@homeflare/alchemy 0.37.0 → 0.37.2

package/dist/proxmox/index.js

@@ -1690,9 +1690,7 @@ var listRows = (props) => {
       return runPve(props.target, "read", false, nodes.listNodeCephMds({ node })).pipe(Effect13.map((rows) => rows));
   }
 };
-var readDaemon = (props) => listRows(props).pipe(Effect13.map((rows) => daemonAttributes(rows, props)), Effect13.orElseSucceed(() => {
-  return;
-}));
+var readDaemon = (props) => listRows(props).pipe(Effect13.map((rows) => daemonAttributes(rows, props)));
 var createDaemon = (props) => {
   const node = props.node;
   const id = daemonId(props);
@@ -1790,14 +1788,13 @@ var ProxmoxCephFlagProvider = () => Provider5.effect(ProxmoxCephFlag, Effect15.s
 import { Resource as Resource6 } from "alchemy";
 import { isResolved as isResolved5 } from "alchemy/Diff";
 import * as Provider6 from "alchemy/Provider";
-import * as Effect18 from "effect/Effect";
+import * as Effect17 from "effect/Effect";
 
 // src/proxmox/ceph-fs-distilled.ts
 import * as nodes2 from "@distilled.cloud/proxmox/nodes";
-import * as Effect17 from "effect/Effect";
+import * as Effect16 from "effect/Effect";
 
 // src/proxmox/ceph-fs-wire.ts
-import * as Effect16 from "effect/Effect";
 var readRow = (live, props) => {
   const row = (Array.isArray(live) ? live : []).filter((entry) => typeof entry === "object" && entry !== null).find((entry) => entry["name"] === props.name);
   if (row === undefined)
@@ -1819,77 +1816,58 @@ var createForm2 = (props) => ({
   ...field("add-storage", flag(props["add-storage"])),
   ...field("pg_num", props.pg_num === undefined ? undefined : String(props.pg_num))
 });
-var destroyPath = (props) => {
-  const query = [
-    props["remove-pools"] === true ? "remove-pools=1" : undefined,
-    props["remove-storages"] === true ? "remove-storages=1" : undefined
-  ].filter((part) => part !== undefined);
-  return query.length === 0 ? objectPath(props) : `${objectPath(props)}?${query.join("&")}`;
-};
-var settle = (target, node, upid, what) => Effect16.gen(function* () {
-  for (let attempt = 0;attempt < POLL_ATTEMPTS; attempt += 1) {
-    const status = yield* pve(target, "read", "GET", `nodes/${node}/tasks/${encodeURIComponent(upid)}/status`).pipe(Effect16.orElseSucceed(() => {
-      return;
-    }));
-    if (status?.status === "stopped") {
-      const exit = text(status.exitstatus);
-      if (exit === "OK")
-        return;
-      return yield* Effect16.die(new Error(`${what}: PVE task ${upid} finished with "${exit === "" ? "no exit status" : exit}". ` + "The write returned HTTP 200 because it only forked the worker -- the real error is " + `in \`pvesh get /nodes/${node}/tasks/${upid}/log\`.`));
-    }
-    yield* Effect16.sleep(POLL_SECONDS * 1000);
-  }
-  return yield* Effect16.die(new Error(`${what}: PVE task ${upid} was still running after ` + `${String(POLL_ATTEMPTS * POLL_SECONDS)}s, or its ` + "status could not be read. Check the task log, and check that the `read` role holds " + `Sys.Audit on /nodes/${node} -- each call mints a new token, so the poller is never the ` + "task owner and is answered 403 rather than told to wait."));
-});
-var destroyFs = (props) => Effect16.gen(function* () {
-  const upid = text(yield* pve(props.target, "provision", "DELETE", destroyPath(props)));
-  if (upid !== "")
-    yield* settle(props.target, props.node, upid, destroyPath(props));
-});
 var notCreated2 = (props) => new Error(`${objectPath(props)}: the create task finished but the filesystem is not in ` + `GET nodes/${props.node}/ceph/fs. Check the task log -- a PVE worker can exit having ` + "rolled back the pools it had just made.");
 var notDestroyed = (props) => new Error(`${objectPath(props)}: the destroy task finished but the filesystem is still in ` + `GET nodes/${props.node}/ceph/fs. PVE refuses to destroy a CephFS while a PVE storage entry ` + "of type cephfs still references it and is not disabled.");
 
 // src/proxmox/ceph-fs-distilled.ts
-var readFs = (props) => runPve(props.target, "read", false, nodes2.listNodeCephFs({ node: props.node })).pipe(Effect17.map((rows) => readRow(rows, props)), Effect17.orElseSucceed(() => {
-  return;
-}));
+var readFs = (props) => runPve(props.target, "read", false, nodes2.listNodeCephFs({ node: props.node })).pipe(Effect16.map((rows) => readRow(rows, props)));
 var toDistilledCreate = (props) => ({
   ...createForm2(props),
   name: props.name,
   node: props.node
 });
-var settleCreate = (props, upid) => Effect17.gen(function* () {
+var settleTask = (props, upid) => Effect16.gen(function* () {
   for (let attempt = 0;attempt < POLL_ATTEMPTS; attempt += 1) {
-    const status = yield* runPve(props.target, "read", false, nodes2.getNodeTaskStatus({ node: props.node, upid })).pipe(Effect17.orElseSucceed(() => {
+    const status = yield* runPve(props.target, "read", false, nodes2.getNodeTaskStatus({ node: props.node, upid })).pipe(Effect16.orElseSucceed(() => {
       return;
     }));
     if (status?.status === "stopped") {
       if (status.exitstatus === "OK")
         return;
-      return yield* Effect17.die(new Error(`${objectPath(props)}: PVE task ${upid} finished with "${status.exitstatus ?? "no exit status"}". ` + "The write returned HTTP 200 because it only forked the worker -- the real error is " + `in \`pvesh get /nodes/${props.node}/tasks/${upid}/log\`.`));
+      return yield* Effect16.die(new Error(`${objectPath(props)}: PVE task ${upid} finished with "${status.exitstatus ?? "no exit status"}". ` + "The write returned HTTP 200 because it only forked the worker -- the real error is " + `in \`pvesh get /nodes/${props.node}/tasks/${upid}/log\`.`));
     }
-    yield* Effect17.sleep(POLL_SECONDS * 1000);
+    yield* Effect16.sleep(POLL_SECONDS * 1000);
   }
-  return yield* Effect17.die(new Error(`${objectPath(props)}: PVE task ${upid} was still running after ` + `${String(POLL_ATTEMPTS * POLL_SECONDS)}s, or its status could not be read. Check the ` + "task log, and check that the `read` role holds Sys.Audit on " + `/nodes/${props.node} -- each call mints a new token, so the poller is never the task ` + "owner and is answered 403 rather than told to wait."));
+  return yield* Effect16.die(new Error(`${objectPath(props)}: PVE task ${upid} was still running after ` + `${String(POLL_ATTEMPTS * POLL_SECONDS)}s, or its status could not be read. Check the ` + "task log, and check that the `read` role holds Sys.Audit on " + `/nodes/${props.node} -- each call mints a new token, so the poller is never the task ` + "owner and is answered 403 rather than told to wait."));
 });
-var createFs = (props) => Effect17.gen(function* () {
+var createFs = (props) => Effect16.gen(function* () {
   const upid = yield* runPve(props.target, "provision", true, nodes2.updateNodeCephFs(toDistilledCreate(props)));
   if (upid === "") {
-    return yield* Effect17.die(new Error(`${objectPath(props)}: POST returned no task id. PVE wraps every answer in ` + '{"data":...} and can report success on a call that did nothing.'));
+    return yield* Effect16.die(new Error(`${objectPath(props)}: POST returned no task id. PVE wraps every answer in ` + '{"data":...} and can report success on a call that did nothing.'));
   }
-  yield* settleCreate(props, upid);
+  yield* settleTask(props, upid);
+});
+var destroyFs = (props) => Effect16.gen(function* () {
+  const upid = yield* runPve(props.target, "provision", true, nodes2.deleteNodeCephFs({
+    node: props.node,
+    name: props.name,
+    ...props["remove-pools"] === true ? { remove_pools: "1" } : {},
+    ...props["remove-storages"] === true ? { remove_storages: "1" } : {}
+  })).pipe(Effect16.catchTag("CephFsNotFound", () => Effect16.succeed("")));
+  if (upid !== "")
+    yield* settleTask(props, upid);
 });
 
