox/generated/constraints/pve-access.ts

@@ -0,0 +1,57 @@
+/**
+ * Generated pve-manager parameter constraints for `/access` — DO NOT EDIT BY HAND.
+ *
+ * Run: bun codegen/constraints.ts
+ * Manifest entry: `pve-apidoc` — pve-manager 9.2.11/f6997e698c7933ea
+ *   sha256 9def8f13611184ee, read on a PVE cluster node from
+ *   /usr/share/pve-docs/api-viewer/apidoc.js
+ *
+ * 27 of this product's 258 POST/PUT endpoints are tabled across all areas: the ones
+ * this package writes to, named in its own source. Every other vendor write endpoint is UNTABLED
+ * and therefore unchecked at plan time.
+ *
+ * ⚠️ A `patternSource` with no `pattern` beside it is a rule that could NOT be carried into a
+ *   JavaScript RegExp faithfully (codegen/pattern.ts). It is recorded and NOT enforced.
+ */
+import type { EndpointConstraints } from '../../constraints.ts';
+
+export const PVE_ACCESS_CONSTRAINTS: Readonly<Record<string, EndpointConstraints>> = {
+  "pve:POST /access/groups": {
+    "groupid": {"format":"pve-groupid","required":true,"type":"string"},
+  },
+  "pve:POST /access/roles": {
+    "privs": {"format":"pve-priv-list","type":"string"},
+    "roleid": {"format":"pve-roleid","required":true,"type":"string"},
+  },
+  "pve:POST /access/users": {
+    "comment": {"maxLength":2048,"type":"string"},
+    "email": {"format":"email-opt","maxLength":254,"type":"string"},
+    "expire": {"minimum":0,"type":"integer"},
+    "firstname": {"maxLength":1024,"type":"string"},
+    "groups": {"format":"pve-groupid-list","type":"string"},
+    "keys": {"pattern":"[0-9a-zA-Z!=]{0,4096}","patternSource":"[0-9a-zA-Z!=]{0,4096}","type":"string"},
+    "lastname": {"maxLength":1024,"type":"string"},
+    "password": {"maxLength":64,"minLength":8,"type":"string"},
+    "userid": {"format":"pve-userid","maxLength":64,"required":true,"type":"string"},
+  },
+  "pve:PUT /access/acl": {
+    "groups": {"format":"pve-groupid-list","type":"string"},
+    "path": {"required":true,"type":"string"},
+    "roles": {"format":"pve-roleid-list","required":true,"type":"string"},
+    "tokens": {"format":"pve-tokenid-list","type":"string"},
+    "users": {"format":"pve-userid-list","type":"string"},
+  },
+  "pve:PUT /access/groups/{groupid}": {},
+  "pve:PUT /access/roles/{roleid}": {
+    "privs": {"format":"pve-priv-list","type":"string"},
+  },
+  "pve:PUT /access/users/{userid}": {
+    "comment": {"maxLength":2048,"type":"string"},
+    "email": {"format":"email-opt","maxLength":254,"type":"string"},
+    "expire": {"minimum":0,"type":"integer"},
+    "firstname": {"maxLength":1024,"type":"string"},
+    "groups": {"format":"pve-groupid-list","type":"string"},
+    "keys": {"pattern":"[0-9a-zA-Z!=]{0,4096}","patternSource":"[0-9a-zA-Z!=]{0,4096}","type":"string"},
+    "lastname": {"maxLength":1024,"type":"string"},
+  },
+};

