@homeflare/alchemy 0.34.0 → 0.36.0

package/dist/proxmox/index.js

@@ -3372,10 +3372,14 @@ var handlers10 = {
 var ProxmoxNetworkApplyProvider = () => Provider15.effect(ProxmoxNetworkApply, Effect38.succeed(ProxmoxNetworkApply.Provider.of(handlers10)));
 // src/proxmox/node-network.ts
 import { Resource as Resource16 } from "alchemy";
+import { isResolved as isResolved10 } from "alchemy/Diff";
 import * as Provider16 from "alchemy/Provider";
-import * as Effect39 from "effect/Effect";
+import * as nodes2 from "@distilled.cloud/proxmox/nodes";
+import * as Effect40 from "effect/Effect";
 
 // src/proxmox/node-network-form.ts
+var NODE_NETWORK_CREATE = "pve:POST /nodes/{node}/network";
+var NODE_NETWORK_UPDATE = "pve:PUT /nodes/{node}/network/{iface}";
 var UNSET3 = -1;
 var ifaceList = (value) => text(value).split(/[\s,;]+/).filter((part) => part !== "").sort().join(" ");
 var comment2 = (value) => text(value).replace(/\s+$/, "");
@@ -3400,72 +3404,130 @@ var body4 = (props) => ({
   ...field3("vlan-raw-device", props["vlan-raw-device"]),
   type: props.type
 });
-var createBody3 = (props) => ({
+var createForm5 = (props) => ({
   ...body4(props),
   iface: props.iface
 });
-var updateBody2 = (props) => {
+var updateForm2 = (props) => {
   const clear = [
     ...props.cidr === undefined ? ["cidr"] : [],
     ...props.bridge_vlan_aware === false ? ["bridge_vlan_aware"] : []
   ];
-  const fields = body4(props);
-  return withClears(fields, clear);
+  return withClears(body4(props), clear);
 };
-var readAttributes2 = (live, props) => {
-  const liveType = text(live["type"]);
+
+// src/proxmox/node-network-wire.ts
+import * as nodes from "@distilled.cloud/proxmox/nodes";
+import * as Effect39 from "effect/Effect";
+var attributesOf5 = (live, props) => {
+  const data = live;
+  const liveType = text(data["type"]);
   if (liveType !== "" && liveType !== props.type)
     return;
   return {
-    active: bool(live["active"]),
-    autostart: bool(live["autostart"]),
-    "bond-primary": text(live["bond-primary"]),
-    bond_miimon: text(live["bond_miimon"]),
-    bond_mode: text(live["bond_mode"]),
-    bond_xmit_hash_policy: text(live["bond_xmit_hash_policy"]),
-    bridge_fd: text(live["bridge_fd"]),
-    bridge_ports: ifaceList(live["bridge_ports"]),
-    bridge_stp: text(live["bridge_stp"]),
-    bridge_vids: ifaceList(live["bridge_vids"]),
-    bridge_vlan_aware: bool(live["bridge_vlan_aware"]),
-    cidr: text(live["cidr"]),
-    comments: comment2(live["comments"]),
-    exists: bool(live["exists"]),
-    families: Array.isArray(live["families"]) ? live["families"].join(",") : "",
-    gateway: text(live["gateway"]),
+    active: bool(data["active"]),
+    autostart: bool(data["autostart"]),
+    "bond-primary": text(data["bond-primary"]),
+    bond_miimon: text(data["bond_miimon"]),
+    bond_mode: text(data["bond_mode"]),
+    bond_xmit_hash_policy: text(data["bond_xmit_hash_policy"]),
+    bridge_fd: text(data["bridge_fd"]),
+    bridge_ports: ifaceList(data["bridge_ports"]),
+    bridge_stp: text(data["bridge_stp"]),
+    bridge_vids: ifaceList(data["bridge_vids"]),
+    bridge_vlan_aware: bool(data["bridge_vlan_aware"]),
+    cidr: text(data["cidr"]),
+    comments: comment2(data["comments"]),
+    exists: bool(data["exists"]),
+    families: Array.isArray(data["families"]) ? data["families"].join(",") : "",
+    gateway: text(data["gateway"]),
     iface: props.iface,
-    method: text(live["method"]),
-    mtu: int(live["mtu"], UNSET3),
+    method: text(data["method"]),
+    mtu: int(data["mtu"], UNSET3),
     node: props.node,
-    priority: int(live["priority"], UNSET3),
-    slaves: ifaceList(live["slaves"]),
+    priority: int(data["priority"], UNSET3),
+    slaves: ifaceList(data["slaves"]),
     type: liveType === "" ? props.type : liveType,
-    "vlan-id": int(live["vlan-id"], UNSET3),
-    "vlan-raw-device": text(live["vlan-raw-device"])
+    "vlan-id": int(data["vlan-id"], UNSET3),
+    "vlan-raw-device": text(data["vlan-raw-device"])
   };
 };
+var readInterfaceOrFail = (props) => readOrUnreadable(runPve(props.target, "read", false, nodes.getNodeNetwork({ iface: props.iface, node: props.node })).pipe(Effect39.catchTag("ParameterVerificationFailed", (error) => error.errors["iface"] === "interface does not exist" ? Effect39.succeed(undefined) : Effect39.fail(error)))).pipe(Effect39.map((live) => {
+  if (live === UNREADABLE)
+    return UNREADABLE;
+  return live === undefined ? undefined : attributesOf5(live, props);
+}));
+var readInterface = (props) => readInterfaceOrFail(props).pipe(Effect39.orElseSucceed(() => {
+  return;
+}));
+var dropUnreadable4 = (live) => live === UNREADABLE ? undefined : live;
+var matches4 = (attributes, props) => attributes.cidr === (props.cidr ?? "") && same2(props.gateway, attributes.gateway) && same2(props.autostart, attributes.autostart) && same2(props.mtu, attributes.mtu) && sameComment(props.comments, attributes.comments) && sameList(props.bridge_ports, attributes.bridge_ports) && sameList(props.bridge_vids, attributes.bridge_vids) && same2(props.bridge_vlan_aware, attributes.bridge_vlan_aware) && sameList(props.slaves, attributes.slaves) && same2(props.bond_mode, attributes.bond_mode) && same2(props.bond_xmit_hash_policy, attributes.bond_xmit_hash_policy) && same2(props["bond-primary"], attributes["bond-primary"]) && same2(props["vlan-id"], attributes["vlan-id"]) && same2(props["vlan-raw-device"], attributes["vlan-raw-device"]);
 
 // src/proxmox/node-network.ts
 var ProxmoxNodeNetwork = Resource16("Proxmox.NodeNetwork", {
   defaultRemovalPolicy: "retain"
 });
-var handlers11 = pveHandlers({
-  attributes: readAttributes2,
-  collection: (props) => `nodes/${props.node}/network`,
-  createForm: createBody3,
-  endpoint: {
-    create: "pve:POST /nodes/{node}/network",
-    update: "pve:PUT /nodes/{node}/network/{iface}"
-  },
-  matches: (attributes, props) => attributes.cidr === (props.cidr ?? "") && same2(props.gateway, attributes.gateway) && same2(props.autostart, attributes.autostart) && same2(props.mtu, attributes.mtu) && sameComment(props.comments, attributes.comments) && sameList(props.bridge_ports, attributes.bridge_ports) && sameList(props.bridge_vids, attributes.bridge_vids) && same2(props.bridge_vlan_aware, attributes.bridge_vlan_aware) && sameList(props.slaves, attributes.slaves) && same2(props.bond_mode, attributes.bond_mode) && same2(props.bond_xmit_hash_policy, attributes.bond_xmit_hash_policy) && same2(props["bond-primary"], attributes["bond-primary"]) && same2(props["vlan-id"], attributes["vlan-id"]) && same2(props["vlan-raw-device"], attributes["vlan-raw-device"]),
-  path: (props) => `nodes/${props.node}/network/${props.iface}`,
-  updateForm: updateBody2
-});
-var ProxmoxNodeNetworkProvider = () => Provider16.effect(ProxmoxNodeNetwork, Effect39.succeed(ProxmoxNodeNetwork.Provider.of(handlers11)));
+var RENAMED = {
+  "bond-primary": "bond_primary",
+  "vlan-id": "vlan_id",
+  "vlan-raw-device": "vlan_raw_device"
+};
+var toDistilled = (form) => Object.fromEntries(Object.entries(form).map(([key, value]) => [RENAMED[key] ?? key, value]));
+var toDistilledCreate = (props) => ({
+  ...toDistilled(createForm5(props)),
+  node: props.node
+});
+var toDistilledUpdate = (props) => ({
+  ...toDistilled(updateForm2(props)),
+  iface: props.iface,
+  node: props.node
+});
+var ProxmoxNodeNetworkProvider = () => Provider16.effect(ProxmoxNodeNetwork, Effect40.succeed(ProxmoxNodeNetwork.Provider.of({
+  list: () => Effect40.succeed([]),
+  read: Effect40.fn(function* ({ olds, output }) {
+    return dropUnreadable4(yield* output === undefined ? readInterface(olds) : readInterfaceOrFail(olds));
+  }),
+  diff: Effect40.fn(function* ({ news, output }) {
+    if (!isResolved10(news))
+      return;
+    yield* guardWrite2(NODE_NETWORK_CREATE, createForm5(news), output === undefined);
+    yield* guardWrite2(NODE_NETWORK_UPDATE, updateForm2(news), false);
+    if (output === undefined)
+      return;
+    const live = yield* readInterfaceOrFail(news);
+    if (live === UNREADABLE) {
+      yield* unreadableWarning("Proxmox.NodeNetwork", `${news.node}/${news.iface}`);
+      return { action: "noop" };
+    }
+    if (live === undefined) {
+      yield* guardWrite2(NODE_NETWORK_CREATE, createForm5(news), true);
+      return { action: "update" };
+    }
+    return matches4(live, news) ? { action: "noop" } : { action: "update" };
+  }),
+  reconcile: Effect40.fn(function* ({ news }) {
+    const before = dropUnreadable4(yield* readInterface(news));
+    yield* guardWrite2(NODE_NETWORK_CREATE, createForm5(news), before === undefined);
+    yield* guardWrite2(NODE_NETWORK_UPDATE, updateForm2(news), false);
+    if (before === undefined) {
+      yield* runPve(news.target, "provision", true, nodes2.createNodeNetwork(toDistilledCreate(news)));
+    } else if (!matches4(before, news)) {
+      yield* runPve(news.target, "provision", true, nodes2.putNodeNetwork2(toDistilledUpdate(news)));
+    }
+    const after = dropUnreadable4(yield* readInterface(news));
+    if (after === undefined) {
+      return yield* Effect40.die(new Error(`nodes/${news.node}/network/${news.iface}: wrote with no error, but the ` + 'interface is still absent -- PVE wraps every answer in {"data":...} and can ' + "report success on a call that did nothing, so read back rather than trust it."));
+    }
+    return after;
+  }),
+  delete: Effect40.fn(function* ({ olds }) {
+    yield* runPve(olds.target, "provision", true, nodes2.deleteNodeNetwork2({ iface: olds.iface, node: olds.node }));
+  })
+})));
 // src/proxmox/notification-matcher.ts
 import { Resource as Resource17 } from "alchemy";
 import * as Provider17 from "alchemy/Provider";
-import * as Effect40 from "effect/Effect";
+import * as Effect41 from "effect/Effect";
 