 // src/proxmox/ceph-fs.ts
 var ProxmoxCephFs = Resource6("Proxmox.CephFs", {
   defaultRemovalPolicy: "retain"
 });
-var ProxmoxCephFsProvider = () => Provider6.effect(ProxmoxCephFs, Effect18.succeed(ProxmoxCephFs.Provider.of({
-  list: () => Effect18.succeed([]),
-  read: Effect18.fn(function* ({ olds }) {
+var ProxmoxCephFsProvider = () => Provider6.effect(ProxmoxCephFs, Effect17.succeed(ProxmoxCephFs.Provider.of({
+  list: () => Effect17.succeed([]),
+  read: Effect17.fn(function* ({ olds }) {
     return yield* readFs(olds);
   }),
-  diff: Effect18.fn(function* ({ news, output }) {
+  diff: Effect17.fn(function* ({ news, output }) {
     if (!isResolved5(news))
       return;
     yield* guardWrite2(CEPH_FS_CREATE, createForm2(news), output === undefined);
@@ -1905,34 +1883,34 @@ var ProxmoxCephFsProvider = () => Provider6.effect(ProxmoxCephFs, Effect18.succe
     }
     return { action: "noop" };
   }),
-  reconcile: Effect18.fn(function* ({ news }) {
+  reconcile: Effect17.fn(function* ({ news }) {
     const live = yield* readFs(news);
     if (live !== undefined)
       return live;
     yield* createFs(news);
     const after = yield* readFs(news);
     if (after === undefined)
-      return yield* Effect18.die(notCreated2(news));
+      return yield* Effect17.die(notCreated2(news));
     return after;
   }),
-  delete: Effect18.fn(function* ({ olds }) {
+  delete: Effect17.fn(function* ({ olds }) {
     if ((yield* readFs(olds)) === undefined)
       return;
     yield* destroyFs(olds);
     const after = yield* readFs(olds);
     if (after !== undefined)
-      return yield* Effect18.die(notDestroyed(olds));
+      return yield* Effect17.die(notDestroyed(olds));
   })
 })));
 // src/proxmox/ceph-osd.ts
 import { Resource as Resource7 } from "alchemy";
 import { isResolved as isResolved6 } from "alchemy/Diff";
 import * as Provider7 from "alchemy/Provider";
-import * as Effect21 from "effect/Effect";
+import * as Effect20 from "effect/Effect";
 
 // src/proxmox/ceph-osd-tree.ts
 import * as nodes3 from "@distilled.cloud/proxmox/nodes";
-import * as Effect19 from "effect/Effect";
+import * as Effect18 from "effect/Effect";
 var branches = (node) => (Array.isArray(node["children"]) ? node["children"] : []).filter((child) => typeof child === "object" && child !== null);
 var osdLeaves = (tree) => {
   const root = tree["root"];
@@ -1958,23 +1936,23 @@ var osdAttributes = (leaf, props) => ({
   status: text(leaf["status"]),
   total_space: num(leaf["total_space"], 0)
 });
-var readOsd = (props) => runPve(props.target, "read", false, nodes3.getNodeCephOsd({ node: props.node })).pipe(Effect19.map((t) => {
+var readOsd = (props) => runPve(props.target, "read", false, nodes3.getNodeCephOsd({ node: props.node })).pipe(Effect18.map((t) => {
   const leaf = findOsd(t, props.osdid);
   return leaf === undefined ? undefined : osdAttributes(leaf, props);
 }));
 