package/src/proxmox/generated/constraints/pve-cluster.ts

@@ -0,0 +1,174 @@
+/**
+ * Generated pve-manager parameter constraints for `/cluster` — DO NOT EDIT BY HAND.
+ *
+ * Run: bun codegen/constraints.ts
+ * Manifest entry: `pve-apidoc` — pve-manager 9.2.11/f6997e698c7933ea
+ *   sha256 9def8f13611184ee, read on a PVE cluster node from
+ *   /usr/share/pve-docs/api-viewer/apidoc.js
+ *
+ * 27 of this product's 258 POST/PUT endpoints are tabled across all areas: the ones
+ * this package writes to, named in its own source. Every other vendor write endpoint is UNTABLED
+ * and therefore unchecked at plan time.
+ *
+ * ⚠️ A `patternSource` with no `pattern` beside it is a rule that could NOT be carried into a
+ *   JavaScript RegExp faithfully (codegen/pattern.ts). It is recorded and NOT enforced.
+ */
+import type { EndpointConstraints } from '../../constraints.ts';
+
+export const PVE_CLUSTER_CONSTRAINTS: Readonly<Record<string, EndpointConstraints>> = {
+  "pve:POST /cluster/backup": {
+    "bwlimit": {"default":"0","minimum":0,"type":"integer"},
+    "comment": {"maxLength":512,"type":"string"},
+    "compress": {"default":"0","enum":["0","1","gzip","lzo","zstd"],"type":"string"},
+    "dow": {"default":"mon,tue,wed,thu,fri,sat,sun","format":"pve-day-of-week-list","type":"string"},
+    "exclude": {"format":"pve-vmid-list","type":"string"},
+    "fleecing": {"format":"backup-fleecing","type":"string"},
+    "id": {"format":"pve-configid","type":"string"},
+    "ionice": {"default":"7","maximum":8,"minimum":0,"type":"integer"},
+    "lockwait": {"default":"180","minimum":0,"type":"integer"},
+    "mailnotification": {"default":"always","enum":["always","failure"],"type":"string"},
+    "mailto": {"format":"email-or-username-list","type":"string"},
+    "mode": {"default":"snapshot","enum":["snapshot","suspend","stop"],"type":"string"},
+    "node": {"format":"pve-node","type":"string"},
+    "notes-template": {"maxLength":1024,"type":"string"},
+    "notification-mode": {"default":"auto","enum":["auto","legacy-sendmail","notification-system"],"type":"string"},
+    "pbs-change-detection-mode": {"enum":["legacy","data","metadata"],"type":"string"},
+    "performance": {"format":"backup-performance","type":"string"},
+    "prune-backups": {"default":"keep-all=1","format":"prune-backups","type":"string"},
+    "schedule": {"format":"pve-calendar-event","maxLength":128,"type":"string"},
+    "starttime": {"pattern":"\\d{1,2}:\\d{1,2}","patternSource":"\\d{1,2}:\\d{1,2}","type":"string"},
+    "stopwait": {"default":"10","minimum":0,"type":"integer"},
+    "storage": {"format":"pve-storage-id","type":"string"},
+    "vmid": {"format":"pve-vmid-list","type":"string"},
+  },
+  "pve:POST /cluster/firewall/aliases": {
+    "cidr": {"format":"IPorCIDR","required":true,"type":"string"},
+    "comment": {"format":"pve-fw-comment-spec","type":"string"},
+    "name": {"maxLength":64,"minLength":2,"pattern":"[A-Za-z][A-Za-z0-9\\-\\_]+","patternSource":"[A-Za-z][A-Za-z0-9\\-\\_]+","required":true,"type":"string"},
+  },
+  "pve:POST /cluster/ha/resources": {
+    "comment": {"maxLength":4096,"type":"string"},
+    "group": {"format":"pve-configid","type":"string"},
+    "max_relocate": {"default":"1","minimum":0,"type":"integer"},
+    "max_restart": {"default":"1","minimum":0,"type":"integer"},
+    "sid": {"format":"pve-ha-resource-or-vm-id","required":true,"type":"string"},
+    "state": {"default":"started","enum":["started","stopped","enabled","disabled","ignored"],"type":"string"},
+    "type": {"enum":["ct","vm"],"type":"string"},
+  },