 // src/proxmox/notification-matcher-form.ts
 var list = (value) => Array.isArray(value) ? value.map((item) => String(item)) : [];
@@ -3543,7 +3605,7 @@ var matcherUpdateForm = (fields) => {
 
 // src/proxmox/notification-matcher.ts
 var ProxmoxNotificationMatcher = Resource17("Proxmox.NotificationMatcher");
-var handlers12 = pveHandlers({
+var handlers11 = pveHandlers({
   attributes: (live, props) => matcherAttributes(live, props.name),
   collection: () => "cluster/notifications/matchers",
   createForm: matcherCreateForm,
@@ -3555,11 +3617,11 @@ var handlers12 = pveHandlers({
   path: (props) => `cluster/notifications/matchers/${props.name}`,
   updateForm: matcherUpdateForm
 });
-var ProxmoxNotificationMatcherProvider = () => Provider17.effect(ProxmoxNotificationMatcher, Effect40.succeed(ProxmoxNotificationMatcher.Provider.of(handlers12)));
+var ProxmoxNotificationMatcherProvider = () => Provider17.effect(ProxmoxNotificationMatcher, Effect41.succeed(ProxmoxNotificationMatcher.Provider.of(handlers11)));
 // src/proxmox/notification-target.ts
 import { Resource as Resource18 } from "alchemy";
 import * as Provider18 from "alchemy/Provider";
-import * as Effect41 from "effect/Effect";
+import * as Effect42 from "effect/Effect";
 
 // src/proxmox/notification-target-endpoint.ts
 var ENDPOINTS = {
@@ -3615,7 +3677,7 @@ var createShape = (props) => ({
 
 // src/proxmox/notification-target.ts
 var ProxmoxNotificationTarget = Resource18("Proxmox.NotificationTarget");
-var handlers13 = pveHandlers({
+var handlers12 = pveHandlers({
   attributes: (live, props) => ({
     author: text(live["author"]),
     body: text(live["body"]),
@@ -3641,15 +3703,15 @@ var handlers13 = pveHandlers({
   path: (props) => `cluster/notifications/endpoints/${props.type}/${props.name}`,
   updateForm: shape4
 });
-var ProxmoxNotificationTargetProvider = () => Provider18.effect(ProxmoxNotificationTarget, Effect41.succeed(ProxmoxNotificationTarget.Provider.of(handlers13)));
+var ProxmoxNotificationTargetProvider = () => Provider18.effect(ProxmoxNotificationTarget, Effect42.succeed(ProxmoxNotificationTarget.Provider.of(handlers12)));
 // src/proxmox/pbs-datastore.ts
 import { Resource as Resource19 } from "alchemy";
-import { isResolved as isResolved10 } from "alchemy/Diff";
+import { isResolved as isResolved11 } from "alchemy/Diff";
 import * as Provider19 from "alchemy/Provider";
-import * as Effect45 from "effect/Effect";
+import * as Effect46 from "effect/Effect";
 
 // src/proxmox/pbs-datastore-form.ts
-import * as Effect42 from "effect/Effect";
+import * as Effect43 from "effect/Effect";
 var attributes = (live, props) => ({
   backend: propertyString(live["backend"]),
   comment: text(live["comment"]),
@@ -3672,7 +3734,7 @@ var attributes = (live, props) => ({
   "verify-new": bool(live["verify-new"])
 });
 var same4 = (declared, live) => declared === undefined || declared === live;
-var matches4 = (live, props) => same4(props.comment, live.comment) && same4(props["gc-schedule"]?.trim(), live["gc-schedule"]) && same4(props["prune-schedule"]?.trim(), live["prune-schedule"]) && same4(props["keep-last"], live["keep-last"]) && same4(props["keep-hourly"], live["keep-hourly"]) && same4(props["keep-daily"], live["keep-daily"]) && same4(props["keep-weekly"], live["keep-weekly"]) && same4(props["keep-monthly"], live["keep-monthly"]) && same4(props["keep-yearly"], live["keep-yearly"]) && same4(props["notify-user"], live["notify-user"]) && same4(props["counter-reset-schedule"]?.trim(), live["counter-reset-schedule"]) && (props["notification-thresholds"] === undefined || propertyString(props["notification-thresholds"]) === live["notification-thresholds"]) && same4(props["verify-new"], live["verify-new"]) && (props.notify === undefined || propertyString(props.notify) === live.notify) && (props.tuning === undefined || propertyString(props.tuning) === live.tuning) && (props["maintenance-mode"] === undefined || propertyString(props["maintenance-mode"], "type") === live["maintenance-mode"]);
+var matches5 = (live, props) => same4(props.comment, live.comment) && same4(props["gc-schedule"]?.trim(), live["gc-schedule"]) && same4(props["prune-schedule"]?.trim(), live["prune-schedule"]) && same4(props["keep-last"], live["keep-last"]) && same4(props["keep-hourly"], live["keep-hourly"]) && same4(props["keep-daily"], live["keep-daily"]) && same4(props["keep-weekly"], live["keep-weekly"]) && same4(props["keep-monthly"], live["keep-monthly"]) && same4(props["keep-yearly"], live["keep-yearly"]) && same4(props["notify-user"], live["notify-user"]) && same4(props["counter-reset-schedule"]?.trim(), live["counter-reset-schedule"]) && (props["notification-thresholds"] === undefined || propertyString(props["notification-thresholds"]) === live["notification-thresholds"]) && same4(props["verify-new"], live["verify-new"]) && (props.notify === undefined || propertyString(props.notify) === live.notify) && (props.tuning === undefined || propertyString(props.tuning) === live.tuning) && (props["maintenance-mode"] === undefined || propertyString(props["maintenance-mode"], "type") === live["maintenance-mode"]);
 var set2 = (key, value) => value === undefined ? {} : { [key]: value };
 var count = (value) => value === undefined ? undefined : String(value);
 var mutable = (props) => ({
@@ -3693,56 +3755,56 @@ var mutable = (props) => ({
   ...set2("tuning", props.tuning),
   ...set2("verify-new", flag(props["verify-new"]))
 });
-var createForm5 = (props) => ({
+var createForm6 = (props) => ({
   ...mutable(props),
   name: props.name,
   path: props.path,
   ...props.backend === undefined ? {} : { backend: props.backend }
 });
-var updateForm2 = (props) => mutable(props);
+var updateForm3 = (props) => mutable(props);
 var object2 = (props) => `config/datastore/${props.name}`;
-var readOne = (props) => pve(props.target, "read", "GET", object2(props)).pipe(Effect42.map((live) => live === undefined || typeof live["name"] !== "string" ? undefined : attributes(live, props)), Effect42.orElseSucceed(() => {
+var readOne = (props) => pve(props.target, "read", "GET", object2(props)).pipe(Effect43.map((live) => live === undefined || typeof live["name"] !== "string" ? undefined : attributes(live, props)), Effect43.orElseSucceed(() => {
   return;
 }));
 
 // src/proxmox/pbs-datastore-guard.ts
-import * as Effect43 from "effect/Effect";
+import * as Effect44 from "effect/Effect";
 var samePath = (left, right) => {
   const trim = (value) => value.length > 1 ? value.replace(/\/+$/, "") : value;
   return trim(left) === trim(right);
 };
-var guardPath = (live, props) => live.path === "" || samePath(live.path, props.path) ? Effect43.void : Effect43.die(new Error(`${object2(props)}: declared path ${props.path} but PBS holds ${live.path}. \`path\` ` + "is create-only, so this cannot be reconciled and will NOT be planned as a silent " + "noop: backups would keep landing in the old directory behind a green plan. Correct " + "the declaration, or remove the datastore and declare a new one -- the contents live, " + "because `destroy-data` is never sent."));
-var guardBackend = (live, props) => props.backend === undefined || propertyString(props.backend) === live.backend ? Effect43.void : Effect43.die(new Error(`${object2(props)}: declared backend ${props.backend} but PBS holds ` + `${live.backend === "" ? "(none — a local datastore)" : live.backend}. \`backend\` ` + "is create-only: PBS has no update for it, so this cannot be reconciled and will NOT " + "be planned as a silent noop. Correct the declaration to match what is really there, " + "or remove the datastore and declare a new one -- the contents live, because " + "`destroy-data` is never sent."));
-var settle3 = (read3, done) => Effect43.gen(function* () {
+var guardPath = (live, props) => live.path === "" || samePath(live.path, props.path) ? Effect44.void : Effect44.die(new Error(`${object2(props)}: declared path ${props.path} but PBS holds ${live.path}. \`path\` ` + "is create-only, so this cannot be reconciled and will NOT be planned as a silent " + "noop: backups would keep landing in the old directory behind a green plan. Correct " + "the declaration, or remove the datastore and declare a new one -- the contents live, " + "because `destroy-data` is never sent."));
+var guardBackend = (live, props) => props.backend === undefined || propertyString(props.backend) === live.backend ? Effect44.void : Effect44.die(new Error(`${object2(props)}: declared backend ${props.backend} but PBS holds ` + `${live.backend === "" ? "(none — a local datastore)" : live.backend}. \`backend\` ` + "is create-only: PBS has no update for it, so this cannot be reconciled and will NOT " + "be planned as a silent noop. Correct the declaration to match what is really there, " + "or remove the datastore and declare a new one -- the contents live, because " + "`destroy-data` is never sent."));
+var settle3 = (read3, done) => Effect44.gen(function* () {
   for (let attempt = 0;attempt < 60; attempt += 1) {
     const live = yield* read3;
     if (done(live))
       return live;
-    yield* Effect43.sleep("2 seconds");
+    yield* Effect44.sleep("2 seconds");
   }
   return yield* read3;
 });
 
 // src/proxmox/pbs-datastore-endpoint.ts
-import * as Effect44 from "effect/Effect";
+import * as Effect45 from "effect/Effect";
 var DATASTORE_ENDPOINT = {
   create: "pbs:POST /config/datastore",
   update: "pbs:PUT /config/datastore/{name}"
 };
-var guardDatastoreForms = (props) => Effect44.gen(function* () {
-  yield* guardForm(DATASTORE_ENDPOINT.create, createForm5(props), true);
-  yield* guardForm(DATASTORE_ENDPOINT.update, updateForm2(props), false);
+var guardDatastoreForms = (props) => Effect45.gen(function* () {
+  yield* guardForm(DATASTORE_ENDPOINT.create, createForm6(props), true);
+  yield* guardForm(DATASTORE_ENDPOINT.update, updateForm3(props), false);
 });
 