 // src/proxmox/ceph-osd-write.ts
 import * as nodes4 from "@distilled.cloud/proxmox/nodes";
-import * as Effect20 from "effect/Effect";
+import * as Effect19 from "effect/Effect";
 var OSD_CREATE_ENDPOINT = "pve:POST /nodes/{node}/ceph/osd";
 var describe = (props) => `osd.${String(props.osdid)} on ${props.node}`;
 var createOsdForm = (props, dev) => ({
   dev,
   ...props.device_class === undefined ? {} : { "crush-device-class": props.device_class }
 });
-var createOsd = Effect20.fn(function* (news) {
+var createOsd = Effect19.fn(function* (news) {
   if (news.dev === undefined) {
-    return yield* Effect20.die(new Error(`${describe(news)}: no such OSD in the CRUSH tree, and no \`dev\` was declared. ` + "Without a device this resource is an ASSERTION over an OSD that must already " + "exist. Declare `dev` to let it create one -- which WIPES that device -- or fix " + "the declaration; if the disk was there yesterday, a replica is missing and Ceph " + "is degraded."));
+    return yield* Effect19.die(new Error(`${describe(news)}: no such OSD in the CRUSH tree, and no \`dev\` was declared. ` + "Without a device this resource is an ASSERTION over an OSD that must already " + "exist. Declare `dev` to let it create one -- which WIPES that device -- or fix " + "the declaration; if the disk was there yesterday, a replica is missing and Ceph " + "is degraded."));
   }
   const form = createOsdForm(news, news.dev);
   yield* guardForm(OSD_CREATE_ENDPOINT, form, true);
@@ -1985,7 +1963,7 @@ var createOsd = Effect20.fn(function* (news) {
   }));
   const created = yield* readOsd(news);
   if (created === undefined) {
-    return yield* Effect20.die(new Error(`${describe(news)}: the create returned no error but osd.${String(news.osdid)} is ` + "still absent. Ceph allocates OSD ids and cannot be told which to use, so it most " + "likely assigned a different number -- check `ceph osd tree`, and declare the id it " + "actually gave the device rather than deploying again."));
+    return yield* Effect19.die(new Error(`${describe(news)}: the create returned no error but osd.${String(news.osdid)} is ` + "still absent. Ceph allocates OSD ids and cannot be told which to use, so it most " + "likely assigned a different number -- check `ceph osd tree`, and declare the id it " + "actually gave the device rather than deploying again."));
   }
   return created;
 });
@@ -2002,11 +1980,11 @@ var ProxmoxCephOsd = Resource7("Proxmox.CephOsd", {
 var settled = (live, props) => (props.host === undefined || props.host === live.host) && (props.device_class === undefined || props.device_class === live.device_class);
 var describe2 = (props) => `osd.${String(props.osdid)} (read via nodes/${props.node}/ceph/osd)`;
 var handlers3 = {
-  list: () => Effect21.succeed([]),
-  read: Effect21.fn(function* ({ olds }) {
+  list: () => Effect20.succeed([]),
+  read: Effect20.fn(function* ({ olds }) {
     return yield* readOsd(olds);
   }),
-  diff: Effect21.fn(function* ({
+  diff: Effect20.fn(function* ({
     news,
     output
   }) {
@@ -2019,27 +1997,27 @@ var handlers3 = {
       return { action: "update" };
     return settled(live, news) ? { action: "noop" } : { action: "update" };
   }),
-  reconcile: Effect21.fn(function* ({ news }) {
+  reconcile: Effect20.fn(function* ({ news }) {
     const live = yield* readOsd(news);
     if (live === undefined) {
       return yield* createOsd(news);
     }
     if (!settled(live, news)) {
-      return yield* Effect21.die(new Error(`${describe2(news)}: exists but not as declared -- live host=${live.host} ` + `device_class=${live.device_class}. Nothing here moves an OSD between hosts or ` + "reclassifies it; fix the declaration, or move it deliberately with `ceph osd crush " + "move` / `ceph osd crush set-device-class` and deploy again."));
+      return yield* Effect20.die(new Error(`${describe2(news)}: exists but not as declared -- live host=${live.host} ` + `device_class=${live.device_class}. Nothing here moves an OSD between hosts or ` + "reclassifies it; fix the declaration, or move it deliberately with `ceph osd crush " + "move` / `ceph osd crush set-device-class` and deploy again."));
     }
     return live;
   }),
-  delete: Effect21.fn(function* ({ olds }) {
+  delete: Effect20.fn(function* ({ olds }) {
     yield* destroyOsd(olds);
   })
 };
-var ProxmoxCephOsdProvider = () => Provider7.effect(ProxmoxCephOsd, Effect21.succeed(ProxmoxCephOsd.Provider.of(handlers3)));
+var ProxmoxCephOsdProvider = () => Provider7.effect(ProxmoxCephOsd, Effect20.succeed(ProxmoxCephOsd.Provider.of(handlers3)));
 // src/proxmox/ceph-pool.ts
 import { Resource as Resource8 } from "alchemy";
 import { isResolved as isResolved7 } from "alchemy/Diff";
 import * as Provider8 from "alchemy/Provider";
 import * as nodes7 from "@distilled.cloud/proxmox/nodes";
-import * as Effect24 from "effect/Effect";
+import * as Effect23 from "effect/Effect";
 
 // src/proxmox/ceph-pool-form.ts
 var object = (props) => `nodes/${props.node}/ceph/pool/${props.name}`;
@@ -2068,21 +2046,21 @@ var createBody = (props) => ({
 
 // src/proxmox/ceph-pool-settle.ts
 import * as nodes5 from "@distilled.cloud/proxmox/nodes";
-import * as Effect22 from "effect/Effect";
-var confirmAbsent = (props, describe3) => runPve(props.target, "read", false, nodes5.listNodeCephPool({ node: props.node })).pipe(Effect22.flatMap((rows) => rows.some((row) => row.pool_name === props.name) ? Effect22.die(new Error(`${describe3}: the cluster lists this pool but its status could not be read, ` + "so this deploy will NOT create over it. Check that the node is up and that the " + "read role holds Sys.Audit or Datastore.Audit on / -- a create here would apply " + "pg_num to a live pool and start a PG merge.")) : Effect22.void));
-var settle2 = (props, read, done) => Effect22.gen(function* () {
+import * as Effect21 from "effect/Effect";
+var confirmAbsent = (props, describe3) => runPve(props.target, "read", false, nodes5.listNodeCephPool({ node: props.node })).pipe(Effect21.flatMap((rows) => rows.some((row) => row.pool_name === props.name) ? Effect21.die(new Error(`${describe3}: the cluster lists this pool but its status could not be read, ` + "so this deploy will NOT create over it. Check that the node is up and that the " + "read role holds Sys.Audit or Datastore.Audit on / -- a create here would apply " + "pg_num to a live pool and start a PG merge.")) : Effect21.void));
+var settle = (props, read, done) => Effect21.gen(function* () {
   for (let attempt = 0;attempt < 30; attempt += 1) {
     const live = yield* read(props);
     if (done(live))
       return live;
-    yield* Effect22.sleep("2 seconds");
+    yield* Effect21.sleep("2 seconds");
   }
   return yield* read(props);
 });
 