+  "pve:POST /cluster/ha/rules": {},
+  "pve:POST /cluster/notifications/matchers": {
+    "mode": {"default":"all","enum":["all","any"],"type":"string"},
+    "name": {"format":"pve-configid","required":true,"type":"string"},
+  },
+  "pve:POST /cluster/replication": {
+    "comment": {"maxLength":4096,"type":"string"},
+    "id": {"format":"pve-replication-job-id","pattern":"[1-9][0-9]{2,8}-\\d{1,9}","patternSource":"[1-9][0-9]{2,8}-\\d{1,9}","required":true,"type":"string"},
+    "rate": {"minimum":1,"type":"number"},
+    "remove_job": {"enum":["local","full"],"type":"string"},
+    "schedule": {"default":"*/15","format":"pve-calendar-event","maxLength":128,"type":"string"},
+    "source": {"format":"pve-node","type":"string"},
+    "target": {"format":"pve-node","required":true,"type":"string"},
+    "type": {"enum":["local"],"required":true,"type":"string"},
+  },
+  "pve:POST /cluster/sdn/vnets": {
+    "alias": {"maxLength":256,"patternSource":"(?^i:[\\(\\)-_.\\w\\d\\s]{0,256})","type":"string"},
+    "tag": {"maximum":16777215,"minimum":1,"type":"integer"},
+    "type": {"enum":["vnet"],"type":"string"},
+    "vnet": {"maxLength":8,"minLength":2,"pattern":"[a-zA-Z][a-zA-Z0-9]*[a-zA-Z0-9]","patternSource":"[a-zA-Z][a-zA-Z0-9]*[a-zA-Z0-9]","required":true,"type":"string"},
+    "zone": {"required":true,"type":"string"},
+  },
+  "pve:POST /cluster/sdn/zones": {
+    "dhcp": {"enum":["dnsmasq"],"type":"string"},
+    "dnszone": {"format":"dns-name","type":"string"},
+    "exitnodes": {"format":"pve-node-list","type":"string"},
+    "exitnodes-primary": {"format":"pve-node","type":"string"},
+    "fabric": {"format":"pve-sdn-fabric-id","type":"string"},
+    "mac": {"format":"mac-addr","type":"string"},
+    "nodes": {"format":"pve-node-list","type":"string"},
+    "peers": {"format":"ip-list","type":"string"},
+    "rt-import": {"format":"pve-sdn-bgp-rt-list","type":"string"},
+    "tag": {"minimum":0,"type":"integer"},
+    "type": {"enum":["evpn","faucet","qinq","simple","vlan","vxlan"],"format":"pve-configid","required":true,"type":"string"},
+    "vlan-protocol": {"default":"802.1q","enum":["802.1q","802.1ad"],"type":"string"},
+    "vrf-vxlan": {"maximum":16777215,"minimum":1,"type":"integer"},
+    "vxlan-port": {"default":"4789","maximum":65536,"minimum":1,"type":"integer"},
+    "zone": {"maxLength":8,"minLength":2,"pattern":"[a-zA-Z][a-zA-Z0-9]*[a-zA-Z0-9]","patternSource":"[a-zA-Z][a-zA-Z0-9]*[a-zA-Z0-9]","required":true,"type":"string"},
+  },
+  "pve:PUT /cluster/backup/{id}": {
+    "bwlimit": {"default":"0","minimum":0,"type":"integer"},
+    "comment": {"maxLength":512,"type":"string"},
+    "compress": {"default":"0","enum":["0","1","gzip","lzo","zstd"],"type":"string"},
+    "delete": {"format":"pve-configid-list","type":"string"},
+    "dow": {"format":"pve-day-of-week-list","type":"string"},
+    "exclude": {"format":"pve-vmid-list","type":"string"},
+    "fleecing": {"format":"backup-fleecing","type":"string"},
+    "ionice": {"default":"7","maximum":8,"minimum":0,"type":"integer"},
+    "lockwait": {"default":"180","minimum":0,"type":"integer"},
+    "mailnotification": {"default":"always","enum":["always","failure"],"type":"string"},
+    "mailto": {"format":"email-or-username-list","type":"string"},
+    "mode": {"default":"snapshot","enum":["snapshot","suspend","stop"],"type":"string"},
+    "node": {"format":"pve-node","type":"string"},
+    "notes-template": {"maxLength":1024,"type":"string"},
+    "notification-mode": {"default":"auto","enum":["auto","legacy-sendmail","notification-system"],"type":"string"},
