@homeflare/alchemy 0.15.0 → 0.19.1

package/src/proxmox/generated/pve/access-roles.ts

@@ -0,0 +1,168 @@
+/**
+ * Generated pve-manager API types for `/access/roles` — DO NOT EDIT BY HAND.
+ *
+ * Run: bun codegen/types.ts    (`--check` compares without writing)
+ * Manifest entry: `pve-apidoc` — pve-manager 9.2.11/f6997e698c7933ea
+ *   sha256 9def8f13611184ee, read on a PVE cluster node from
+ *   /usr/share/pve-docs/api-viewer/apidoc.js
+ *
+ * ⚠️ A REQUEST PARAMETER IS TEXT ON THE WIRE. `client.ts` sends form encoding, so an integer is
+ *   `\`${number}\`` and a boolean is `'0' | '1'` — the spellings that reach the server. The
+ *   vendor's BOUNDS on those values are enforced separately, at plan time, from
+ *   pve/../constraints (codegen/README.md). A response is JSON and is not spelled that way.
+ */
+
+/** GET /access/roles — `data` payload after client unwrap. */
+export type AccessRolesGetReturn = readonly ({
+  privs?: string;
+  roleid: string;
+  special?: boolean | 0 | 1;
+} & Record<string, unknown>)[];
+
+/** POST /access/roles — form/query parameters (path segments omitted). */
+export type AccessRolesPostParams = { privs?: string; roleid: string };
+/** POST /access/roles — `data` payload after client unwrap. */
+export type AccessRolesPostReturn = null;
+
+/** GET /access/roles/{roleid} — `data` payload after client unwrap. */
+export type AccessRolesRoleidGetReturn = {
+  'Datastore.Allocate'?: boolean | 0 | 1;
+  'Datastore.AllocateSpace'?: boolean | 0 | 1;
+  'Datastore.AllocateTemplate'?: boolean | 0 | 1;
+  'Datastore.Audit'?: boolean | 0 | 1;
+  'Group.Allocate'?: boolean | 0 | 1;
+  'Mapping.Audit'?: boolean | 0 | 1;
+  'Mapping.Modify'?: boolean | 0 | 1;
+  'Mapping.Use'?: boolean | 0 | 1;
+  'Permissions.Modify'?: boolean | 0 | 1;
+  'Pool.Allocate'?: boolean | 0 | 1;
+  'Pool.Audit'?: boolean | 0 | 1;
+  'Realm.Allocate'?: boolean | 0 | 1;
+  'Realm.AllocateUser'?: boolean | 0 | 1;
+  'SDN.Allocate'?: boolean | 0 | 1;
+  'SDN.Audit'?: boolean | 0 | 1;
+  'SDN.Use'?: boolean | 0 | 1;
+  'Sys.AccessNetwork'?: boolean | 0 | 1;
+  'Sys.Audit'?: boolean | 0 | 1;
+  'Sys.Console'?: boolean | 0 | 1;
+  'Sys.Incoming'?: boolean | 0 | 1;
+  'Sys.Modify'?: boolean | 0 | 1;
+  'Sys.PowerMgmt'?: boolean | 0 | 1;
+  'Sys.Syslog'?: boolean | 0 | 1;
+  'User.Modify'?: boolean | 0 | 1;
+  'VM.Allocate'?: boolean | 0 | 1;
+  'VM.Audit'?: boolean | 0 | 1;
+  'VM.Backup'?: boolean | 0 | 1;
+  'VM.Clone'?: boolean | 0 | 1;
+  'VM.Config.CDROM'?: boolean | 0 | 1;
+  'VM.Config.CPU'?: boolean | 0 | 1;
+  'VM.Config.Cloudinit'?: boolean | 0 | 1;
+  'VM.Config.Disk'?: boolean | 0 | 1;
+  'VM.Config.HWType'?: boolean | 0 | 1;
+  'VM.Config.Memory'?: boolean | 0 | 1;
+  'VM.Config.Network'?: boolean | 0 | 1;
+  'VM.Config.Options'?: boolean | 0 | 1;
+  'VM.Console'?: boolean | 0 | 1;
+  'VM.GuestAgent.Audit'?: boolean | 0 | 1;
+  'VM.GuestAgent.FileRead'?: boolean | 0 | 1;
+  'VM.GuestAgent.FileSystemMgmt'?: boolean | 0 | 1;
+  'VM.GuestAgent.FileWrite'?: boolean | 0 | 1;
+  'VM.GuestAgent.Unrestricted'?: boolean | 0 | 1;
+  'VM.Migrate'?: boolean | 0 | 1;
+  'VM.PowerMgmt'?: boolean | 0 | 1;
+  'VM.Replicate'?: boolean | 0 | 1;
+  'VM.Snapshot'?: boolean | 0 | 1;
+  'VM.Snapshot.Rollback'?: boolean | 0 | 1;
+};
+
+/** PUT /access/roles/{roleid} — form/query parameters (path segments omitted). */