 // src/proxmox/pbs-datastore.ts
 var PbsDatastore = Resource19("Pbs.Datastore", {
   defaultRemovalPolicy: "retain"
 });
-var PbsDatastoreProvider = () => Provider19.effect(PbsDatastore, Effect45.succeed(PbsDatastore.Provider.of({
-  list: () => Effect45.succeed([]),
+var PbsDatastoreProvider = () => Provider19.effect(PbsDatastore, Effect46.succeed(PbsDatastore.Provider.of({
+  list: () => Effect46.succeed([]),
   read: ({ olds }) => readOne(olds),
-  diff: ({ news, output }) => Effect45.gen(function* () {
-    if (!isResolved10(news))
+  diff: ({ news, output }) => Effect46.gen(function* () {
+    if (!isResolved11(news))
       return;
     yield* guardDatastoreForms(news);
     if (output === undefined)
@@ -3752,42 +3814,42 @@ var PbsDatastoreProvider = () => Provider19.effect(PbsDatastore, Effect45.succee
       return { action: "update" };
     yield* guardPath(live, news);
     yield* guardBackend(live, news);
-    return matches4(live, news) ? { action: "noop" } : { action: "update" };
+    return matches5(live, news) ? { action: "noop" } : { action: "update" };
   }),
-  reconcile: Effect45.fn(function* ({ news }) {
+  reconcile: Effect46.fn(function* ({ news }) {
     yield* guardDatastoreForms(news);
     const live = yield* readOne(news);
     let upid;
     if (live === undefined) {
-      upid = yield* pve(news.target, "provision", "POST", "config/datastore", createForm5(news));
+      upid = yield* pve(news.target, "provision", "POST", "config/datastore", createForm6(news));
     } else {
       yield* guardPath(live, news);
       yield* guardBackend(live, news);
-      const form = formToSend(matches4, live, news, updateForm2(news));
+      const form = formToSend(matches5, live, news, updateForm3(news));
       if (form !== undefined) {
         yield* pve(news.target, "provision", "PUT", object2(news), form);
       }
     }
-    const after = yield* settle3(readOne(news), (row) => row !== undefined && matches4(row, news));
-    if (after === undefined || !matches4(after, news)) {
-      return yield* Effect45.die(new Error(`${object2(news)}: the write returned no error but the datastore still does not ` + `match the declaration after 120s. PBS answered with task ${upid ?? "(none)"} ` + "-- read it with `proxmox-backup-manager task log <upid>`. A slow disk is a " + "plausible cause (see `settle`); a create over an existing chunk store is not, " + "because PBS refuses that outright rather than timing out."));
+    const after = yield* settle3(readOne(news), (row) => row !== undefined && matches5(row, news));
+    if (after === undefined || !matches5(after, news)) {
+      return yield* Effect46.die(new Error(`${object2(news)}: the write returned no error but the datastore still does not ` + `match the declaration after 120s. PBS answered with task ${upid ?? "(none)"} ` + "-- read it with `proxmox-backup-manager task log <upid>`. A slow disk is a " + "plausible cause (see `settle`); a create over an existing chunk store is not, " + "because PBS refuses that outright rather than timing out."));
     }
     return after;
   }),
-  delete: Effect45.fn(function* ({ olds }) {
+  delete: Effect46.fn(function* ({ olds }) {
     yield* pve(olds.target, "provision", "DELETE", object2(olds));
     const left = yield* settle3(readOne(olds), (row) => row === undefined);
     if (left !== undefined) {
-      return yield* Effect45.die(new Error(`${object2(olds)}: the DELETE returned no error but the datastore is still in ` + "datastore.cfg after 120s. Either a backup, verify or GC task still holds it, " + "or the provision role lacks Datastore.Allocate on /datastore/" + `${olds.name}. Read the task log with \`proxmox-backup-manager task log <upid>\`.`));
+      return yield* Effect46.die(new Error(`${object2(olds)}: the DELETE returned no error but the datastore is still in ` + "datastore.cfg after 120s. Either a backup, verify or GC task still holds it, " + "or the provision role lacks Datastore.Allocate on /datastore/" + `${olds.name}. Read the task log with \`proxmox-backup-manager task log <upid>\`.`));
     }
   })
 })));
 // src/proxmox/pbs-notification-matcher.ts
 import { Resource as Resource20 } from "alchemy";
 import * as Provider20 from "alchemy/Provider";
-import * as Effect46 from "effect/Effect";
+import * as Effect47 from "effect/Effect";
 var PbsNotificationMatcher = Resource20("Pbs.NotificationMatcher");
-var handlers14 = pveHandlers({
+var handlers13 = pveHandlers({
   attributes: (live, props) => matcherAttributes(live, props.name),
   collection: () => "config/notifications/matchers",
   createForm: matcherCreateForm,
@@ -3799,15 +3861,15 @@ var handlers14 = pveHandlers({
   path: (props) => `config/notifications/matchers/${props.name}`,
   updateForm: matcherUpdateForm
 });
-var PbsNotificationMatcherProvider = () => Provider20.effect(PbsNotificationMatcher, Effect46.succeed(PbsNotificationMatcher.Provider.of(handlers14)));
+var PbsNotificationMatcherProvider = () => Provider20.effect(PbsNotificationMatcher, Effect47.succeed(PbsNotificationMatcher.Provider.of(handlers13)));
 // src/proxmox/pbs-notification-target.ts
 import { Resource as Resource21 } from "alchemy";
 import * as Provider21 from "alchemy/Provider";
-import * as Effect48 from "effect/Effect";
+import * as Effect49 from "effect/Effect";
 
 // src/proxmox/pbs-notification-target-lifecycle.ts
-import { isResolved as isResolved11 } from "alchemy/Diff";
-import * as Effect47 from "effect/Effect";
+import { isResolved as isResolved12 } from "alchemy/Diff";
+import * as Effect48 from "effect/Effect";
 
 // src/proxmox/pbs-notification-target-endpoint.ts
 var ENDPOINTS2 = {
@@ -4084,12 +4146,12 @@ var targetForm = (props, groups, carry, mode) => {
 
 // src/proxmox/pbs-notification-target-lifecycle.ts
 var path = (props) => `config/notifications/endpoints/${props.type}/${props.name}`;
-var readLive2 = (props) => pve(props.target, "read", "GET", path(props)).pipe(Effect47.map((data) => data == null ? undefined : targetAttributes(data, props)), Effect47.orElseSucceed(() => {
+var readLive2 = (props) => pve(props.target, "read", "GET", path(props)).pipe(Effect48.map((data) => data == null ? undefined : targetAttributes(data, props)), Effect48.orElseSucceed(() => {
   return;
 }));
 var refuse2 = (props) => {
   const reasons = refusals(props);
-  return reasons.length === 0 ? Effect47.void : Effect47.die(new Error(`${path(props)}: ${reasons.join("; ")}.`));
+  return reasons.length === 0 ? Effect48.void : Effect48.die(new Error(`${path(props)}: ${reasons.join("; ")}.`));
 };
 var toCarry = (live, props, groups, sealed) => {
   const header = headerState(live, props, groups) === "stale";
@@ -4101,17 +4163,17 @@ var requireValues = (props, groups, carry) => {
     ...carry.header ? groups.header.missing : [],
     ...carry.sealed ? groups.sealed.missing : []
   ];
-  return missing.length === 0 ? Effect47.void : Effect47.die(new Error(`${path(props)}: this write must send write-only values, and ${missing.join(", ")} ` + "is unset or empty in the deploying environment. Export it and deploy again."));
+  return missing.length === 0 ? Effect48.void : Effect48.die(new Error(`${path(props)}: this write must send write-only values, and ${missing.join(", ")} ` + "is unset or empty in the deploying environment. Export it and deploy again."));
 };
-var handlers15 = {
-  list: () => Effect47.succeed([]),
-  read: ({ olds, output }) => (output === undefined ? refuse2(olds) : Effect47.void).pipe(Effect47.andThen(readLive2(olds)), Effect47.map((live) => live === undefined ? undefined : { ...live, sealed: output?.sealed ?? "" })),
+var handlers14 = {
+  list: () => Effect48.succeed([]),
+  read: ({ olds, output }) => (output === undefined ? refuse2(olds) : Effect48.void).pipe(Effect48.andThen(readLive2(olds)), Effect48.map((live) => live === undefined ? undefined : { ...live, sealed: output?.sealed ?? "" })),
   diff: ({
     news,
     olds,
     output
-  }) => Effect47.gen(function* () {
-    if (output === undefined || !isResolved11(news))
+  }) => Effect48.gen(function* () {
+    if (output === undefined || !isResolved12(news))
       return;
     if (olds !== undefined && (olds.type !== news.type || olds.name !== news.name)) {
       return { action: "replace", deleteFirst: olds.name === news.name };
@@ -4122,7 +4184,7 @@ var handlers15 = {
       return { action: "update" };
     return toCarry(live, news, resolveGroups(news), output.sealed) === undefined ? { action: "noop" } : { action: "update" };
   }),
-  reconcile: ({ news, output }) => Effect47.gen(function* () {
+  reconcile: ({ news, output }) => Effect48.gen(function* () {
     yield* refuse2(news);
     const groups = resolveGroups(news);
     const live = yield* readLive2(news);
@@ -4148,7 +4210,7 @@ var handlers15 = {
     }
     const after = yield* readLive2(news);
     if (after === undefined) {
-      return yield* Effect47.die(new Error(`${path(news)}: the write returned no error but the target is still absent.`));
+      return yield* Effect48.die(new Error(`${path(news)}: the write returned no error but the target is still absent.`));
     }
     return { ...after, sealed };
   }),
@@ -4157,11 +4219,11 @@ var handlers15 = {
 
 // src/proxmox/pbs-notification-target.ts
 var PbsNotificationTarget = Resource21("Pbs.NotificationTarget");
-var PbsNotificationTargetProvider = () => Provider21.effect(PbsNotificationTarget, Effect48.succeed(PbsNotificationTarget.Provider.of(handlers15)));
+var PbsNotificationTargetProvider = () => Provider21.effect(PbsNotificationTarget, Effect49.succeed(PbsNotificationTarget.Provider.of(handlers14)));
 // src/proxmox/pbs-prune-job.ts
 import { Resource as Resource22 } from "alchemy";
 import * as Provider22 from "alchemy/Provider";
-import * as Effect49 from "effect/Effect";
+import * as Effect50 from "effect/Effect";
 
 // src/proxmox/pbs-prune-job-form.ts
 var KEEP_KEYS = [
@@ -4207,11 +4269,11 @@ var shape5 = (props) => ({
   schedule: props.schedule,
   store: props.store
 });
-var createBody4 = (props) => {
+var createBody3 = (props) => {
   requireKeeps(props);
   return { ...shape5(props), id: props.id };
 };
-var updateBody3 = (props) => {
+var updateBody2 = (props) => {
   requireKeeps(props);
   return shape5(props);
 };
@@ -4219,7 +4281,7 @@ var updateBody3 = (props) => {
 // src/proxmox/pbs-prune-job.ts
 var PbsPruneJob = Resource22("Pbs.PruneJob");
 var same6 = (declared2, live) => declared2 === undefined || declared2 === live;
-var handlers16 = pveHandlers({
+var handlers15 = pveHandlers({
   attributes: (live, props) => ({
     comment: text(live["comment"], ""),
     disable: bool(live["disable"], false),
@@ -4231,17 +4293,17 @@ var handlers16 = pveHandlers({
     store: text(live["store"], props.store)
   }),
   collection: () => "config/prune",
-  createForm: createBody4,
+  createForm: createBody3,
   endpoint: { create: "pbs:POST /config/prune", update: "pbs:PUT /config/prune/{id}" },
   matches: (attributes2, props) => attributes2.schedule === props.schedule && attributes2.store === props.store && same6(props.ns, attributes2.ns) && same6(props["max-depth"], attributes2["max-depth"]) && same6(props.disable, attributes2.disable) && same6(props.comment, attributes2.comment) && keepsMatch(attributes2, props),
   path: (props) => `config/prune/${props.id}`,
-  updateForm: updateBody3
+  updateForm: updateBody2
 });
-var PbsPruneJobProvider = () => Provider22.effect(PbsPruneJob, Effect49.succeed(PbsPruneJob.Provider.of(handlers16)));
+var PbsPruneJobProvider = () => Provider22.effect(PbsPruneJob, Effect50.succeed(PbsPruneJob.Provider.of(handlers15)));
 // src/proxmox/pbs-sync-job.ts
 import { Resource as Resource23 } from "alchemy";
 import * as Provider23 from "alchemy/Provider";
-import * as Effect50 from "effect/Effect";
+import * as Effect51 from "effect/Effect";
 