+    "pbs-change-detection-mode": {"enum":["legacy","data","metadata"],"type":"string"},
+    "performance": {"format":"backup-performance","type":"string"},
+    "prune-backups": {"default":"keep-all=1","format":"prune-backups","type":"string"},
+    "schedule": {"format":"pve-calendar-event","maxLength":128,"type":"string"},
+    "starttime": {"pattern":"\\d{1,2}:\\d{1,2}","patternSource":"\\d{1,2}:\\d{1,2}","type":"string"},
+    "stopwait": {"default":"10","minimum":0,"type":"integer"},
+    "storage": {"format":"pve-storage-id","type":"string"},
+    "vmid": {"format":"pve-vmid-list","type":"string"},
+  },
+  "pve:PUT /cluster/firewall/aliases/{name}": {
+    "cidr": {"format":"IPorCIDR","required":true,"type":"string"},
+    "comment": {"format":"pve-fw-comment-spec","type":"string"},
+    "digest": {"maxLength":64,"type":"string"},
+    "rename": {"maxLength":64,"minLength":2,"pattern":"[A-Za-z][A-Za-z0-9\\-\\_]+","patternSource":"[A-Za-z][A-Za-z0-9\\-\\_]+","type":"string"},
+  },
+  "pve:PUT /cluster/ha/resources/{sid}": {
+    "comment": {"maxLength":4096,"type":"string"},
+    "delete": {"format":"pve-configid-list","maxLength":4096,"type":"string"},
+    "digest": {"maxLength":64,"type":"string"},
+    "group": {"format":"pve-configid","type":"string"},
+    "max_relocate": {"default":"1","minimum":0,"type":"integer"},
+    "max_restart": {"default":"1","minimum":0,"type":"integer"},
+    "state": {"default":"started","enum":["started","stopped","enabled","disabled","ignored"],"type":"string"},
+  },
+  "pve:PUT /cluster/ha/rules/{rule}": {},
+  "pve:PUT /cluster/notifications/matchers/{name}": {
+    "digest": {"maxLength":64,"type":"string"},
+    "mode": {"default":"all","enum":["all","any"],"type":"string"},
+  },
+  "pve:PUT /cluster/replication/{id}": {
+    "comment": {"maxLength":4096,"type":"string"},
+    "delete": {"format":"pve-configid-list","maxLength":4096,"type":"string"},
+    "digest": {"maxLength":64,"type":"string"},
+    "rate": {"minimum":1,"type":"number"},
+    "remove_job": {"enum":["local","full"],"type":"string"},
+    "schedule": {"default":"*/15","format":"pve-calendar-event","maxLength":128,"type":"string"},
+    "source": {"format":"pve-node","type":"string"},
+  },
+  "pve:PUT /cluster/sdn/vnets/{vnet}": {
+    "alias": {"maxLength":256,"patternSource":"(?^i:[\\(\\)-_.\\w\\d\\s]{0,256})","type":"string"},
+    "delete": {"format":"pve-configid-list","maxLength":4096,"type":"string"},
+    "digest": {"maxLength":64,"type":"string"},
+    "tag": {"maximum":16777215,"minimum":1,"type":"integer"},
+  },
+  "pve:PUT /cluster/sdn/zones/{zone}": {
+    "delete": {"format":"pve-configid-list","maxLength":4096,"type":"string"},
+    "dhcp": {"enum":["dnsmasq"],"type":"string"},
+    "digest": {"maxLength":64,"type":"string"},
+    "dnszone": {"format":"dns-name","type":"string"},
+    "exitnodes": {"format":"pve-node-list","type":"string"},
+    "exitnodes-primary": {"format":"pve-node","type":"string"},
+    "fabric": {"format":"pve-sdn-fabric-id","type":"string"},
+    "mac": {"format":"mac-addr","type":"string"},
+    "nodes": {"format":"pve-node-list","type":"string"},
+    "peers": {"format":"ip-list","type":"string"},
+    "rt-import": {"format":"pve-sdn-bgp-rt-list","type":"string"},
+    "tag": {"minimum":0,"type":"integer"},
+    "vlan-protocol": {"default":"802.1q","enum":["802.1q","802.1ad"],"type":"string"},
+    "vrf-vxlan": {"maximum":16777215,"minimum":1,"type":"integer"},
+    "vxlan-port": {"default":"4789","maximum":65536,"minimum":1,"type":"integer"},
+  },
+};