+export type AccessRolesRoleidPutParams = { append?: '0' | '1'; privs?: string };
+/** PUT /access/roles/{roleid} — `data` payload after client unwrap. */
+export type AccessRolesRoleidPutReturn = null;
+
+/** DELETE /access/roles/{roleid} — `data` payload after client unwrap. */
+export type AccessRolesRoleidDeleteReturn = null;
+
+/** GET /access/tfa — `data` payload after client unwrap. */
+export type AccessTfaGetReturn = readonly ({
+  entries: readonly ({
+    created: number;
+    description: string;
+    enable?: boolean | 0 | 1;
+    id: string;
+    type: 'totp' | 'u2f' | 'webauthn' | 'recovery' | 'yubico';
+  } & Record<string, unknown>)[];
+  'tfa-locked-until'?: number;
+  'totp-locked'?: boolean | 0 | 1;
+  userid: string;
+} & Record<string, unknown>)[];
+
+/** GET /access/tfa/{userid} — `data` payload after client unwrap. */
+export type AccessTfaUseridGetReturn = readonly ({
+  created: number;
+  description: string;
+  enable?: boolean | 0 | 1;
+  id: string;
+  type: 'totp' | 'u2f' | 'webauthn' | 'recovery' | 'yubico';
+} & Record<string, unknown>)[];
+
+/** POST /access/tfa/{userid} — form/query parameters (path segments omitted). */
+export type AccessTfaUseridPostParams = {
+  challenge?: string;
+  description?: string;
+  password?: string;
+  totp?: string;
+  type: 'totp' | 'u2f' | 'webauthn' | 'recovery' | 'yubico';
+  value?: string;
+};
+/** POST /access/tfa/{userid} — `data` payload after client unwrap. */
+export type AccessTfaUseridPostReturn = {
+  challenge?: string;
+  id: string;
+  recovery?: readonly string[];
+} & Record<string, unknown>;
+
+/** GET /access/tfa/{userid}/{id} — `data` payload after client unwrap. */
+export type AccessTfaUseridIdGetReturn = {
+  created: number;
+  description: string;
+  enable?: boolean | 0 | 1;
+  id: string;
+  type: 'totp' | 'u2f' | 'webauthn' | 'recovery' | 'yubico';
+} & Record<string, unknown>;
+
+/** PUT /access/tfa/{userid}/{id} — form/query parameters (path segments omitted). */
+export type AccessTfaUseridIdPutParams = {
+  description?: string;
+  enable?: '0' | '1';
+  password?: string;
+};
+/** PUT /access/tfa/{userid}/{id} — `data` payload after client unwrap. */
+export type AccessTfaUseridIdPutReturn = null;
+
+/** DELETE /access/tfa/{userid}/{id} — form/query parameters (path segments omitted). */
+export type AccessTfaUseridIdDeleteParams = { password?: string };
+/** DELETE /access/tfa/{userid}/{id} — `data` payload after client unwrap. */
+export type AccessTfaUseridIdDeleteReturn = null;
+
+/** GET /access/ticket — `data` payload after client unwrap. */
+export type AccessTicketGetReturn = null;
+
+/** POST /access/ticket — form/query parameters (path segments omitted). */
+export type AccessTicketPostParams = {
+  'new-format'?: '0' | '1';
+  otp?: string;
+  password: string;
+  path?: string;
+  privs?: string;
+  realm?: string;
+  'tfa-challenge'?: string;
+  username: string;
+};
+/** POST /access/ticket — `data` payload after client unwrap. */
+export type AccessTicketPostReturn = {
+  CSRFPreventionToken?: string;
+  clustername?: string;
+  ticket?: string;
+  username: string;
+} & Record<string, unknown>;

package/src/proxmox/generated/pve/access-users.ts

@@ -0,0 +1,155 @@
+/**
+ * Generated pve-manager API types for `/access/users` — DO NOT EDIT BY HAND.