 // src/proxmox/pbs-sync-job-form.ts
 var UNSET4 = -1;
@@ -4283,13 +4345,13 @@ var shape6 = (props) => ({
   ...props["verified-only"] === undefined ? {} : { "verified-only": props["verified-only"] ? "1" : "0" },
   ...props["transfer-last"] === undefined ? {} : { "transfer-last": String(props["transfer-last"]) }
 });
-var createBody5 = (props) => ({
+var createBody4 = (props) => ({
   ...shape6(props),
   id: props.id,
   ...props["sync-direction"] === undefined ? {} : { "sync-direction": props["sync-direction"] }
 });
-var updateBody4 = (props) => shape6(props);
-var handlers17 = pveHandlers({
+var updateBody3 = (props) => shape6(props);
+var handlers16 = pveHandlers({
   attributes: (live, props) => ({
     comment: text(live["comment"], ""),
     "group-filter": filters(live["group-filter"]),
@@ -4309,20 +4371,20 @@ var handlers17 = pveHandlers({
     "transfer-last": int(live["transfer-last"], UNSET4)
   }),
   collection: () => "config/sync",
-  createForm: createBody5,
+  createForm: createBody4,
   endpoint: { create: "pbs:POST /config/sync", update: "pbs:PUT /config/sync/{id}" },
   matches: (attributes2, props) => attributes2["remove-vanished"] === (props["remove-vanished"] === true) && attributes2.store === props.store && attributes2["remote-store"] === props["remote-store"] && (props.remote === undefined || attributes2.remote === props.remote) && (props.ns === undefined || attributes2.ns === props.ns) && (props["remote-ns"] === undefined || attributes2["remote-ns"] === props["remote-ns"]) && (props.schedule === undefined || attributes2.schedule === props.schedule) && (props.comment === undefined || attributes2.comment === props.comment) && (props.owner === undefined || attributes2.owner === props.owner) && (props["verified-only"] === undefined || attributes2["verified-only"] === props["verified-only"]) && (props["rate-in"] === undefined || attributes2["rate-in"] === props["rate-in"]) && (props["max-depth"] === undefined || attributes2["max-depth"] === props["max-depth"]) && (props["transfer-last"] === undefined || attributes2["transfer-last"] === props["transfer-last"]),
   path: (props) => `config/sync/${props.id}`,
-  updateForm: updateBody4
+  updateForm: updateBody3
 });
 
 // src/proxmox/pbs-sync-job.ts
 var PbsSyncJob = Resource23("Pbs.SyncJob");
-var PbsSyncJobProvider = () => Provider23.effect(PbsSyncJob, Effect50.succeed(PbsSyncJob.Provider.of(handlers17)));
+var PbsSyncJobProvider = () => Provider23.effect(PbsSyncJob, Effect51.succeed(PbsSyncJob.Provider.of(handlers16)));
 // src/proxmox/pbs-verify-job.ts
 import { Resource as Resource24 } from "alchemy";
 import * as Provider24 from "alchemy/Provider";
-import * as Effect51 from "effect/Effect";
+import * as Effect52 from "effect/Effect";
 
 // src/proxmox/pbs-verify-job-form.ts
 var rechecks = (ignoreVerified, outdatedAfter) => {
@@ -4344,7 +4406,7 @@ var shape7 = (props) => ({
 
 // src/proxmox/pbs-verify-job.ts
 var PbsVerifyJob = Resource24("Pbs.VerifyJob");
-var handlers18 = pveHandlers({
+var handlers17 = pveHandlers({
   attributes: (live, props) => {
     const ignoreVerified = bool(live["ignore-verified"], true);
     const outdatedAfter = int(live["outdated-after"], -1);
@@ -4367,11 +4429,11 @@ var handlers18 = pveHandlers({
   path: (props) => `config/verify/${props.id}`,
   updateForm: shape7
 });
-var PbsVerifyJobProvider = () => Provider24.effect(PbsVerifyJob, Effect51.succeed(PbsVerifyJob.Provider.of(handlers18)));
+var PbsVerifyJobProvider = () => Provider24.effect(PbsVerifyJob, Effect52.succeed(PbsVerifyJob.Provider.of(handlers17)));
 // src/proxmox/pool.ts
 import { Resource as Resource25 } from "alchemy";
 import * as Provider25 from "alchemy/Provider";
-import * as Effect52 from "effect/Effect";
+import * as Effect53 from "effect/Effect";
 var ProxmoxPool = Resource25("Proxmox.Pool");
 var poolCreateForm = (props) => ({
   comment: props.comment ?? "",
@@ -4380,7 +4442,7 @@ var poolCreateForm = (props) => ({
 var poolUpdateForm = (props) => ({
   comment: props.comment ?? ""
 });
-var handlers19 = pveHandlers({
+var handlers18 = pveHandlers({
   attributes: (live, props) => {
     const row = live;
     return {
@@ -4396,7 +4458,7 @@ var handlers19 = pveHandlers({
   path: (props) => `pools/${props.poolid}`,
   updateForm: poolUpdateForm
 });
-var ProxmoxPoolProvider = () => Provider25.effect(ProxmoxPool, Effect52.succeed(ProxmoxPool.Provider.of(handlers19)));
+var ProxmoxPoolProvider = () => Provider25.effect(ProxmoxPool, Effect53.succeed(ProxmoxPool.Provider.of(handlers18)));
 // src/proxmox/provision-baseline.ts
 var PROVISION_PRIVILEGES = Object.freeze([
   "Datastore.Allocate",
@@ -4589,53 +4651,53 @@ echo 'provision baseline: done. Next: point the OpenBao proxmox mount at these u
 // src/proxmox/provision-declare.ts
 import { adopt } from "alchemy/AdoptPolicy";
 import * as RemovalPolicy from "alchemy/RemovalPolicy";
-import * as Effect56 from "effect/Effect";
+import * as Effect57 from "effect/Effect";
 
 // src/proxmox/role.ts
 import { Resource as Resource26 } from "alchemy";
-import { isResolved as isResolved12 } from "alchemy/Diff";
+import { isResolved as isResolved13 } from "alchemy/Diff";
 import * as Provider26 from "alchemy/Provider";
 import * as access5 from "@distilled.cloud/proxmox/access";
-import * as Effect53 from "effect/Effect";
+import * as Effect54 from "effect/Effect";
 
 // src/proxmox/role-wire.ts
 var ROLE_CREATE = "pve:POST /access/roles";
 var ROLE_UPDATE = "pve:PUT /access/roles/{roleid}";
 var canonical2 = (privs) => [...new Set(privs.map((priv) => priv.trim()).filter((priv) => priv.length > 0))].sort();
-var createForm6 = (props) => ({
+var createForm7 = (props) => ({
   privs: canonical2(props.privs).join(","),
   roleid: props.roleid
 });
-var updateForm3 = (props) => ({
+var updateForm4 = (props) => ({
   privs: canonical2(props.privs).join(","),
   roleid: props.roleid
 });
 var find2 = (rows, roleid) => rows.find((row) => row.roleid === roleid);
-var attributesOf5 = (row, props) => ({
+var attributesOf6 = (row, props) => ({
   privs: canonical2(row.privs === undefined ? [] : row.privs.split(",")),
   roleid: props.roleid
 });
-var matches5 = (attributes2, props) => canonical2(attributes2.privs).join(",") === canonical2(props.privs).join(",");
+var matches6 = (attributes2, props) => canonical2(attributes2.privs).join(",") === canonical2(props.privs).join(",");
 
 // src/proxmox/role.ts
 var ProxmoxRole = Resource26("Proxmox.Role");
-var readRole = (props) => readOrUnreadable(runPve(props.target, "read", false, access5.listAccessRoles({}))).pipe(Effect53.map((rows) => {
+var readRole = (props) => readOrUnreadable(runPve(props.target, "read", false, access5.listAccessRoles({}))).pipe(Effect54.map((rows) => {
   if (rows === UNREADABLE)
     return UNREADABLE;
   const row = find2(rows, props.roleid);
-  return row === undefined ? undefined : attributesOf5(row, props);
+  return row === undefined ? undefined : attributesOf6(row, props);
 }));
-var dropUnreadable4 = (live) => live === UNREADABLE ? undefined : live;
-var ProxmoxRoleProvider = () => Provider26.effect(ProxmoxRole, Effect53.succeed(ProxmoxRole.Provider.of({
-  list: () => Effect53.succeed([]),
-  read: Effect53.fn(function* ({ olds }) {
-    return dropUnreadable4(yield* readRole(olds));
+var dropUnreadable5 = (live) => live === UNREADABLE ? undefined : live;
+var ProxmoxRoleProvider = () => Provider26.effect(ProxmoxRole, Effect54.succeed(ProxmoxRole.Provider.of({
+  list: () => Effect54.succeed([]),
+  read: Effect54.fn(function* ({ olds }) {
+    return dropUnreadable5(yield* readRole(olds));
   }),
-  diff: Effect53.fn(function* ({ news, output }) {
-    if (!isResolved12(news))
+  diff: Effect54.fn(function* ({ news, output }) {
+    if (!isResolved13(news))
       return;
-    yield* guardWrite2(ROLE_CREATE, createForm6(news), output === undefined);
-    yield* guardWrite2(ROLE_UPDATE, updateForm3(news), false);
+    yield* guardWrite2(ROLE_CREATE, createForm7(news), output === undefined);
+    yield* guardWrite2(ROLE_UPDATE, updateForm4(news), false);
     if (output === undefined)
       return;
     const live = yield* readRole(news);
@@ -4644,41 +4706,41 @@ var ProxmoxRoleProvider = () => Provider26.effect(ProxmoxRole, Effect53.succeed(
       return { action: "noop" };
     }
     if (live === undefined) {
-      yield* guardWrite2(ROLE_CREATE, createForm6(news), true);
+      yield* guardWrite2(ROLE_CREATE, createForm7(news), true);
       return { action: "update" };
     }
-    return matches5(live, news) ? { action: "noop" } : { action: "update" };
+    return matches6(live, news) ? { action: "noop" } : { action: "update" };
   }),
-  reconcile: Effect53.fn(function* ({ news }) {
-    const before = dropUnreadable4(yield* readRole(news));
-    yield* guardWrite2(ROLE_CREATE, createForm6(news), before === undefined);
-    yield* guardWrite2(ROLE_UPDATE, updateForm3(news), false);
+  reconcile: Effect54.fn(function* ({ news }) {
+    const before = dropUnreadable5(yield* readRole(news));
+    yield* guardWrite2(ROLE_CREATE, createForm7(news), before === undefined);
+    yield* guardWrite2(ROLE_UPDATE, updateForm4(news), false);
     if (before === undefined) {
-      yield* runPve(news.target, "provision", true, access5.createAccessRole(createForm6(news)));
-    } else if (!matches5(before, news)) {
-      yield* runPve(news.target, "provision", true, access5.putAccessRole(updateForm3(news)));
+      yield* runPve(news.target, "provision", true, access5.createAccessRole(createForm7(news)));
+    } else if (!matches6(before, news)) {
+      yield* runPve(news.target, "provision", true, access5.putAccessRole(updateForm4(news)));
     }
-    const after = dropUnreadable4(yield* readRole(news));
+    const after = dropUnreadable5(yield* readRole(news));
     if (after === undefined) {
-      return yield* Effect53.die(new Error(`access/roles/${news.roleid}: the write returned no error but the role is ` + 'still absent. PVE wraps every answer in {"data":...} and can report success ' + "on a call that did nothing -- read back rather than trusting the status code."));
+      return yield* Effect54.die(new Error(`access/roles/${news.roleid}: the write returned no error but the role is ` + 'still absent. PVE wraps every answer in {"data":...} and can report success ' + "on a call that did nothing -- read back rather than trusting the status code."));
     }
     return after;
   }),
-  delete: Effect53.fn(function* ({ olds }) {
+  delete: Effect54.fn(function* ({ olds }) {
     yield* runPve(olds.target, "provision", true, access5.deleteAccessRole({ roleid: olds.roleid }));
   })
 })));
 