 // src/proxmox/ceph-pool-wire.ts
 import * as nodes6 from "@distilled.cloud/proxmox/nodes";
-import * as Effect23 from "effect/Effect";
+import * as Effect22 from "effect/Effect";
 var attributesOf3 = (live, props) => {
   const row = live;
   if (typeof row["name"] !== "string")
@@ -2105,9 +2083,7 @@ var attributesOf3 = (live, props) => {
     target_size_ratio: num(row["target_size_ratio"], UNSET)
   };
 };
-var readPoolStatus = (props) => runPve(props.target, "read", false, nodes6.getNodeCephPoolStatus({ name: props.name, node: props.node, verbose: "1" })).pipe(Effect23.map((live) => attributesOf3(live, props)), Effect23.orElseSucceed(() => {
-  return;
-}));
+var readPoolStatus = (props) => runPve(props.target, "read", false, nodes6.getNodeCephPoolStatus({ name: props.name, node: props.node, verbose: "1" })).pipe(Effect22.map((live) => attributesOf3(live, props)), Effect22.catchTag("CephPoolNotFound", () => Effect22.succeed(undefined)));
 var CEPH_POOL_CREATE = "pve:POST /nodes/{node}/ceph/pool";
 var CEPH_POOL_UPDATE = "pve:PUT /nodes/{node}/ceph/pool/{name}";
 var toDistilledCreate2 = (props) => ({
@@ -2125,10 +2101,10 @@ var ProxmoxCephPool = Resource8("Proxmox.CephPool", {
   defaultRemovalPolicy: "retain"
 });
 var matches3 = (attributes, props) => same(props.size, attributes.size, attributes.nosizechange) && same(props.min_size, attributes.min_size, attributes.nosizechange) && same(props.pg_autoscale_mode, attributes.pg_autoscale_mode) && same(hint(props.pg_num_min), attributes.pg_num_min, attributes.nopgchange) && same(props.crush_rule, attributes.crush_rule, attributes.crush_rule === "") && same(hint(props.target_size), attributes.target_size);
-var ProxmoxCephPoolProvider = () => Provider8.effect(ProxmoxCephPool, Effect24.succeed(ProxmoxCephPool.Provider.of({
-  list: () => Effect24.succeed([]),
+var ProxmoxCephPoolProvider = () => Provider8.effect(ProxmoxCephPool, Effect23.succeed(ProxmoxCephPool.Provider.of({
+  list: () => Effect23.succeed([]),
   read: ({ olds }) => readPoolStatus(olds),
-  diff: Effect24.fn(function* ({ news, output }) {
+  diff: Effect23.fn(function* ({ news, output }) {
     if (!isResolved7(news))
       return;
     yield* guardWrite2(CEPH_POOL_CREATE, createBody(news), output === undefined);
@@ -2142,7 +2118,7 @@ var ProxmoxCephPoolProvider = () => Provider8.effect(ProxmoxCephPool, Effect24.s
     }
     return matches3(live, news) ? { action: "noop" } : { action: "update" };
   }),
-  reconcile: Effect24.fn(function* ({ news }) {
+  reconcile: Effect23.fn(function* ({ news }) {
     const live = yield* readPoolStatus(news);
     let upid;
     if (live === undefined) {
@@ -2156,17 +2132,17 @@ var ProxmoxCephPoolProvider = () => Provider8.effect(ProxmoxCephPool, Effect24.s
         upid = yield* runPve(news.target, "provision", true, nodes7.putNodeCephPool(toDistilledUpdate(news)));
       }
     }
-    const after = yield* settle2(news, readPoolStatus, (row) => row !== undefined && matches3(row, news));
+    const after = yield* settle(news, readPoolStatus, (row) => row !== undefined && matches3(row, news));
     if (after === undefined || !matches3(after, news)) {
-      return yield* Effect24.die(new Error(`${object(news)}: the write returned no error but the pool still does not match ` + `the declaration after 60s. PVE answered with task ${upid ?? "(none)"} -- read ` + "its log with `pvesh get /nodes/<node>/tasks/<upid>/log` to see what Ceph " + "refused."));
+      return yield* Effect23.die(new Error(`${object(news)}: the write returned no error but the pool still does not match ` + `the declaration after 60s. PVE answered with task ${upid ?? "(none)"} -- read ` + "its log with `pvesh get /nodes/<node>/tasks/<upid>/log` to see what Ceph " + "refused."));
     }
     return after;
   }),
-  delete: Effect24.fn(function* ({ olds }) {
+  delete: Effect23.fn(function* ({ olds }) {
     yield* runPve(olds.target, "provision", true, nodes7.deleteNodeCephPool({ name: olds.name, node: olds.node }));
-    const left = yield* settle2(olds, readPoolStatus, (row) => row === undefined);
+    const left = yield* settle(olds, readPoolStatus, (row) => row === undefined);
     if (left !== undefined) {
-      return yield* Effect24.die(new Error(`${object(olds)}: the DELETE returned no error but the pool is still there after ` + "60s. Either a storage on it still holds RBD images, or the mons are running " + "with mon_allow_pool_delete false."));
+      return yield* Effect23.die(new Error(`${object(olds)}: the DELETE returned no error but the pool is still there after ` + "60s. Either a storage on it still holds RBD images, or the mons are running " + "with mon_allow_pool_delete false."));
     }
   })
 })));
@@ -2174,7 +2150,7 @@ var ProxmoxCephPoolProvider = () => Provider8.effect(ProxmoxCephPool, Effect24.s
 import { Resource as Resource9 } from "alchemy";
 import { isResolved as isResolved8 } from "alchemy/Diff";
 import * as Provider9 from "alchemy/Provider";
-import * as Effect25 from "effect/Effect";
+import * as Effect24 from "effect/Effect";
 
 // src/proxmox/firewall-alias-form.ts
 var fold = (name) => name.trim().toLowerCase();
@@ -2214,9 +2190,9 @@ var handlers4 = pveHandlers({
   path: (props) => `cluster/firewall/aliases/${props.name}`,
   updateForm: body
 });
-var ProxmoxFirewallAliasProvider = () => Provider9.effect(ProxmoxFirewallAlias, Effect25.succeed(ProxmoxFirewallAlias.Provider.of({
+var ProxmoxFirewallAliasProvider = () => Provider9.effect(ProxmoxFirewallAlias, Effect24.succeed(ProxmoxFirewallAlias.Provider.of({
   ...handlers4,
-  diff: Effect25.fn(function* ({ news, output }) {
+  diff: Effect24.fn(function* ({ news, output }) {
     if (output !== undefined && isResolved8(news) && fold(news.name) !== fold(output.name)) {
       return { action: "replace" };
     }
@@ -2228,11 +2204,11 @@ import { Resource as Resource10 } from "alchemy";
 import { isResolved as isResolved9 } from "alchemy/Diff";
 import * as Provider10 from "alchemy/Provider";
 import * as access4 from "@distilled.cloud/proxmox/access";
-import * as Effect27 from "effect/Effect";
+import * as Effect26 from "effect/Effect";
 
 // src/proxmox/group-wire.ts
 import * as access3 from "@distilled.cloud/proxmox/access";
-import * as Effect26 from "effect/Effect";
+import * as Effect25 from "effect/Effect";
 var GROUP_CREATE = "pve:POST /access/groups";
 var GROUP_UPDATE = "pve:PUT /access/groups/{groupid}";
 var storedComment = (comment2) => {
@@ -2257,22 +2233,20 @@ var attributesOf4 = (live, props) => ({
   members: memberList(live.members)
 });
 var matches4 = (attributes, props) => attributes.comment === storedComment(props.comment);
-var readGroupOrFail = (props) => readOrUnreadable(runPve(props.target, "read", false, access3.getAccessGroup({ groupid: props.groupid }))).pipe(Effect26.map((live) => live === UNREADABLE ? UNREADABLE : live.members === undefined ? undefined : attributesOf4(live, props)));
-var readGroup = (props) => readGroupOrFail(props).pipe(Effect26.orElseSucceed(() => {
-  return;
-}));
+var readGroupOrFail = (props) => readOrUnreadable(runPve(props.target, "read", false, access3.getAccessGroup({ groupid: props.groupid }))).pipe(Effect25.map((live) => live === UNREADABLE ? UNREADABLE : live.members === undefined ? undefined : attributesOf4(live, props)));
+var readGroup = (props) => readGroupOrFail(props).pipe(Effect25.catchTag("GroupNotFound", () => Effect25.succeed(undefined)));
 var dropUnreadable3 = (live) => live === UNREADABLE ? undefined : live;
 