+ *
+ * Run: bun codegen/types.ts    (`--check` compares without writing)
+ * Manifest entry: `pve-apidoc` — pve-manager 9.2.11/f6997e698c7933ea
+ *   sha256 9def8f13611184ee, read on a PVE cluster node from
+ *   /usr/share/pve-docs/api-viewer/apidoc.js
+ *
+ * ⚠️ A REQUEST PARAMETER IS TEXT ON THE WIRE. `client.ts` sends form encoding, so an integer is
+ *   `\`${number}\`` and a boolean is `'0' | '1'` — the spellings that reach the server. The
+ *   vendor's BOUNDS on those values are enforced separately, at plan time, from
+ *   pve/../constraints (codegen/README.md). A response is JSON and is not spelled that way.
+ */
+
+/** GET /access/users — form/query parameters (path segments omitted). */
+export type AccessUsersGetParams = { enabled?: '0' | '1'; full?: '0' | '1' };
+/** GET /access/users — `data` payload after client unwrap. */
+export type AccessUsersGetReturn = readonly ({
+  comment?: string;
+  email?: string;
+  enable?: boolean | 0 | 1;
+  expire?: number;
+  firstname?: string;
+  groups?: string;
+  keys?: string;
+  lastname?: string;
+  'realm-type'?: string;
+  'tfa-locked-until'?: number;
+  tokens?: readonly ({
+    comment?: string;
+    expire?: number;
+    privsep?: boolean | 0 | 1;
+    tokenid: string;
+  } & Record<string, unknown>)[];
+  'totp-locked'?: boolean | 0 | 1;
+  userid: string;
+} & Record<string, unknown>)[];
+
+/** POST /access/users — form/query parameters (path segments omitted). */
+export type AccessUsersPostParams = {
+  comment?: string;
+  email?: string;
+  enable?: '0' | '1';
+  expire?: `${number}`;
+  firstname?: string;
+  groups?: string;
+  keys?: string;
+  lastname?: string;
+  password?: string;
+  userid: string;
+};
+/** POST /access/users — `data` payload after client unwrap. */
+export type AccessUsersPostReturn = null;
+
+/** GET /access/users/{userid} — `data` payload after client unwrap. */
+export type AccessUsersUseridGetReturn = {
+  comment?: string;
+  email?: string;
+  enable?: boolean | 0 | 1;
+  expire?: number;
+  firstname?: string;
+  groups?: readonly string[];
+  keys?: string;
+  lastname?: string;
+  tokens?: unknown;
+};
+
+/** PUT /access/users/{userid} — form/query parameters (path segments omitted). */
+export type AccessUsersUseridPutParams = {
+  append?: '0' | '1';
+  comment?: string;
+  email?: string;
+  enable?: '0' | '1';
+  expire?: `${number}`;
+  firstname?: string;
+  groups?: string;
+  keys?: string;
+  lastname?: string;
+};
+/** PUT /access/users/{userid} — `data` payload after client unwrap. */
+export type AccessUsersUseridPutReturn = null;
+
+/** DELETE /access/users/{userid} — `data` payload after client unwrap. */
+export type AccessUsersUseridDeleteReturn = null;
+
+/** GET /access/users/{userid}/tfa — form/query parameters (path segments omitted). */
+export type AccessUsersUseridTfaGetParams = { multiple?: '0' | '1' };
+/** GET /access/users/{userid}/tfa — `data` payload after client unwrap. */
+export type AccessUsersUseridTfaGetReturn = {
+  realm?: 'oath' | 'yubico';
+  types?: readonly ('totp' | 'u2f' | 'yubico' | 'webauthn' | 'recovedry')[];