package/src/proxmox/generated/constraints/pve-pools.ts

@@ -0,0 +1,26 @@
+/**
+ * Generated pve-manager parameter constraints for `/pools` — DO NOT EDIT BY HAND.
+ *
+ * Run: bun codegen/constraints.ts
+ * Manifest entry: `pve-apidoc` — pve-manager 9.2.11/f6997e698c7933ea
+ *   sha256 9def8f13611184ee, read on a PVE cluster node from
+ *   /usr/share/pve-docs/api-viewer/apidoc.js
+ *
+ * 27 of this product's 258 POST/PUT endpoints are tabled across all areas: the ones
+ * this package writes to, named in its own source. Every other vendor write endpoint is UNTABLED
+ * and therefore unchecked at plan time.
+ *
+ * ⚠️ A `patternSource` with no `pattern` beside it is a rule that could NOT be carried into a
+ *   JavaScript RegExp faithfully (codegen/pattern.ts). It is recorded and NOT enforced.
+ */
+import type { EndpointConstraints } from '../../constraints.ts';
+
+export const PVE_POOLS_CONSTRAINTS: Readonly<Record<string, EndpointConstraints>> = {
+  "pve:POST /pools": {
+    "poolid": {"format":"pve-poolid","required":true,"type":"string"},
+  },
+  "pve:PUT /pools/{poolid}": {
+    "storage": {"format":"pve-storage-id-list","type":"string"},
+    "vms": {"format":"pve-vmid-list","type":"string"},
+  },
+};