 // src/proxmox/group.ts
 var ProxmoxGroup = Resource10("Proxmox.Group", {
   defaultRemovalPolicy: "retain"
 });
-var ProxmoxGroupProvider = () => Provider10.effect(ProxmoxGroup, Effect27.succeed(ProxmoxGroup.Provider.of({
-  list: () => Effect27.succeed([]),
-  read: Effect27.fn(function* ({ olds, output }) {
+var ProxmoxGroupProvider = () => Provider10.effect(ProxmoxGroup, Effect26.succeed(ProxmoxGroup.Provider.of({
+  list: () => Effect26.succeed([]),
+  read: Effect26.fn(function* ({ olds, output }) {
     return dropUnreadable3(yield* output === undefined ? readGroup(olds) : readGroupOrFail(olds));
   }),
-  diff: Effect27.fn(function* ({ news, output }) {
+  diff: Effect26.fn(function* ({ news, output }) {
     if (!isResolved9(news))
       return;
     yield* guardWrite2(GROUP_CREATE, createForm3(news), output === undefined);
@@ -2290,7 +2264,7 @@ var ProxmoxGroupProvider = () => Provider10.effect(ProxmoxGroup, Effect27.succee
     }
     return matches4(live, news) ? { action: "noop" } : { action: "update" };
   }),
-  reconcile: Effect27.fn(function* ({ news }) {
+  reconcile: Effect26.fn(function* ({ news }) {
     const before = dropUnreadable3(yield* readGroup(news));
     yield* guardWrite2(GROUP_CREATE, createForm3(news), before === undefined);
     yield* guardWrite2(GROUP_UPDATE, updateForm(news), false);
@@ -2301,18 +2275,18 @@ var ProxmoxGroupProvider = () => Provider10.effect(ProxmoxGroup, Effect27.succee
     }
     const after = dropUnreadable3(yield* readGroup(news));
     if (after === undefined) {
-      return yield* Effect27.die(new Error(`access/groups/${news.groupid}: the write returned no error but the group is ` + 'still absent. PVE wraps every answer in {"data":...} and can report success ' + "on a call that did nothing -- read back rather than trusting the status code."));
+      return yield* Effect26.die(new Error(`access/groups/${news.groupid}: the write returned no error but the group is ` + 'still absent. PVE wraps every answer in {"data":...} and can report success ' + "on a call that did nothing -- read back rather than trusting the status code."));
     }
     return after;
   }),
-  delete: Effect27.fn(function* ({ olds }) {
+  delete: Effect26.fn(function* ({ olds }) {
     yield* runPve(olds.target, "provision", true, access4.deleteAccessGroup({ groupid: olds.groupid }));
   })
 })));
 // src/proxmox/ha-resource.ts
 import { Resource as Resource11 } from "alchemy";
 import * as Provider11 from "alchemy/Provider";
-import * as Effect28 from "effect/Effect";
+import * as Effect27 from "effect/Effect";
 var ProxmoxHaResource = Resource11("Proxmox.HaResource");
 var kind = (sid) => sid.split(":")[0] ?? "";
 var shape3 = (props) => ({
@@ -2340,11 +2314,11 @@ var handlers5 = pveHandlers({
   path: (props) => `cluster/ha/resources/${props.sid}`,
   updateForm: shape3
 });
-var ProxmoxHaResourceProvider = () => Provider11.effect(ProxmoxHaResource, Effect28.succeed(ProxmoxHaResource.Provider.of(handlers5)));
+var ProxmoxHaResourceProvider = () => Provider11.effect(ProxmoxHaResource, Effect27.succeed(ProxmoxHaResource.Provider.of(handlers5)));
 // src/proxmox/ha-rule.ts
 import { Resource as Resource12 } from "alchemy";
 import * as Provider12 from "alchemy/Provider";
-import * as Effect29 from "effect/Effect";
+import * as Effect28 from "effect/Effect";
 
 // src/proxmox/ha-rule-form.ts
 var nodeList = (value) => {
@@ -2421,43 +2395,43 @@ var handlers6 = pveHandlers({
     return withClears(fields, clear);
   }
 });
-var ProxmoxHaRuleProvider = () => Provider12.effect(ProxmoxHaRule, Effect29.succeed(ProxmoxHaRule.Provider.of(handlers6)));
+var ProxmoxHaRuleProvider = () => Provider12.effect(ProxmoxHaRule, Effect28.succeed(ProxmoxHaRule.Provider.of(handlers6)));
 // src/proxmox/lxc.ts
 import { Resource as Resource13 } from "alchemy";
 import { isResolved as isResolved10 } from "alchemy/Diff";
 import * as Provider13 from "alchemy/Provider";
-import * as Effect39 from "effect/Effect";
+import * as Effect38 from "effect/Effect";
 
 // src/ownership/adopt.ts
 import { AdoptPolicy } from "alchemy/AdoptPolicy";
 import { AlchemyContext } from "alchemy/AlchemyContext";
 import { Stack as Stack3 } from "alchemy/Stack";
-import * as Effect33 from "effect/Effect";
+import * as Effect32 from "effect/Effect";
 import * as Option5 from "effect/Option";
 
 // src/ownership/resume.ts
 import { Unowned } from "alchemy/AdoptPolicy";
 import { Artifacts } from "alchemy/Artifacts";
-import * as Effect30 from "effect/Effect";
+import * as Effect29 from "effect/Effect";
 import * as Option2 from "effect/Option";
 var PROVEN = "homeflare/ownership/resumes";
 var UNFINISHED = "homeflare/ownership/unfinished";
-var note = (key, instanceId) => Effect30.gen(function* () {
-  const bag = yield* Effect30.serviceOption(Artifacts);
+var note = (key, instanceId) => Effect29.gen(function* () {
+  const bag = yield* Effect29.serviceOption(Artifacts);
   if (Option2.isSome(bag))
     yield* bag.value.set(key, instanceId);
 });
-var noted = (key, instanceId) => Effect30.gen(function* () {
-  const bag = yield* Effect30.serviceOption(Artifacts);
+var noted = (key, instanceId) => Effect29.gen(function* () {
+  const bag = yield* Effect29.serviceOption(Artifacts);
   if (Option2.isNone(bag))
     return false;
   return (yield* bag.value.get(key)) === instanceId;
 });
-var noteUnfinished = (instanceId) => Effect30.as(note(UNFINISHED, instanceId), undefined);
-var noteResume = (instanceId, recovered) => Effect30.gen(function* () {
+var noteUnfinished = (instanceId) => Effect29.as(note(UNFINISHED, instanceId), undefined);
+var noteResume = (instanceId, recovered) => Effect29.gen(function* () {
   yield* noteUnfinished(instanceId);
-  const unproven = () => Effect30.succeed(undefined);
-  const found = yield* recovered.pipe(Effect30.catch(unproven), Effect30.catchDefect(unproven));
+  const unproven = () => Effect29.succeed(undefined);
+  const found = yield* recovered.pipe(Effect29.catch(unproven), Effect29.catchDefect(unproven));
   if (found === undefined || found === null || Unowned.is(found))
     return;
   yield* note(PROVEN, instanceId);
@@ -2468,7 +2442,7 @@ var provingResumes = (service) => {
   const { diff, read } = service;
   if (diff === undefined || read === undefined)
     return service;
-  const proving = (input) => Effect30.gen(function* () {
+  const proving = (input) => Effect29.gen(function* () {
     if (input.output === undefined) {
       yield* noteResume(input.instanceId, read({ ...input, output: undefined }));
     }
@@ -2480,12 +2454,12 @@ var provingResumes = (service) => {
 // src/ownership/rows.ts
 import { Stack as Stack2 } from "alchemy/Stack";
 import { State, isActionState } from "alchemy/State/State";
-import * as Effect32 from "effect/Effect";
+import * as Effect31 from "effect/Effect";
 import * as Option4 from "effect/Option";
 