+  user?: 'oath' | 'u2f';
+};
+
+/** PUT /access/users/{userid}/unlock-tfa — `data` payload after client unwrap. */
+export type AccessUsersUseridUnlockTfaPutReturn = boolean | 0 | 1;
+
+/** GET /access/users/{userid}/token — `data` payload after client unwrap. */
+export type AccessUsersUseridTokenGetReturn = readonly ({
+  comment?: string;
+  expire?: number;
+  privsep?: boolean | 0 | 1;
+  tokenid: string;
+} & Record<string, unknown>)[];
+
+/** GET /access/users/{userid}/token/{tokenid} — `data` payload after client unwrap. */
+export type AccessUsersUseridTokenTokenidGetReturn = {
+  comment?: string;
+  expire?: number;
+  privsep?: boolean | 0 | 1;
+} & Record<string, unknown>;
+
+/** POST /access/users/{userid}/token/{tokenid} — form/query parameters (path segments omitted). */
+export type AccessUsersUseridTokenTokenidPostParams = {
+  comment?: string;
+  expire?: `${number}`;
+  privsep?: '0' | '1';
+};
+/** POST /access/users/{userid}/token/{tokenid} — `data` payload after client unwrap. */
+export type AccessUsersUseridTokenTokenidPostReturn = {
+  'full-tokenid': string;
+  info: { comment?: string; expire?: number; privsep?: boolean | 0 | 1 } & Record<string, unknown>;
+  value: string;
+};
+
+/** PUT /access/users/{userid}/token/{tokenid} — form/query parameters (path segments omitted). */
+export type AccessUsersUseridTokenTokenidPutParams = {
+  comment?: string;
+  delete?: string;
+  expire?: `${number}`;
+  privsep?: '0' | '1';
+  regenerate?: '0' | '1';
+};
+/** PUT /access/users/{userid}/token/{tokenid} — `data` payload after client unwrap. */
+export type AccessUsersUseridTokenTokenidPutReturn = {
+  comment?: string;
+  expire?: number;
+  'full-tokenid'?: string;
+  privsep?: boolean | 0 | 1;
+  value?: string;
+} & Record<string, unknown>;
+
+/** DELETE /access/users/{userid}/token/{tokenid} — `data` payload after client unwrap. */
+export type AccessUsersUseridTokenTokenidDeleteReturn = null;
+
+/** POST /access/vncticket — form/query parameters (path segments omitted). */
+export type AccessVncticketPostParams = {
+  authid: string;
+  path: string;
+  port?: `${number}`;
+  privs: string;
+  vncticket: string;
+};
+/** POST /access/vncticket — `data` payload after client unwrap. */
+export type AccessVncticketPostReturn = null;

package/src/proxmox/generated/pve/access.ts

@@ -0,0 +1,217 @@
+/**
+ * Generated pve-manager API types for `/access` — DO NOT EDIT BY HAND.
+ *
+ * Run: bun codegen/types.ts    (`--check` compares without writing)
+ * Manifest entry: `pve-apidoc` — pve-manager 9.2.11/f6997e698c7933ea
+ *   sha256 9def8f13611184ee, read on a PVE cluster node from
+ *   /usr/share/pve-docs/api-viewer/apidoc.js
+ *
+ * ⚠️ A REQUEST PARAMETER IS TEXT ON THE WIRE. `client.ts` sends form encoding, so an integer is
+ *   `\`${number}\`` and a boolean is `'0' | '1'` — the spellings that reach the server. The
+ *   vendor's BOUNDS on those values are enforced separately, at plan time, from
+ *   pve/../constraints (codegen/README.md). A response is JSON and is not spelled that way.