package/src/proxmox/generated/constraints/pve-storage.ts

@@ -0,0 +1,75 @@
+/**
+ * Generated pve-manager parameter constraints for `/storage` — DO NOT EDIT BY HAND.
+ *
+ * Run: bun codegen/constraints.ts
+ * Manifest entry: `pve-apidoc` — pve-manager 9.2.11/f6997e698c7933ea
+ *   sha256 9def8f13611184ee, read on a PVE cluster node from
+ *   /usr/share/pve-docs/api-viewer/apidoc.js
+ *
+ * 27 of this product's 258 POST/PUT endpoints are tabled across all areas: the ones
+ * this package writes to, named in its own source. Every other vendor write endpoint is UNTABLED
+ * and therefore unchecked at plan time.
+ *
+ * ⚠️ A `patternSource` with no `pattern` beside it is a rule that could NOT be carried into a
+ *   JavaScript RegExp faithfully (codegen/pattern.ts). It is recorded and NOT enforced.
+ */
+import type { EndpointConstraints } from '../../constraints.ts';
+
+export const PVE_STORAGE_CONSTRAINTS: Readonly<Record<string, EndpointConstraints>> = {
+  "pve:POST /storage": {
+    "base": {"format":"pve-volume-id","type":"string"},
+    "blocksize": {"format":"pve-storage-zfs-blocksize","type":"string"},
+    "content": {"format":"pve-storage-content-list","type":"string"},
+    "content-dirs": {"format":"pve-dir-override-list","type":"string"},
+    "domain": {"maxLength":256,"type":"string"},
+    "export": {"format":"pve-storage-path","type":"string"},
+    "fingerprint": {"pattern":"([A-Fa-f0-9]{2}:){31}[A-Fa-f0-9]{2}","patternSource":"([A-Fa-f0-9]{2}:){31}[A-Fa-f0-9]{2}","type":"string"},
+    "format": {"enum":["raw","qcow2","subvol","vmdk"],"type":"string"},
+    "fs-name": {"format":"pve-configid","type":"string"},
+    "max-protected-backups": {"default":"Unlimited for users with Datastore.Allocate privilege, 5 for other users","minimum":-1,"type":"integer"},
+    "monhost": {"format":"pve-storage-portal-dns-list","type":"string"},
+    "mountpoint": {"format":"pve-storage-path","type":"string"},
+    "nodes": {"format":"pve-node-list","type":"string"},
+    "options": {"format":"pve-storage-options","type":"string"},
+    "password": {"maxLength":256,"type":"string"},
+    "path": {"format":"pve-storage-path","type":"string"},
+    "port": {"maximum":65535,"minimum":1,"type":"integer"},
+    "portal": {"format":"pve-storage-portal-dns","type":"string"},
+    "preallocation": {"default":"metadata","enum":["off","metadata","falloc","full"],"type":"string"},
+    "prune-backups": {"format":"prune-backups","type":"string"},
+    "saferemove-stepsize": {"default":"32","enum":["1","2","4","8","16","32"],"type":"integer"},
+    "server": {"format":"pve-storage-server","type":"string"},
+    "smbversion": {"default":"default","enum":["default","2.0","2.1","3","3.0","3.11"],"type":"string"},
+    "storage": {"format":"pve-storage-id","required":true,"type":"string"},
+    "subdir": {"format":"pve-storage-path","type":"string"},
+    "thinpool": {"format":"pve-storage-vgname","type":"string"},
+    "type": {"enum":["btrfs","cephfs","cifs","dir","esxi","iscsi","iscsidirect","lvm","lvmthin","nfs","pbs","rbd","zfs","zfspool"],"required":true,"type":"string"},
+    "vgname": {"format":"pve-storage-vgname","type":"string"},
+    "zfs-base-path": {"format":"pve-storage-path","type":"string"},
+  },
+  "pve:PUT /storage/{storage}": {
+    "blocksize": {"format":"pve-storage-zfs-blocksize","type":"string"},
+    "content": {"format":"pve-storage-content-list","type":"string"},
+    "content-dirs": {"format":"pve-dir-override-list","type":"string"},
+    "delete": {"format":"pve-configid-list","maxLength":4096,"type":"string"},
+    "digest": {"maxLength":64,"type":"string"},
+    "domain": {"maxLength":256,"type":"string"},
+    "fingerprint": {"pattern":"([A-Fa-f0-9]{2}:){31}[A-Fa-f0-9]{2}","patternSource":"([A-Fa-f0-9]{2}:){31}[A-Fa-f0-9]{2}","type":"string"},
+    "format": {"enum":["raw","qcow2","subvol","vmdk"],"type":"string"},
+    "fs-name": {"format":"pve-configid","type":"string"},
+    "max-protected-backups": {"default":"Unlimited for users with Datastore.Allocate privilege, 5 for other users","minimum":-1,"type":"integer"},
+    "monhost": {"format":"pve-storage-portal-dns-list","type":"string"},
+    "mountpoint": {"format":"pve-storage-path","type":"string"},
+    "nodes": {"format":"pve-node-list","type":"string"},
+    "options": {"format":"pve-storage-options","type":"string"},
+    "password": {"maxLength":256,"type":"string"},
+    "port": {"maximum":65535,"minimum":1,"type":"integer"},
+    "preallocation": {"default":"metadata","enum":["off","metadata","falloc","full"],"type":"string"},
+    "prune-backups": {"format":"prune-backups","type":"string"},
+    "saferemove-stepsize": {"default":"32","enum":["1","2","4","8","16","32"],"type":"integer"},
+    "server": {"format":"pve-storage-server","type":"string"},
+    "smbversion": {"default":"default","enum":["default","2.0","2.1","3","3.0","3.11"],"type":"string"},
+    "subdir": {"format":"pve-storage-path","type":"string"},
+    "zfs-base-path": {"format":"pve-storage-path","type":"string"},
+  },
+};