 // src/proxmox/user.ts
 import { Resource as Resource27 } from "alchemy";
-import { isResolved as isResolved13 } from "alchemy/Diff";
+import { isResolved as isResolved14 } from "alchemy/Diff";
 import * as Provider27 from "alchemy/Provider";
 import * as access7 from "@distilled.cloud/proxmox/access";
-import * as Effect55 from "effect/Effect";
+import * as Effect56 from "effect/Effect";
 
 // src/proxmox/user-wire.ts
 import * as access6 from "@distilled.cloud/proxmox/access";
-import * as Effect54 from "effect/Effect";
+import * as Effect55 from "effect/Effect";
 var USER_CREATE = "pve:POST /access/users";
 var USER_UPDATE = "pve:PUT /access/users/{userid}";
 var int2 = (value) => {
@@ -4700,15 +4762,15 @@ var shape8 = (props) => ({
   groups: groupSet(props.groups).join(","),
   lastname: props.lastname ?? ""
 });
-var createForm7 = (props) => ({
+var createForm8 = (props) => ({
   ...shape8(props),
   userid: props.userid
 });
-var updateForm4 = (props) => ({
+var updateForm5 = (props) => ({
   ...shape8(props),
   userid: props.userid
 });
-var attributesOf6 = (live, props) => ({
+var attributesOf7 = (live, props) => ({
   comment: text(live.comment),
   email: text(live.email),
   enable: bool(live.enable, true),
@@ -4719,25 +4781,25 @@ var attributesOf6 = (live, props) => ({
   tokens: tokenNames(live.tokens),
   userid: props.userid
 });
-var matches6 = (attributes2, props) => attributes2.comment === (props.comment ?? "") && attributes2.email === (props.email ?? "") && attributes2.enable === (props.enable !== false) && attributes2.expire === (props.expire ?? 0) && attributes2.firstname === (props.firstname ?? "") && attributes2.lastname === (props.lastname ?? "") && attributes2.groups.join(",") === groupSet(props.groups).join(",");
-var readUserOrFail = (props) => readOrUnreadable(runPve(props.target, "read", false, access6.getAccessUser({ userid: props.userid }))).pipe(Effect54.map((live) => live === UNREADABLE ? UNREADABLE : attributesOf6(live, props)));
-var readUser = (props) => readUserOrFail(props).pipe(Effect54.orElseSucceed(() => {
+var matches7 = (attributes2, props) => attributes2.comment === (props.comment ?? "") && attributes2.email === (props.email ?? "") && attributes2.enable === (props.enable !== false) && attributes2.expire === (props.expire ?? 0) && attributes2.firstname === (props.firstname ?? "") && attributes2.lastname === (props.lastname ?? "") && attributes2.groups.join(",") === groupSet(props.groups).join(",");
+var readUserOrFail = (props) => readOrUnreadable(runPve(props.target, "read", false, access6.getAccessUser({ userid: props.userid }))).pipe(Effect55.map((live) => live === UNREADABLE ? UNREADABLE : attributesOf7(live, props)));
+var readUser = (props) => readUserOrFail(props).pipe(Effect55.orElseSucceed(() => {
   return;
 }));
-var dropUnreadable5 = (live) => live === UNREADABLE ? undefined : live;
+var dropUnreadable6 = (live) => live === UNREADABLE ? undefined : live;
 
 // src/proxmox/user.ts
 var ProxmoxUser = Resource27("Proxmox.User");
-var ProxmoxUserProvider = () => Provider27.effect(ProxmoxUser, Effect55.succeed(ProxmoxUser.Provider.of({
-  list: () => Effect55.succeed([]),
-  read: Effect55.fn(function* ({ olds, output }) {
-    return dropUnreadable5(yield* output === undefined ? readUser(olds) : readUserOrFail(olds));
+var ProxmoxUserProvider = () => Provider27.effect(ProxmoxUser, Effect56.succeed(ProxmoxUser.Provider.of({
+  list: () => Effect56.succeed([]),
+  read: Effect56.fn(function* ({ olds, output }) {
+    return dropUnreadable6(yield* output === undefined ? readUser(olds) : readUserOrFail(olds));
   }),
-  diff: Effect55.fn(function* ({ news, output }) {
-    if (!isResolved13(news))
+  diff: Effect56.fn(function* ({ news, output }) {
+    if (!isResolved14(news))
       return;
-    yield* guardWrite2(USER_CREATE, createForm7(news), output === undefined);
-    yield* guardWrite2(USER_UPDATE, updateForm4(news), false);
+    yield* guardWrite2(USER_CREATE, createForm8(news), output === undefined);
+    yield* guardWrite2(USER_UPDATE, updateForm5(news), false);
     if (output === undefined)
       return;
     const live = yield* readUserOrFail(news);
@@ -4746,34 +4808,34 @@ var ProxmoxUserProvider = () => Provider27.effect(ProxmoxUser, Effect55.succeed(
       return { action: "noop" };
     }
     if (live === undefined) {
-      yield* guardWrite2(USER_CREATE, createForm7(news), true);
+      yield* guardWrite2(USER_CREATE, createForm8(news), true);
       return { action: "update" };
     }
-    return matches6(live, news) ? { action: "noop" } : { action: "update" };
+    return matches7(live, news) ? { action: "noop" } : { action: "update" };
   }),
-  reconcile: Effect55.fn(function* ({ news }) {
-    const before = dropUnreadable5(yield* readUser(news));
-    yield* guardWrite2(USER_CREATE, createForm7(news), before === undefined);
-    yield* guardWrite2(USER_UPDATE, updateForm4(news), false);
+  reconcile: Effect56.fn(function* ({ news }) {
+    const before = dropUnreadable6(yield* readUser(news));
+    yield* guardWrite2(USER_CREATE, createForm8(news), before === undefined);
+    yield* guardWrite2(USER_UPDATE, updateForm5(news), false);
     if (before === undefined) {
-      yield* runPve(news.target, "provision", true, access7.createAccessUser(createForm7(news)));
-    } else if (!matches6(before, news)) {
-      yield* runPve(news.target, "provision", true, access7.putAccessUser(updateForm4(news)));
+      yield* runPve(news.target, "provision", true, access7.createAccessUser(createForm8(news)));
+    } else if (!matches7(before, news)) {
+      yield* runPve(news.target, "provision", true, access7.putAccessUser(updateForm5(news)));
     }
-    const after = dropUnreadable5(yield* readUser(news));
+    const after = dropUnreadable6(yield* readUser(news));
     if (after === undefined) {
-      return yield* Effect55.die(new Error(`access/users/${news.userid}: the write returned no error but the account is ` + 'still absent. PVE wraps every answer in {"data":...} and can report success ' + "on a call that did nothing -- read back rather than trusting the status code."));
+      return yield* Effect56.die(new Error(`access/users/${news.userid}: the write returned no error but the account is ` + 'still absent. PVE wraps every answer in {"data":...} and can report success ' + "on a call that did nothing -- read back rather than trusting the status code."));
     }
     return after;
   }),
-  delete: Effect55.fn(function* ({ olds }) {
+  delete: Effect56.fn(function* ({ olds }) {
     yield* runPve(olds.target, "provision", true, access7.deleteAccessUser({ userid: olds.userid }));
   })
 })));
 
 // src/proxmox/provision-declare.ts
-var declareProvisionBaseline = (id, target, names2 = {}, options = {}) => Effect56.gen(function* () {
-  const baseline = yield* Effect56.try({
+var declareProvisionBaseline = (id, target, names2 = {}, options = {}) => Effect57.gen(function* () {
+  const baseline = yield* Effect57.try({
     catch: (cause) => cause instanceof Error ? cause : new Error(String(cause)),
     try: () => provisionBaseline(names2)
   });
@@ -4787,13 +4849,13 @@ var declareProvisionBaseline = (id, target, names2 = {}, options = {}) => Effect
     target
   }));
   const group = yield* owned(ProxmoxGroup(`${id}-mint-group`, { ...baseline.group, target }));
-  const users = yield* Effect56.all(baseline.users.map((user) => owned(ProxmoxUser(`${id}-${user.lane}-user`, {
+  const users = yield* Effect57.all(baseline.users.map((user) => owned(ProxmoxUser(`${id}-${user.lane}-user`, {
     comment: user.comment,
     groups: [...user.groups],
     target,
     userid: user.userid
   }))));
-  const grants = yield* Effect56.all(baseline.grants.map((grant) => owned(ProxmoxAcl(`${id}-${grant.lane}-grant`, {
+  const grants = yield* Effect57.all(baseline.grants.map((grant) => owned(ProxmoxAcl(`${id}-${grant.lane}-grant`, {
     path: "/",
     propagate: true,
     roleid: grant.roleid,
@@ -4806,9 +4868,9 @@ var declareProvisionBaseline = (id, target, names2 = {}, options = {}) => Effect
 // src/proxmox/qemu.ts
 import { Resource as Resource28 } from "alchemy";
 import * as Provider28 from "alchemy/Provider";
-import * as Effect57 from "effect/Effect";
+import * as Effect58 from "effect/Effect";
 var ProxmoxVm = Resource28("Proxmox.Vm");
-var createForm8 = (props) => ({ ...shape9(props), vmid: String(props.vmid) });
+var createForm9 = (props) => ({ ...shape9(props), vmid: String(props.vmid) });
 var shape9 = (props) => ({
   cores: String(props.cores ?? 1),
   memory: String(props.memory ?? 512),
@@ -4817,7 +4879,7 @@ var shape9 = (props) => ({
   sockets: String(props.sockets ?? 1),
   ...props.net0 === undefined ? {} : { net0: props.net0 }
 });
-var handlers20 = pveHandlers({
+var handlers19 = pveHandlers({
   attributes: (live, props) => ({
     cores: num(live["cores"], 1),
     memory: num(live["memory"], 512),
@@ -4828,7 +4890,7 @@ var handlers20 = pveHandlers({
     vmid: props.vmid
   }),
   collection: (props) => `nodes/${props.node}/qemu`,
-  createForm: createForm8,
+  createForm: createForm9,
   endpoint: {
     create: "pve:POST /nodes/{node}/qemu",
     update: "pve:PUT /nodes/{node}/qemu/{vmid}/config"
@@ -4837,11 +4899,11 @@ var handlers20 = pveHandlers({
   path: (props) => `nodes/${props.node}/qemu/${String(props.vmid)}/config`,
   updateForm: shape9
 });
-var ProxmoxVmProvider = () => Provider28.effect(ProxmoxVm, Effect57.succeed(ProxmoxVm.Provider.of(handlers20)));
+var ProxmoxVmProvider = () => Provider28.effect(ProxmoxVm, Effect58.succeed(ProxmoxVm.Provider.of(handlers19)));
 // src/proxmox/replication-job.ts
 import { Resource as Resource29 } from "alchemy";
 import * as Provider29 from "alchemy/Provider";
-import * as Effect58 from "effect/Effect";
+import * as Effect59 from "effect/Effect";
 