 // src/ownership/whole.ts
 import { Stack } from "alchemy/Stack";
-import * as Effect31 from "effect/Effect";
+import * as Effect30 from "effect/Effect";
 import * as Option3 from "effect/Option";
 var absent = (value) => value === undefined || value === null;
 var isPlainObject = (value) => {
@@ -2511,22 +2485,22 @@ var carries = (declared, recorded) => {
   }
   return true;
 };
-var wholeDeclaration = (fqn, props) => Effect31.map(Effect31.serviceOption(Stack), (stack) => {
+var wholeDeclaration = (fqn, props) => Effect30.map(Effect30.serviceOption(Stack), (stack) => {
   const declared = Option3.isSome(stack) ? stack.value.resources[fqn] : undefined;
   return declared !== undefined && carries(declared.Props, props);
 });
 
 // src/ownership/rows.ts
-var storeOf = Effect32.gen(function* () {
-  const stack = yield* Effect32.serviceOption(Stack2);
-  const state = yield* Effect32.serviceOption(State);
+var storeOf = Effect31.gen(function* () {
+  const stack = yield* Effect31.serviceOption(Stack2);
+  const state = yield* Effect31.serviceOption(State);
   if (Option4.isNone(stack) || Option4.isNone(state))
     return;
   const store = yield* state.value;
   const where = { stack: stack.value.name, stage: stack.value.stage };
   return { resources: stack.value.resources, store, where };
 });
-var rowAt = (store, where, fqn) => store.get({ ...where, fqn }).pipe(Effect32.orElseSucceed(() => {
+var rowAt = (store, where, fqn) => store.get({ ...where, fqn }).pipe(Effect31.orElseSucceed(() => {
   return;
 }));
 var generationOf = (row, instanceId) => {
@@ -2539,7 +2513,7 @@ var generationOf = (row, instanceId) => {
   }
   return;
 };
-var recordedGeneration = (fqn, instanceId) => Effect32.gen(function* () {
+var recordedGeneration = (fqn, instanceId) => Effect31.gen(function* () {
   const found = yield* storeOf;
   if (found === undefined)
     return;
@@ -2550,14 +2524,14 @@ var recordedGeneration = (fqn, instanceId) => Effect32.gen(function* () {
   }
   return;
 });
-var recordedInstance = (fqn, instanceId) => Effect32.gen(function* () {
+var recordedInstance = (fqn, instanceId) => Effect31.gen(function* () {
   const generation = yield* recordedGeneration(fqn, instanceId);
   if (generation === undefined)
     return "absent";
   return (yield* wholeDeclaration(fqn, generation.props)) ? "whole" : "partial";
 });
-var isCreate = (fqn, instanceId) => Effect32.map(recordedGeneration(fqn, instanceId), (generation) => generation?.status === "creating");
-var forgetRefusedCreate = (fqn, instanceId) => Effect32.gen(function* () {
+var isCreate = (fqn, instanceId) => Effect31.map(recordedGeneration(fqn, instanceId), (generation) => generation?.status === "creating");
+var forgetRefusedCreate = (fqn, instanceId) => Effect31.gen(function* () {
   const found = yield* storeOf;
   if (found === undefined)
     return;
@@ -2566,32 +2540,32 @@ var forgetRefusedCreate = (fqn, instanceId) => Effect32.gen(function* () {
   if (mine?.status !== "creating" || mine.instanceId !== instanceId || mine.attr !== undefined) {
     return;
   }
-  yield* found.store.delete({ ...found.where, fqn }).pipe(Effect32.ignore);
+  yield* found.store.delete({ ...found.where, fqn }).pipe(Effect31.ignore);
 });
 
 // src/ownership/adopt.ts
-var adoptEnabled = (fqn) => Effect33.gen(function* () {
-  const stack = yield* Effect33.serviceOption(Stack3);
+var adoptEnabled = (fqn) => Effect32.gen(function* () {
+  const stack = yield* Effect32.serviceOption(Stack3);
   const scoped = Option5.isSome(stack) ? stack.value.resources[fqn]?.Adopt : undefined;
   if (scoped !== undefined)
     return scoped;
-  const policy = yield* Effect33.serviceOption(AdoptPolicy);
+  const policy = yield* Effect32.serviceOption(AdoptPolicy);
   if (Option5.isSome(policy))
     return policy.value;
-  const context = yield* Effect33.serviceOption(AlchemyContext);
+  const context = yield* Effect32.serviceOption(AlchemyContext);
   return Option5.isSome(context) ? context.value.adopt : false;
 });
-var adoptable = (owner) => Effect33.gen(function* () {
+var adoptable = (owner) => Effect32.gen(function* () {
   if (yield* isCreate(owner.fqn, owner.instanceId))
     return true;
   return yield* unfinished(owner.instanceId);
 });
-var adoptsAtApply = (owner) => Effect33.gen(function* () {
+var adoptsAtApply = (owner) => Effect32.gen(function* () {
   if (!(yield* adoptEnabled(owner.fqn)))
     return false;
   return yield* adoptable(owner);
 });
-var refuseTakeover = (owner, what) => Effect33.gen(function* () {
+var refuseTakeover = (owner, what) => Effect32.gen(function* () {
   if (owner.output !== undefined)
     return;
   if (yield* resumes(owner.instanceId))
@@ -2601,25 +2575,25 @@ var refuseTakeover = (owner, what) => Effect33.gen(function* () {
     return;
   yield* forgetRefusedCreate(owner.fqn, owner.instanceId);
   const remedy = may ? "Deploy with --adopt (or wrap the resource in adopt(true)) to take it over, or remove it first." : "It is the new identity of a replace, which --adopt does not cover: remove it first.";
-  return yield* Effect33.die(new Error(`${what}: already exists, and this stack holds no state for it — the plan could not ask ` + "first (a prop was still an Output, a replace moved onto it, or it appeared after the " + `plan). Nothing was written. ${remedy}`));
+  return yield* Effect32.die(new Error(`${what}: already exists, and this stack holds no state for it — the plan could not ask ` + "first (a prop was still an Output, a replace moved onto it, or it appeared after the " + `plan). Nothing was written. ${remedy}`));
 });
 var claimFor = (owner) => (what) => refuseTakeover(owner, what);
 