+ */
+
+/** GET /access — `data` payload after client unwrap. */
+export type AccessGetReturn = readonly ({ subdir: string } & Record<string, unknown>)[];
+
+/** GET /access/acl — `data` payload after client unwrap. */
+export type AccessAclGetReturn = readonly {
+  path: string;
+  propagate?: boolean | 0 | 1;
+  roleid: string;
+  type: 'user' | 'group' | 'token';
+  ugid: string;
+}[];
+
+/** PUT /access/acl — form/query parameters (path segments omitted). */
+export type AccessAclPutParams = {
+  delete?: '0' | '1';
+  groups?: string;
+  path: string;
+  propagate?: '0' | '1';
+  roles: string;
+  tokens?: string;
+  users?: string;
+};
+/** PUT /access/acl — `data` payload after client unwrap. */
+export type AccessAclPutReturn = null;
+
+/** GET /access/domains — `data` payload after client unwrap. */
+export type AccessDomainsGetReturn = readonly ({
+  comment?: string;
+  realm: string;
+  tfa?: 'yubico' | 'oath';
+  type: string;
+} & Record<string, unknown>)[];
+
+/** POST /access/domains — form/query parameters (path segments omitted). */
+export type AccessDomainsPostParams = {
+  'acr-values'?: string;
+  audiences?: string;
+  autocreate?: '0' | '1';
+  base_dn?: string;
+  bind_dn?: string;
+  capath?: string;
+  'case-sensitive'?: '0' | '1';
+  cert?: string;
+  certkey?: string;
+  'check-connection'?: '0' | '1';
+  'client-id'?: string;
+  'client-key'?: string;
+  comment?: string;
+  default?: '0' | '1';
+  domain?: string;
+  filter?: string;
+  group_classes?: string;
+  group_dn?: string;
+  group_filter?: string;
+  group_name_attr?: string;
+  'groups-autocreate'?: '0' | '1';
+  'groups-claim'?: string;
+  'groups-overwrite'?: '0' | '1';
+  'issuer-url'?: string;
+  mode?: 'ldap' | 'ldaps' | 'ldap+starttls';
+  password?: string;
+  port?: `${number}`;
+  prompt?: string;
+  'query-userinfo'?: '0' | '1';
+  realm: string;
+  scopes?: string;
+  secure?: '0' | '1';
+  server1?: string;
+  server2?: string;
+  sslversion?: 'tlsv1' | 'tlsv1_1' | 'tlsv1_2' | 'tlsv1_3';
+  'sync-defaults-options'?: string;
+  sync_attributes?: string;
+  tfa?: string;
+  type: 'ad' | 'ldap' | 'openid' | 'pam' | 'pve';
+  user_attr?: string;
+  user_classes?: string;
+  'username-claim'?: string;
+  verify?: '0' | '1';
+};
+/** POST /access/domains — `data` payload after client unwrap. */
+export type AccessDomainsPostReturn = null;
+
+/** GET /access/domains/{realm} — `data` payload after client unwrap. */
+export type AccessDomainsRealmGetReturn = unknown;
+
+/** PUT /access/domains/{realm} — form/query parameters (path segments omitted). */
+export type AccessDomainsRealmPutParams = {
+  'acr-values'?: string;
+  audiences?: string;
+  autocreate?: '0' | '1';
+  base_dn?: string;
+  bind_dn?: string;
+  capath?: string;
+  'case-sensitive'?: '0' | '1';
+  cert?: string;
+  certkey?: string;
+  'check-connection'?: '0' | '1';
+  'client-id'?: string;
+  'client-key'?: string;
+  comment?: string;
+  default?: '0' | '1';
+  delete?: string;
+  digest?: string;
+  domain?: string;
+  filter?: string;
+  group_classes?: string;
+  group_dn?: string;
+  group_filter?: string;
+  group_name_attr?: string;
+  'groups-autocreate'?: '0' | '1';
+  'groups-claim'?: string;
+  'groups-overwrite'?: '0' | '1';
+  'issuer-url'?: string;
+  mode?: 'ldap' | 'ldaps' | 'ldap+starttls';
+  password?: string;
+  port?: `${number}`;
+  prompt?: string;
+  'query-userinfo'?: '0' | '1';
+  scopes?: string;
+  secure?: '0' | '1';
+  server1?: string;