 // src/proxmox/replication-job-form.ts
 var DEFAULT_SCHEDULE = "*/15";
@@ -4852,13 +4914,13 @@ var shape10 = (props) => ({
   schedule: props.schedule ?? DEFAULT_SCHEDULE,
   ...props.rate === undefined ? {} : { rate: String(props.rate) }
 });
-var createBody6 = (props) => ({
+var createBody5 = (props) => ({
   ...shape10(props),
   id: jobId(props),
   target: props.targetNode,
   type: "local"
 });
-var updateBody5 = (props) => ({
+var updateBody4 = (props) => ({
   ...shape10(props),
   delete: "remove_job"
 });
@@ -4871,7 +4933,7 @@ var rateOf = (value) => {
   const parsed = Number.parseFloat(text(value));
   return Number.isFinite(parsed) ? parsed : 0;
 };
-var handlers21 = pveHandlers({
+var handlers20 = pveHandlers({
   attributes: (live, props) => ({
     comment: text(live["comment"], ""),
     disable: bool(live["disable"], false),
@@ -4886,24 +4948,24 @@ var handlers21 = pveHandlers({
     type: text(live["type"], "local")
   }),
   collection: () => "cluster/replication",
-  createForm: createBody6,
+  createForm: createBody5,
   endpoint: {
     create: "pve:POST /cluster/replication",
     update: "pve:PUT /cluster/replication/{id}"
   },
   matches: (attributes2, props) => attributes2.remove_job === "" && attributes2.schedule === (props.schedule ?? DEFAULT_SCHEDULE) && attributes2.disable === (props.disable === true) && attributes2.comment === (props.comment ?? "") && (props.rate === undefined || attributes2.rate === props.rate),
   path: (props) => `cluster/replication/${jobId(props)}`,
-  updateForm: updateBody5
+  updateForm: updateBody4
 });
-var ProxmoxReplicationJobProvider = () => Provider29.effect(ProxmoxReplicationJob, Effect58.succeed(ProxmoxReplicationJob.Provider.of(handlers21)));
+var ProxmoxReplicationJobProvider = () => Provider29.effect(ProxmoxReplicationJob, Effect59.succeed(ProxmoxReplicationJob.Provider.of(handlers20)));
 // src/proxmox/sdn-apply.ts
 import { Resource as Resource30 } from "alchemy";
-import { isResolved as isResolved14 } from "alchemy/Diff";
+import { isResolved as isResolved15 } from "alchemy/Diff";
 import * as Provider30 from "alchemy/Provider";
-import * as Effect60 from "effect/Effect";
+import * as Effect61 from "effect/Effect";
 
 // src/proxmox/sdn-apply-read.ts
-import * as Effect59 from "effect/Effect";
+import * as Effect60 from "effect/Effect";
 var MARKED = [
   "cluster/sdn/zones",
   "cluster/sdn/vnets",
@@ -4912,7 +4974,7 @@ var MARKED = [
   "cluster/sdn/route-maps"
 ];
 var subsystemAbsent = (error) => error instanceof PveError && error.status === 501;
-var markedPending = (target) => Effect59.all(MARKED.map((collection2) => pve(target, "read", "GET", `${collection2}?pending=1`).pipe(Effect59.map((rows) => (rows ?? []).filter((row) => row.state !== undefined).length), Effect59.catchIf(subsystemAbsent, () => Effect59.succeed(0)))), { concurrency: "unbounded" }).pipe(Effect59.map((counts) => counts.reduce((total, count2) => total + count2, 0)));
+var markedPending = (target) => Effect60.all(MARKED.map((collection2) => pve(target, "read", "GET", `${collection2}?pending=1`).pipe(Effect60.map((rows) => (rows ?? []).filter((row) => row.state !== undefined).length), Effect60.catchIf(subsystemAbsent, () => Effect60.succeed(0)))), { concurrency: "unbounded" }).pipe(Effect60.map((counts) => counts.reduce((total, count2) => total + count2, 0)));
 var fabricStaged = (staged, running) => {
   if (staged === undefined && running === undefined)
     return 0;
@@ -4920,9 +4982,9 @@ var fabricStaged = (staged, running) => {
     return "inconsistent";
   return staged === running ? 0 : 1;
 };
-var fabricPending = (target) => Effect59.all(["pending", "running"].map((view) => pve(target, "read", "GET", `cluster/sdn/fabrics/all?${view}=1`).pipe(Effect59.map(canonical3), Effect59.catchIf(subsystemAbsent, () => Effect59.succeed(undefined)))), { concurrency: "unbounded" }).pipe(Effect59.flatMap(([staged, running]) => {
+var fabricPending = (target) => Effect60.all(["pending", "running"].map((view) => pve(target, "read", "GET", `cluster/sdn/fabrics/all?${view}=1`).pipe(Effect60.map(canonical3), Effect60.catchIf(subsystemAbsent, () => Effect60.succeed(undefined)))), { concurrency: "unbounded" }).pipe(Effect60.flatMap(([staged, running]) => {
   const verdict = fabricStaged(staged, running);
-  return verdict === "inconsistent" ? Effect59.die(new Error("cluster/sdn/fabrics/all answered 501 for one of ?pending=1 and ?running=1 and not " + "the other. Refusing to read that as a staged fabric change.")) : Effect59.succeed(verdict);
+  return verdict === "inconsistent" ? Effect60.die(new Error("cluster/sdn/fabrics/all answered 501 for one of ?pending=1 and ?running=1 and not " + "the other. Refusing to read that as a staged fabric change.")) : Effect60.succeed(verdict);
 }));
 var canonical3 = (value) => JSON.stringify(sortDeep(value));
 var sortDeep = (value) => {
@@ -4935,23 +4997,23 @@ var sortDeep = (value) => {
   }
   return value;
 };
-var sdnPendingCount = (target) => Effect59.all([markedPending(target), fabricPending(target)], { concurrency: "unbounded" }).pipe(Effect59.map(([marked, fabric]) => marked + fabric));
+var sdnPendingCount = (target) => Effect60.all([markedPending(target), fabricPending(target)], { concurrency: "unbounded" }).pipe(Effect60.map(([marked, fabric]) => marked + fabric));
 
 // src/proxmox/sdn-apply.ts
 var ProxmoxSdnApply = Resource30("Proxmox.SdnApply");
-var read3 = (props) => sdnPendingCount(props.target).pipe(Effect60.map((pending) => ({ pending })));
-var ProxmoxSdnApplyProvider = () => Provider30.effect(ProxmoxSdnApply, Effect60.succeed(ProxmoxSdnApply.Provider.of({
-  list: () => Effect60.succeed([]),
-  read: Effect60.fn(function* ({ olds }) {
+var read3 = (props) => sdnPendingCount(props.target).pipe(Effect61.map((pending) => ({ pending })));
+var ProxmoxSdnApplyProvider = () => Provider30.effect(ProxmoxSdnApply, Effect61.succeed(ProxmoxSdnApply.Provider.of({
+  list: () => Effect61.succeed([]),
+  read: Effect61.fn(function* ({ olds }) {
     return yield* read3(olds);
   }),
-  diff: Effect60.fn(function* ({ news }) {
-    if (!isResolved14(news))
+  diff: Effect61.fn(function* ({ news }) {
+    if (!isResolved15(news))
       return;
     const { pending } = yield* read3(news);
     return pending === 0 ? { action: "noop" } : { action: "update" };
   }),
-  reconcile: Effect60.fn(function* ({ news }) {
+  reconcile: Effect61.fn(function* ({ news }) {
     const staged = yield* read3(news);
     if (staged.pending === 0)
       return staged;
@@ -4959,16 +5021,16 @@ var ProxmoxSdnApplyProvider = () => Provider30.effect(ProxmoxSdnApply, Effect60.
     yield* pve(news.target, "provision", "PUT", "cluster/sdn");
     const after = yield* read3(news);
     if (after.pending !== 0) {
-      return yield* Effect60.die(new Error(`PUT /cluster/sdn returned no error but ${String(after.pending)} SDN object(s) ` + "are still staged. The running config does not match the declared one -- check " + "`pvesh get /cluster/sdn/zones --pending 1` for the objects PVE refused."));
+      return yield* Effect61.die(new Error(`PUT /cluster/sdn returned no error but ${String(after.pending)} SDN object(s) ` + "are still staged. The running config does not match the declared one -- check " + "`pvesh get /cluster/sdn/zones --pending 1` for the objects PVE refused."));
     }
     return after;
   }),
-  delete: () => Effect60.void
+  delete: () => Effect61.void
 })));
 // src/proxmox/sdn-subnet.ts
 import { Resource as Resource31 } from "alchemy";
 import * as Provider31 from "alchemy/Provider";
-import * as Effect61 from "effect/Effect";
+import * as Effect62 from "effect/Effect";
 
 // src/proxmox/sdn-subnet-form.ts
 var subnetId = (props) => `${props.zone}-${props.cidr.replace("/", "-")}`;
@@ -4987,19 +5049,19 @@ var body5 = (props) => ({
   vnet: props.vnet,
   ...Object.fromEntries(Object.entries(optional3(props)).filter((entry) => entry[1] !== undefined))
 });
-var createForm9 = (props) => ({
+var createForm10 = (props) => ({
   ...body5(props),
   subnet: props.cidr,
   type: "subnet"
 });
-var updateForm5 = (props) => {
+var updateForm6 = (props) => {
   const clear = Object.entries(optional3(props)).filter(([, value]) => value === undefined).map(([key]) => key);
   return withClears(body5(props), clear);
 };
 