 // src/ownership/probe.ts
 import { Unowned as Unowned2 } from "alchemy/AdoptPolicy";
-import * as Effect34 from "effect/Effect";
-var provenOurs = (ask, settled2) => Effect34.gen(function* () {
+import * as Effect33 from "effect/Effect";
+var provenOurs = (ask, settled2) => Effect33.gen(function* () {
   const recorded = yield* recordedInstance(ask.fqn, ask.instanceId);
   if (recorded === "absent")
     return false;
   if (recorded === "partial") {
-    yield* Effect34.logWarning(`${ask.fqn}: the interrupted create's state row lacks part of the declaration (a prop ` + "was still an Output when it was written), so the live object is not proven ours");
+    yield* Effect33.logWarning(`${ask.fqn}: the interrupted create's state row lacks part of the declaration (a prop ` + "was still an Output when it was written), so the live object is not proven ours");
     return false;
   }
-  const unproven = (reason) => Effect34.as(Effect34.logWarning(`${ask.fqn}: the interrupted create's object could not be compared with its props ` + `(${reason instanceof Error ? reason.message : String(reason)}), so it is not treated as ours`), false);
-  return yield* settled2.pipe(Effect34.catch(unproven), Effect34.catchDefect(unproven));
+  const unproven = (reason) => Effect33.as(Effect33.logWarning(`${ask.fqn}: the interrupted create's object could not be compared with its props ` + `(${reason instanceof Error ? reason.message : String(reason)}), so it is not treated as ours`), false);
+  return yield* settled2.pipe(Effect33.catch(unproven), Effect33.catchDefect(unproven));
 });
-var ownedRead = (ask, found, settled2) => Effect34.gen(function* () {
+var ownedRead = (ask, found, settled2) => Effect33.gen(function* () {
   if (found === undefined || ask.output !== undefined)
     return found;
   return (yield* provenOurs(ask, settled2)) ? found : Unowned2(found);
@@ -3074,11 +3048,11 @@ var identityRefusals = (news, olds, output) => {
 };
 
 // src/proxmox/lxc-adoption.ts
-import * as Effect38 from "effect/Effect";
+import * as Effect37 from "effect/Effect";
 
 // src/ownership/adopting.ts
-import * as Effect35 from "effect/Effect";
-var adopting = (owner, settled2) => Effect35.gen(function* () {
+import * as Effect34 from "effect/Effect";
+var adopting = (owner, settled2) => Effect34.gen(function* () {
   if (owner.output === undefined)
     return false;
   const generation = yield* recordedGeneration(owner.fqn, owner.instanceId);
@@ -3090,11 +3064,11 @@ var adopting = (owner, settled2) => Effect35.gen(function* () {
 });
 
 // src/proxmox/lxc-lifecycle.ts
-import * as Effect37 from "effect/Effect";
+import * as Effect36 from "effect/Effect";
 