+  server2?: string;
+  sslversion?: 'tlsv1' | 'tlsv1_1' | 'tlsv1_2' | 'tlsv1_3';
+  'sync-defaults-options'?: string;
+  sync_attributes?: string;
+  tfa?: string;
+  user_attr?: string;
+  user_classes?: string;
+  verify?: '0' | '1';
+};
+/** PUT /access/domains/{realm} — `data` payload after client unwrap. */
+export type AccessDomainsRealmPutReturn = null;
+
+/** DELETE /access/domains/{realm} — `data` payload after client unwrap. */
+export type AccessDomainsRealmDeleteReturn = null;
+
+/** POST /access/domains/{realm}/sync — form/query parameters (path segments omitted). */
+export type AccessDomainsRealmSyncPostParams = {
+  'dry-run'?: '0' | '1';
+  'enable-new': '0' | '1';
+  full: '0' | '1';
+  purge: '0' | '1';
+  'remove-vanished': string;
+  scope: 'users' | 'groups' | 'both';
+};
+/** POST /access/domains/{realm}/sync — `data` payload after client unwrap. */
+export type AccessDomainsRealmSyncPostReturn = string;
+
+/** GET /access/groups — `data` payload after client unwrap. */
+export type AccessGroupsGetReturn = readonly ({
+  comment?: string;
+  groupid: string;
+  users?: string;
+} & Record<string, unknown>)[];
+
+/** POST /access/groups — form/query parameters (path segments omitted). */
+export type AccessGroupsPostParams = { comment?: string; groupid: string };
+/** POST /access/groups — `data` payload after client unwrap. */
+export type AccessGroupsPostReturn = null;
+
+/** GET /access/groups/{groupid} — `data` payload after client unwrap. */
+export type AccessGroupsGroupidGetReturn = { comment?: string; members: readonly string[] };
+
+/** PUT /access/groups/{groupid} — form/query parameters (path segments omitted). */
+export type AccessGroupsGroupidPutParams = { comment?: string };
+/** PUT /access/groups/{groupid} — `data` payload after client unwrap. */
+export type AccessGroupsGroupidPutReturn = null;
+
+/** DELETE /access/groups/{groupid} — `data` payload after client unwrap. */
+export type AccessGroupsGroupidDeleteReturn = null;
+
+/** GET /access/openid — `data` payload after client unwrap. */
+export type AccessOpenidGetReturn = readonly ({ subdir: string } & Record<string, unknown>)[];
+
+/** POST /access/openid/auth-url — form/query parameters (path segments omitted). */
+export type AccessOpenidAuthUrlPostParams = { realm: string; 'redirect-url': string };
+/** POST /access/openid/auth-url — `data` payload after client unwrap. */
+export type AccessOpenidAuthUrlPostReturn = string;
+
+/** POST /access/openid/login — form/query parameters (path segments omitted). */
+export type AccessOpenidLoginPostParams = { code: string; 'redirect-url': string; state: string };
+/** POST /access/openid/login — `data` payload after client unwrap. */
+export type AccessOpenidLoginPostReturn = {
+  CSRFPreventionToken: string;
+  cap: unknown;
+  clustername?: string;
+  ticket: string;
+  username: string;
+} & Record<string, unknown>;
+
+/** PUT /access/password — form/query parameters (path segments omitted). */
+export type AccessPasswordPutParams = {
+  'confirmation-password'?: string;
+  password: string;
+  userid: string;
+};
+/** PUT /access/password — `data` payload after client unwrap. */
+export type AccessPasswordPutReturn = null;
+
+/** GET /access/permissions — form/query parameters (path segments omitted). */
+export type AccessPermissionsGetParams = { path?: string; userid?: string };
+/** GET /access/permissions — `data` payload after client unwrap. */
+export type AccessPermissionsGetReturn = unknown;