 // src/proxmox/sdn-subnet.ts
 var ProxmoxSdnSubnet = Resource31("Proxmox.SdnSubnet");
-var handlers22 = pveHandlers({
+var handlers21 = pveHandlers({
   attributes: (live, props) => {
     const liveVnet = text(live["vnet"]);
     if (liveVnet !== "" && liveVnet !== props.vnet)
@@ -5019,20 +5081,20 @@ var handlers22 = pveHandlers({
     };
   },
   collection: (props) => `cluster/sdn/vnets/${props.vnet}/subnets`,
-  createForm: createForm9,
+  createForm: createForm10,
   endpoint: {
     create: "pve:POST /cluster/sdn/vnets/{vnet}/subnets",
     update: "pve:PUT /cluster/sdn/vnets/{vnet}/subnets/{subnet}"
   },
   matches: (attributes2, props) => attributes2.gateway === (props.gateway ?? "") && attributes2.snat === (props.snat === true) && attributes2.dnszoneprefix === (props.dnszoneprefix ?? "") && attributes2.dhcpDnsServer === (props.dhcpDnsServer ?? "") && attributes2.dhcpRange === declaredRanges(props.dhcpRange),
   path: (props) => `cluster/sdn/vnets/${props.vnet}/subnets/${subnetId(props)}`,
-  updateForm: updateForm5
+  updateForm: updateForm6
 });
-var ProxmoxSdnSubnetProvider = () => Provider31.effect(ProxmoxSdnSubnet, Effect61.succeed(ProxmoxSdnSubnet.Provider.of(handlers22)));
+var ProxmoxSdnSubnetProvider = () => Provider31.effect(ProxmoxSdnSubnet, Effect62.succeed(ProxmoxSdnSubnet.Provider.of(handlers21)));
 // src/proxmox/sdn-vnet.ts
 import { Resource as Resource32 } from "alchemy";
 import * as Provider32 from "alchemy/Provider";
-import * as Effect62 from "effect/Effect";
+import * as Effect63 from "effect/Effect";
 var ProxmoxSdnVnet = Resource32("Proxmox.SdnVnet");
 var tagOf = (value) => typeof value === "number" ? value : undefined;
 var shape11 = (props) => {
@@ -5045,14 +5107,14 @@ var shape11 = (props) => {
     ...props.tag === undefined ? {} : { tag: String(props.tag) }
   };
 };
-var updateForm6 = (props) => {
+var updateForm7 = (props) => {
   const unset2 = [
     ...(props.alias ?? "") === "" ? ["alias"] : [],
     ...props.tag === undefined ? ["tag"] : []
   ];
   return withClears(shape11(props), unset2);
 };
-var handlers23 = pveHandlers({
+var handlers22 = pveHandlers({
   readRole: "provision",
   attributes: (live, props) => ({
     alias: typeof live["alias"] === "string" ? live["alias"] : "",
@@ -5068,13 +5130,13 @@ var handlers23 = pveHandlers({
   endpoint: { create: "pve:POST /cluster/sdn/vnets", update: "pve:PUT /cluster/sdn/vnets/{vnet}" },
   matches: (attributes2, props) => attributes2.zone === props.zone && attributes2.alias === (props.alias ?? "") && attributes2.tag === props.tag && attributes2.vlanaware === (props.vlanaware === true) && attributes2.isolatePorts === (props.isolatePorts === true),
   path: (props) => `cluster/sdn/vnets/${props.vnet}`,
-  updateForm: updateForm6
+  updateForm: updateForm7
 });
-var ProxmoxSdnVnetProvider = () => Provider32.effect(ProxmoxSdnVnet, Effect62.succeed(ProxmoxSdnVnet.Provider.of(handlers23)));
+var ProxmoxSdnVnetProvider = () => Provider32.effect(ProxmoxSdnVnet, Effect63.succeed(ProxmoxSdnVnet.Provider.of(handlers22)));
 // src/proxmox/sdn-zone.ts
 import { Resource as Resource33 } from "alchemy";
 import * as Provider33 from "alchemy/Provider";
-import * as Effect63 from "effect/Effect";
+import * as Effect64 from "effect/Effect";
 var ProxmoxSdnZone = Resource33("Proxmox.SdnZone");
 var sameIpam = (live, declared2) => (live === "" ? "pve" : live) === (declared2 === undefined || declared2 === "" ? "pve" : declared2);
 var body6 = (props) => ({
@@ -5095,7 +5157,7 @@ var clearable = {
   vlan: ["dns", "dnszone", "ipam", "mtu", "nodes"],
   vxlan: ["dns", "dnszone", "ipam", "mtu", "nodes"]
 };
-var handlers24 = pveHandlers({
+var handlers23 = pveHandlers({
   readRole: "provision",
   attributes: (live, props) => {
     const liveType = text(live["type"]);
@@ -5127,13 +5189,13 @@ var handlers24 = pveHandlers({
     return withClears(fields, clear);
   }
 });
-var ProxmoxSdnZoneProvider = () => Provider33.effect(ProxmoxSdnZone, Effect63.succeed(ProxmoxSdnZone.Provider.of(handlers24)));
+var ProxmoxSdnZoneProvider = () => Provider33.effect(ProxmoxSdnZone, Effect64.succeed(ProxmoxSdnZone.Provider.of(handlers23)));
 // src/proxmox/storage.ts
 import { Resource as Resource34 } from "alchemy";
-import { isResolved as isResolved15 } from "alchemy/Diff";
+import { isResolved as isResolved16 } from "alchemy/Diff";
 import * as Provider34 from "alchemy/Provider";
 import * as storage2 from "@distilled.cloud/proxmox/storage";
-import * as Effect65 from "effect/Effect";
+import * as Effect66 from "effect/Effect";
 
 // src/proxmox/storage-form.ts
 var STORAGE_CREATE = "pve:POST /storage";
@@ -5150,27 +5212,27 @@ var mutable2 = (props) => ({
   ...field6("prune-backups", props["prune-backups"]),
   ...field6("shared", flag(props.shared))
 });
-var createForm10 = (props) => ({
+var createForm11 = (props) => ({
   ...locatorForm(props.locator),
   ...mutable2(props),
   storage: props.storage,
   type: props.type
 });
-var updateForm7 = (props) => ({
+var updateForm8 = (props) => ({
   ...mutable2(props),
   storage: props.storage
 });
-var toDistilledCreate = (props) => underscored(createForm10(props));
-var toDistilledUpdate = (props) => underscored(updateForm7(props));
+var toDistilledCreate2 = (props) => underscored(createForm11(props));
+var toDistilledUpdate2 = (props) => underscored(updateForm8(props));
 
 // src/proxmox/storage-wire.ts
 import * as storage from "@distilled.cloud/proxmox/storage";
-import * as Effect64 from "effect/Effect";
+import * as Effect65 from "effect/Effect";
 var str2 = (value, fallback = "") => typeof value === "string" ? value : fallback;
 var tokens = (value) => value.split(",").map((part) => part.trim()).filter((part) => part !== "").sort().join(",");
 var sameList2 = (declared2, live) => declared2 === undefined || tokens(declared2) === tokens(live);
 var same7 = (declared2, live) => declared2 === undefined || declared2 === live;
-var attributesOf7 = (live, props) => {
+var attributesOf8 = (live, props) => {
   const data = live;
   return {
     comment: str2(data["comment"]),
@@ -5184,27 +5246,27 @@ var attributesOf7 = (live, props) => {
     type: str2(data["type"], props.type)
   };
 };
-var readStorageOrFail = (props) => readOrUnreadable(runPve(props.target, "provision", false, storage.getStorage({ storage: props.storage }))).pipe(Effect64.map((live) => live === UNREADABLE ? UNREADABLE : attributesOf7(live, props)));
-var readStorage = (props) => readStorageOrFail(props).pipe(Effect64.orElseSucceed(() => {
+var readStorageOrFail = (props) => readOrUnreadable(runPve(props.target, "provision", false, storage.getStorage({ storage: props.storage }))).pipe(Effect65.map((live) => live === UNREADABLE ? UNREADABLE : attributesOf8(live, props)));
+var readStorage = (props) => readStorageOrFail(props).pipe(Effect65.orElseSucceed(() => {
   return;
 }));
-var dropUnreadable6 = (live) => live === UNREADABLE ? undefined : live;
-var matches7 = (attributes2, props) => sameList2(props.content, attributes2.content) && sameList2(props.nodes, attributes2.nodes) && sameList2(props["prune-backups"], attributes2["prune-backups"]) && same7(props.disable, attributes2.disable) && same7(props.shared, attributes2.shared) && same7(props.preallocation, attributes2.preallocation) && same7(props.comment, attributes2.comment);
+var dropUnreadable7 = (live) => live === UNREADABLE ? undefined : live;
+var matches8 = (attributes2, props) => sameList2(props.content, attributes2.content) && sameList2(props.nodes, attributes2.nodes) && sameList2(props["prune-backups"], attributes2["prune-backups"]) && same7(props.disable, attributes2.disable) && same7(props.shared, attributes2.shared) && same7(props.preallocation, attributes2.preallocation) && same7(props.comment, attributes2.comment);
 
 // src/proxmox/storage.ts
 var ProxmoxStorage = Resource34("Proxmox.Storage", {
   defaultRemovalPolicy: "retain"
 });
-var ProxmoxStorageProvider = () => Provider34.effect(ProxmoxStorage, Effect65.succeed(ProxmoxStorage.Provider.of({
-  list: () => Effect65.succeed([]),
-  read: Effect65.fn(function* ({ olds, output }) {
-    return dropUnreadable6(yield* output === undefined ? readStorage(olds) : readStorageOrFail(olds));
+var ProxmoxStorageProvider = () => Provider34.effect(ProxmoxStorage, Effect66.succeed(ProxmoxStorage.Provider.of({
+  list: () => Effect66.succeed([]),
+  read: Effect66.fn(function* ({ olds, output }) {
+    return dropUnreadable7(yield* output === undefined ? readStorage(olds) : readStorageOrFail(olds));
   }),
-  diff: Effect65.fn(function* ({ news, output }) {
-    if (!isResolved15(news))
+  diff: Effect66.fn(function* ({ news, output }) {
+    if (!isResolved16(news))
       return;
-    yield* guardWrite2(STORAGE_CREATE, createForm10(news), output === undefined);
-    yield* guardWrite2(STORAGE_UPDATE, updateForm7(news), false);
+    yield* guardWrite2(STORAGE_CREATE, createForm11(news), output === undefined);
+    yield* guardWrite2(STORAGE_UPDATE, updateForm8(news), false);
     if (output === undefined)
       return;
     const live = yield* readStorageOrFail(news);
@@ -5213,67 +5275,67 @@ var ProxmoxStorageProvider = () => Provider34.effect(ProxmoxStorage, Effect65.su
       return { action: "noop" };
     }
     if (live === undefined) {
-      yield* guardWrite2(STORAGE_CREATE, createForm10(news), true);
+      yield* guardWrite2(STORAGE_CREATE, createForm11(news), true);
       return { action: "update" };
     }
-    return matches7(live, news) ? { action: "noop" } : { action: "update" };
+    return matches8(live, news) ? { action: "noop" } : { action: "update" };
   }),
-  reconcile: Effect65.fn(function* ({ news }) {
-    const before = dropUnreadable6(yield* readStorage(news));
-    yield* guardWrite2(STORAGE_CREATE, createForm10(news), before === undefined);
-    yield* guardWrite2(STORAGE_UPDATE, updateForm7(news), false);
+  reconcile: Effect66.fn(function* ({ news }) {
+    const before = dropUnreadable7(yield* readStorage(news));
+    yield* guardWrite2(STORAGE_CREATE, createForm11(news), before === undefined);
+    yield* guardWrite2(STORAGE_UPDATE, updateForm8(news), false);
     if (before === undefined) {
-      yield* runPve(news.target, "provision", true, storage2.createStorage(toDistilledCreate(news)));
-    } else if (!matches7(before, news)) {
-      yield* runPve(news.target, "provision", true, storage2.putStorage(toDistilledUpdate(news)));
+      yield* runPve(news.target, "provision", true, storage2.createStorage(toDistilledCreate2(news)));
+    } else if (!matches8(before, news)) {
+      yield* runPve(news.target, "provision", true, storage2.putStorage(toDistilledUpdate2(news)));
     }
-    const after = dropUnreadable6(yield* readStorage(news));
+    const after = dropUnreadable7(yield* readStorage(news));
     if (after === undefined) {
-      return yield* Effect65.die(new Error(`storage/${news.storage}: the write returned no error but the storage is still ` + 'absent. PVE wraps every answer in {"data":...} and can report success on a ' + "call that did nothing -- read back rather than trusting the status code."));
+      return yield* Effect66.die(new Error(`storage/${news.storage}: the write returned no error but the storage is still ` + 'absent. PVE wraps every answer in {"data":...} and can report success on a ' + "call that did nothing -- read back rather than trusting the status code."));
     }
     return after;
   }),
-  delete: Effect65.fn(function* ({ olds }) {
+  delete: Effect66.fn(function* ({ olds }) {
     yield* runPve(olds.target, "provision", true, storage2.deleteStorage({ storage: olds.storage }));
   })
 })));
 // src/proxmox/zfs-pool.ts
 import { Resource as Resource35 } from "alchemy";
-import { isResolved as isResolved16 } from "alchemy/Diff";
+import { isResolved as isResolved17 } from "alchemy/Diff";
 import * as Provider35 from "alchemy/Provider";
-import * as Effect68 from "effect/Effect";
+import * as Effect69 from "effect/Effect";
 