package/src/proxmox/group.ts

@@ -176,6 +176,8 @@ const handlers = pveHandlers<GroupProps, GroupAttributes>({
    *   `resource.ts` states once in the ⛔ on adoption: a field deliberately out of `matches` is a
    *   field this resource does not manage.
    */
+  /** The vendor rules these forms are checked against at plan time — resource-spec.ts. */
+  endpoint: { create: 'pve:POST /access/groups', update: 'pve:PUT /access/groups/{groupid}' },
   matches: (attributes, props) => attributes.comment === storedComment(props.comment),
   path: (props) => `access/groups/${props.groupid}`,
   /**

package/src/proxmox/ha-resource.ts

@@ -137,6 +137,11 @@ const handlers = pveHandlers<HaResourceProps, HaResourceAttributes>({
    * ⚠️ `sid` AND `type` ARE NOT COMPARED EITHER: sid is the path, so a change there is a different
    *   object, and type is create-only — it is read back from the prefix, never edited.
    */
+  /** The vendor rules these forms are checked against at plan time — resource-spec.ts. */
+  endpoint: {
+    create: 'pve:POST /cluster/ha/resources',
+    update: 'pve:PUT /cluster/ha/resources/{sid}',
+  },
   matches: (attributes, props) =>
     attributes.state === (props.state ?? 'started') &&
     attributes.comment === (props.comment ?? '') &&

package/src/proxmox/ha-rule.ts

@@ -206,6 +206,8 @@ const handlers = pveHandlers<HaRuleProps, HaRuleAttributes>({
    * ⚠️ THE COMMENT IS COMPARED AS PVE WILL STORE IT, not as it was declared — `commentText` and
    *   its ⛔ explain why a `%XX` in a comment does not survive the round trip.
    */
+  /** The vendor rules these forms are checked against at plan time — resource-spec.ts. */
+  endpoint: { create: 'pve:POST /cluster/ha/rules', update: 'pve:PUT /cluster/ha/rules/{rule}' },
   matches: (attributes, props) =>
     attributes.resources === csv(props.resources) &&
     attributes.affinity === props.affinity &&

package/src/proxmox/index.ts

@@ -18,6 +18,9 @@
  * ★ THE NOTIFICATION FAMILIES JOINED 2026-09-22: PBS targets and matchers, the PVE matcher, the
  *   `FromEnv` shape their write-only values take, and the Alertmanager body template
  *   (docs/pbs-notifications.md; the template alone: docs/pbs-alertmanager-body.md).
+ * ★ THE VENDOR CONSTRAINT READER JOINED 2026-09-22 (codegen/README.md). `constraintsFor` and
+ *   `violations` are exported so a CONSUMING stack can assert its own declarations offline — the
+ *   `deploy:pbs` that failed on a 128-character comment had no way to ask that question.
  * ★ Anything else unlisted is still reachable by path if you genuinely need
  *   it — that is a deliberate, visible act rather than an accident of barrelling.
  */
@@ -30,6 +33,13 @@ export { ProxmoxCephFlagProvider } from './ceph-flag.ts';
 export { ProxmoxCephFsProvider } from './ceph-fs.ts';
 export { ProxmoxCephOsdProvider } from './ceph-osd.ts';
 export { ProxmoxCephPool, ProxmoxCephPoolProvider } from './ceph-pool.ts';
+export { constraintsFor, formViolations } from './constraint-guard.ts';
+export {
+  type EndpointConstraints,
+  type EndpointKey,
+  type ParamConstraint,
+  violations,
+} from './constraints.ts';
 export { ProxmoxFirewallAliasProvider } from './firewall-alias.ts';
 export { ProxmoxGroup, ProxmoxGroupProvider } from './group.ts';
 export { ProxmoxHaResource, ProxmoxHaResourceProvider } from './ha-resource.ts';
@@ -63,7 +73,9 @@ export { ProxmoxPool, ProxmoxPoolProvider } from './pool.ts';
 export {
   PROVISION_DEFAULTS,
   PROVISION_PRIVILEGES,
+  type CoreProvisionNames,
   type ProvisionBaseline,
+  type ProvisionComments,
   type ProvisionLane,
   type ProvisionNames,
   type ResolvedProvisionNames,