 // src/proxmox/zfs-pool-wire.ts
-import * as nodes from "@distilled.cloud/proxmox/nodes";
-import * as Effect66 from "effect/Effect";
+import * as nodes3 from "@distilled.cloud/proxmox/nodes";
+import * as Effect67 from "effect/Effect";
 var leafDevices = (children) => Array.isArray(children) ? children.flatMap((entry) => {
   const vdev = entry;
   const nested = leafDevices(vdev.children);
   return nested.length > 0 ? nested : [text(vdev.name)].filter((name) => name !== "");
 }) : [];
-var attributesOf8 = (live, props) => ({
+var attributesOf9 = (live, props) => ({
   devices: leafDevices(live.children).join(","),
   errors: text(live.errors, "unknown"),
   name: props.name,
   node: props.node,
   state: text(live.state, "unknown")
 });
-var readPoolOrFail = (props) => readOrUnreadable(runPve(props.target, "read", false, nodes.getNodeDiskZfs({ name: props.name, node: props.node }))).pipe(Effect66.map((live) => {
+var readPoolOrFail = (props) => readOrUnreadable(runPve(props.target, "read", false, nodes3.getNodeDiskZfs({ name: props.name, node: props.node }))).pipe(Effect67.map((live) => {
   if (live === UNREADABLE)
     return UNREADABLE;
-  return text(live.name) === "" ? undefined : attributesOf8(live, props);
+  return text(live.name) === "" ? undefined : attributesOf9(live, props);
 }));
-var readPool = (props) => readPoolOrFail(props).pipe(Effect66.orElseSucceed(() => {
+var readPool = (props) => readPoolOrFail(props).pipe(Effect67.orElseSucceed(() => {
   return;
 }));
-var dropUnreadable7 = (live) => live === UNREADABLE ? undefined : live;
+var dropUnreadable8 = (live) => live === UNREADABLE ? undefined : live;
 
 // src/proxmox/zfs-pool-form.ts
-import * as Effect67 from "effect/Effect";
-import * as nodes2 from "@distilled.cloud/proxmox/nodes";
+import * as Effect68 from "effect/Effect";
+import * as nodes4 from "@distilled.cloud/proxmox/nodes";
 var ZFS_POOL_CREATE = "pve:POST /nodes/{node}/disks/zfs";
 var zfsPoolCreateEndpoint = (props) => props.devices === undefined || props.raidlevel === undefined ? undefined : ZFS_POOL_CREATE;
-var createForm11 = (props) => ({
+var createForm12 = (props) => ({
   ...props.devices === undefined ? {} : { devices: props.devices.join(",") },
   name: props.name,
   ...props.raidlevel === undefined ? {} : { raidlevel: props.raidlevel },
@@ -5281,8 +5343,8 @@ var createForm11 = (props) => ({
   ...props.compression === undefined ? {} : { compression: props.compression },
   ...props["draid-config"] === undefined ? {} : { "draid-config": props["draid-config"] }
 });
-var toDistilledCreate2 = (props) => {
-  const form = createForm11(props);
+var toDistilledCreate3 = (props) => {
+  const form = createForm12(props);
   return {
     ...form,
     draid_config: form["draid-config"],
@@ -5290,43 +5352,43 @@ var toDistilledCreate2 = (props) => {
   };
 };
 var SETTLE_ATTEMPTS = 30;
-var createPool = (props, read4) => Effect67.gen(function* () {
+var createPool = (props, read4) => Effect68.gen(function* () {
   const existing = yield* read4(props);
   if (existing !== undefined)
     return existing;
   if (props.devices === undefined || props.raidlevel === undefined) {
-    return yield* Effect67.die(new Error(`${props.node}/${props.name}: this is an adopt-only declaration (no \`devices\` or ` + "`raidlevel`) and the pool is not there to adopt. An adopt-only Proxmox.ZfsPool never " + "creates -- declare both fields for a pool this resource should build, or point this " + "declaration at a pool that already exists on this node."));
+    return yield* Effect68.die(new Error(`${props.node}/${props.name}: this is an adopt-only declaration (no \`devices\` or ` + "`raidlevel`) and the pool is not there to adopt. An adopt-only Proxmox.ZfsPool never " + "creates -- declare both fields for a pool this resource should build, or point this " + "declaration at a pool that already exists on this node."));
   }
-  yield* guardForm(zfsPoolCreateEndpoint(props), asForm2(createForm11(props)), true);
-  const upid = yield* runPve(props.target, "provision", true, nodes2.createNodeDiskZfs(toDistilledCreate2(props)));
-  const settle4 = (attempts) => Effect67.gen(function* () {
+  yield* guardForm(zfsPoolCreateEndpoint(props), asForm2(createForm12(props)), true);
+  const upid = yield* runPve(props.target, "provision", true, nodes4.createNodeDiskZfs(toDistilledCreate3(props)));
+  const settle4 = (attempts) => Effect68.gen(function* () {
     const live = yield* read4(props);
     if (live !== undefined || attempts <= 0)
       return live;
-    yield* Effect67.sleep("2 seconds");
+    yield* Effect68.sleep("2 seconds");
     return yield* settle4(attempts - 1);
   });
   const after = yield* settle4(SETTLE_ATTEMPTS);
   if (after === undefined) {
-    return yield* Effect67.die(new Error(`nodes/${props.node}/disks/zfs/${props.name}: POST returned ${text(upid, "(no UPID)")} ` + "but the pool has not appeared. That POST only forks a `zfscreate` worker, so the task " + `holds the real error -- read it with \`pvesh get /nodes/${props.node}/tasks/<upid>/log\`. ` + "NOTHING WAS RETRIED AND NOTHING WAS CLEANED UP: if the worker reached `zpool create`, " + "the declared devices have already been written to. DO NOT RE-RUN THIS DEPLOY BEFORE " + 'READING THAT LOG: `read` cannot tell "the worker is still running" from "the pool is ' + 'genuinely gone", so a re-run this soon can POST a SECOND `zpool create` at the SAME ' + "devices while the first one is still mid-write -- confirm the task finished (one way " + "or the other) before trying again."));
+    return yield* Effect68.die(new Error(`nodes/${props.node}/disks/zfs/${props.name}: POST returned ${text(upid, "(no UPID)")} ` + "but the pool has not appeared. That POST only forks a `zfscreate` worker, so the task " + `holds the real error -- read it with \`pvesh get /nodes/${props.node}/tasks/<upid>/log\`. ` + "NOTHING WAS RETRIED AND NOTHING WAS CLEANED UP: if the worker reached `zpool create`, " + "the declared devices have already been written to. DO NOT RE-RUN THIS DEPLOY BEFORE " + 'READING THAT LOG: `read` cannot tell "the worker is still running" from "the pool is ' + 'genuinely gone", so a re-run this soon can POST a SECOND `zpool create` at the SAME ' + "devices while the first one is still mid-write -- confirm the task finished (one way " + "or the other) before trying again."));
   }
   return after;
 });
-var destroyPool = (props) => runPve(props.target, "provision", true, nodes2.deleteNodeDiskZfs({ name: props.name, node: props.node }));
+var destroyPool = (props) => runPve(props.target, "provision", true, nodes4.deleteNodeDiskZfs({ name: props.name, node: props.node }));
 
 // src/proxmox/zfs-pool.ts
 var ProxmoxZfsPool = Resource35("Proxmox.ZfsPool", {
   defaultRemovalPolicy: "retain"
 });
-var ProxmoxZfsPoolProvider = () => Provider35.effect(ProxmoxZfsPool, Effect68.succeed(ProxmoxZfsPool.Provider.of({
-  list: () => Effect68.succeed([]),
-  read: Effect68.fn(function* ({ olds, output }) {
-    return dropUnreadable7(yield* output === undefined ? readPool(olds) : readPoolOrFail(olds));
+var ProxmoxZfsPoolProvider = () => Provider35.effect(ProxmoxZfsPool, Effect69.succeed(ProxmoxZfsPool.Provider.of({
+  list: () => Effect69.succeed([]),
+  read: Effect69.fn(function* ({ olds, output }) {
+    return dropUnreadable8(yield* output === undefined ? readPool(olds) : readPoolOrFail(olds));
   }),
-  diff: Effect68.fn(function* ({ news, output }) {
-    if (!isResolved16(news))
+  diff: Effect69.fn(function* ({ news, output }) {
+    if (!isResolved17(news))
       return;
-    yield* guardForm(zfsPoolCreateEndpoint(news), asForm2(createForm11(news)), output === undefined);
+    yield* guardForm(zfsPoolCreateEndpoint(news), asForm2(createForm12(news)), output === undefined);
     if (output === undefined)
       return;
     const live = yield* readPoolOrFail(news);
@@ -5335,15 +5397,15 @@ var ProxmoxZfsPoolProvider = () => Provider35.effect(ProxmoxZfsPool, Effect68.su
       return { action: "noop" };
     }
     if (live === undefined) {
-      yield* guardForm(zfsPoolCreateEndpoint(news), asForm2(createForm11(news)), true);
+      yield* guardForm(zfsPoolCreateEndpoint(news), asForm2(createForm12(news)), true);
       return { action: "update" };
     }
     return { action: "noop" };
   }),
-  reconcile: Effect68.fn(function* ({ news }) {
-    return yield* createPool(news, (props) => readPool(props).pipe(Effect68.map(dropUnreadable7)));
+  reconcile: Effect69.fn(function* ({ news }) {
+    return yield* createPool(news, (props) => readPool(props).pipe(Effect69.map(dropUnreadable8)));
   }),
-  delete: Effect68.fn(function* ({ olds }) {
+  delete: Effect69.fn(function* ({ olds }) {
     yield* destroyPool(olds);
   })
 })));
@@ -5423,5 +5485,5 @@ export {
   violations
 };
 
-//# debugId=D100179D867AAA0364756E2164756E21
+//# debugId=AF866CF2F0A2718F64756E2164756E21
 //# sourceMappingURL=index.js.map