 // src/proxmox/network-apply-read.ts
-import * as Effect36 from "effect/Effect";
-var stagedDiff = (target, node) => Effect36.gen(function* () {
+import * as Effect35 from "effect/Effect";
+var stagedDiff = (target, node) => Effect35.gen(function* () {
   const path = `nodes/${node}/network`;
   const credential = yield* leased(target, "read");
   const envelope = yield* pveEnvelopeWith(target, credential, "GET", path);
@@ -3107,8 +3081,8 @@ var pendingLines = (diff) => {
 `).filter((line) => (line.startsWith("+") || line.startsWith("-")) && !line.startsWith("+++") && !line.startsWith("---")).length;
   return Math.max(changed, 1);
 };
-var pendingCount = (target, node) => stagedDiff(target, node).pipe(Effect36.map(pendingLines));
-var clusterHealth = (target) => pve(target, "read", "GET", "cluster/status").pipe(Effect36.map((rows) => {
+var pendingCount = (target, node) => stagedDiff(target, node).pipe(Effect35.map(pendingLines));
+var clusterHealth = (target) => pve(target, "read", "GET", "cluster/status").pipe(Effect35.map((rows) => {
   const all = rows ?? [];
   const cluster = all.find((row) => row.type === "cluster");
   return {
@@ -3116,21 +3090,21 @@ var clusterHealth = (target) => pve(target, "read", "GET", "cluster/status").pip
     quorate: cluster === undefined ? true : bool(cluster.quorate)
   };
 }));
-var degradedReason = (target) => clusterHealth(target).pipe(Effect36.map((health) => health.quorate && health.offline.length === 0 ? undefined : `quorate=${String(health.quorate)} offline=[${health.offline.join(", ")}]`));
+var degradedReason = (target) => clusterHealth(target).pipe(Effect35.map((health) => health.quorate && health.offline.length === 0 ? undefined : `quorate=${String(health.quorate)} offline=[${health.offline.join(", ")}]`));
 var UNREACHABLE = "the task could not be read -- the node stopped answering, or this lease cannot see it";
 var STILL_RUNNING = "still running when this provider stopped waiting";
 var ATTEMPTS = 30;
-var awaitTask = (target, credential, node, upid, attempts = ATTEMPTS) => Effect36.gen(function* () {
+var awaitTask = (target, credential, node, upid, attempts = ATTEMPTS) => Effect35.gen(function* () {
   const path = `nodes/${node}/tasks/${upid}/status`;
   for (let attempt = 0;attempt < attempts; attempt += 1) {
-    const status = yield* pveWith(target, credential, "GET", path).pipe(Effect36.orElseSucceed(() => {
+    const status = yield* pveWith(target, credential, "GET", path).pipe(Effect35.orElseSucceed(() => {
       return;
     }));
     if (status === undefined)
       return UNREACHABLE;
     if (status.status === "stopped")
       return text(status.exitstatus, "stopped with no exitstatus");
-    yield* Effect36.sleep("1 second");
+    yield* Effect35.sleep("1 second");
   }
   return STILL_RUNNING;
 });
@@ -3148,17 +3122,17 @@ var LXC_ENDPOINTS = {
 var CREATE_POLLS = 180;
 var TASK_POLLS = 60;
 var isServerError = (error) => error instanceof PveError && error.status === 500;
-var readLive = (where) => Effect37.gen(function* () {
-  const answer = yield* pve(where.target, "read", "GET", `${guestPath(where)}/config`).pipe(Effect37.map((data) => ({ data, error: undefined })), Effect37.catchIf(isServerError, (error) => Effect37.succeed({ data: undefined, error })));
+var readLive = (where) => Effect36.gen(function* () {
+  const answer = yield* pve(where.target, "read", "GET", `${guestPath(where)}/config`).pipe(Effect36.map((data) => ({ data, error: undefined })), Effect36.catchIf(isServerError, (error) => Effect36.succeed({ data: undefined, error })));
   if (answer.data !== undefined && answer.data !== null)
     return answer.data;
   const rows = yield* pve(where.target, "read", "GET", "cluster/resources?type=vm");
   const found = (rows ?? []).find((row) => Number(row.vmid) === where.vmid);
   if (found !== undefined && found.node === where.node && found.type === "lxc") {
-    return yield* Effect37.fail(answer.error ?? new LxcRefusedError(`CT ${String(where.vmid)} is listed but its config read empty.`));
+    return yield* Effect36.fail(answer.error ?? new LxcRefusedError(`CT ${String(where.vmid)} is listed but its config read empty.`));
   }
   if (found !== undefined) {
-    return yield* Effect37.fail(new LxcRefusedError(`vmid ${String(where.vmid)} is a ${text(found.type, "guest")} on ` + `${text(found.node, "?")}, not a container on ${where.node}. A migration is not an ` + "update and vmids are cluster-wide: declare the node it is on, or pick a free vmid."));
+    return yield* Effect36.fail(new LxcRefusedError(`vmid ${String(where.vmid)} is a ${text(found.type, "guest")} on ` + `${text(found.node, "?")}, not a container on ${where.node}. A migration is not an ` + "update and vmids are cluster-wide: declare the node it is on, or pick a free vmid."));
   }
   return;
 });
@@ -3168,23 +3142,23 @@ var attributesOf5 = (where, live) => ({
   rawKeys: rawKeysOf(live),
   vmid: where.vmid
 });
-var task = (where, method, path, what, polls, form) => Effect37.gen(function* () {
+var task = (where, method, path, what, polls, form) => Effect36.gen(function* () {
   const credential = yield* mint(where.target, "provision");
   const upid = text(yield* pveWith(where.target, credential, method, path, form));
   if (upid === "") {
-    return yield* Effect37.fail(new LxcRefusedError(`${what}: PVE returned no task id, so the write cannot be confirmed and is not claimed.`));
+    return yield* Effect36.fail(new LxcRefusedError(`${what}: PVE returned no task id, so the write cannot be confirmed and is not claimed.`));
   }
   const exit = yield* awaitTask(where.target, credential, where.node, upid, polls);
   if (exit !== "OK") {
-    return yield* Effect37.fail(new LxcRefusedError(`${what}: task ${upid} ended "${exit}". Read \`pvesh get /nodes/${where.node}/tasks/` + `${upid}/log\` before running the deploy again.`));
+    return yield* Effect36.fail(new LxcRefusedError(`${what}: task ${upid} ended "${exit}". Read \`pvesh get /nodes/${where.node}/tasks/` + `${upid}/log\` before running the deploy again.`));
   }
 });
-var createGuest = (props) => Effect37.gen(function* () {
+var createGuest = (props) => Effect36.gen(function* () {
   const form = createForm4(props);
   yield* guardForm(LXC_ENDPOINTS.create, form, true);
   return yield* task(props, "POST", `nodes/${props.node}/lxc`, `create CT ${String(props.vmid)}`, CREATE_POLLS, form);
 });
-var updateGuest = (props, change, digest) => Effect37.gen(function* () {
+var updateGuest = (props, change, digest) => Effect36.gen(function* () {
   if (Object.keys(change.put).length > 0 || change.clear.length > 0) {
     const form = withClears({ ...change.put, ...digest === "" ? {} : { digest } }, change.clear);
     yield* guardForm(LXC_ENDPOINTS.update, form, false);
@@ -3196,33 +3170,33 @@ var updateGuest = (props, change, digest) => Effect37.gen(function* () {
     yield* task(props, "PUT", `${guestPath(props)}/resize`, `grow ${grow.disk} of CT ${String(props.vmid)} to ${grow.size}`, TASK_POLLS, grown);
   }
 });
-var destroyGuest = (where, declared) => Effect37.gen(function* () {
+var destroyGuest = (where, declared) => Effect36.gen(function* () {
   const live = yield* readLive(where);
   if (live === undefined)
     return;
   const drift = judge(declared, live).drift;
   if (drift.length > 0) {
-    return yield* Effect37.fail(new LxcRefusedError(`destroy CT ${String(where.vmid)}: the guest on ${where.node} no longer matches its last ` + `declaration (${drift.join(", ")}), so it may not be the guest this stack made. ` + "Nothing was deleted. Delete it by hand if it should go, or declare it again."));
+    return yield* Effect36.fail(new LxcRefusedError(`destroy CT ${String(where.vmid)}: the guest on ${where.node} no longer matches its last ` + `declaration (${drift.join(", ")}), so it may not be the guest this stack made. ` + "Nothing was deleted. Delete it by hand if it should go, or declare it again."));
   }
   yield* task(where, "DELETE", guestPath(where), `destroy CT ${String(where.vmid)}`, TASK_POLLS);
 });
 
 // src/proxmox/lxc-adoption.ts
 var adoptionRefusal = (props, drift) => `CT ${String(props.vmid)} on ${props.node}: adopting it would change ${drift.join(", ")}. An ` + "adoption never changes a guest, so nothing is written. Declare what is live for these keys " + "(the plan names keys, never values) and plan again; change them after the adoption, as an " + "update.";
-var refuseAdoptedDrift = (owner, props, live, change) => Effect38.gen(function* () {
+var refuseAdoptedDrift = (owner, props, live, change) => Effect37.gen(function* () {
   if (change.drift.length === 0)
     return;
-  const settled2 = (recorded) => Effect38.sync(() => judge(recorded, live).drift.length === 0);
+  const settled2 = (recorded) => Effect37.sync(() => judge(recorded, live).drift.length === 0);
   if (!(yield* adopting(owner, settled2)))
     return;
-  return yield* Effect38.fail(new LxcRefusedError(adoptionRefusal(props, change.drift)));
+  return yield* Effect37.fail(new LxcRefusedError(adoptionRefusal(props, change.drift)));
 });
 
 // src/proxmox/lxc.ts
 var ProxmoxLxc = Resource13("Proxmox.Lxc", { defaultRemovalPolicy: "retain" });
-var refused = (reasons) => Effect39.fail(new LxcRefusedError(reasons.join(`
+var refused = (reasons) => Effect38.fail(new LxcRefusedError(reasons.join(`
 `)));
-var diff = (owner, news, olds) => Effect39.gen(function* () {
+var diff = (owner, news, olds) => Effect38.gen(function* () {
   const { output } = owner;
   const identity2 = identityRefusals(news, olds, output);
   if (identity2.length > 0)
@@ -3236,7 +3210,7 @@ var diff = (owner, news, olds) => Effect39.gen(function* () {
     const refusals = createRefusals(news);
     if (refusals.length > 0)
       return yield* refused(refusals);
-    yield* Effect39.logWarning(`Proxmox.Lxc ${news.node}/${String(news.vmid)}: the cluster lists no guest with this ` + "vmid -- a deploy CREATES it again from ostemplate, with new, empty volumes.");
+    yield* Effect38.logWarning(`Proxmox.Lxc ${news.node}/${String(news.vmid)}: the cluster lists no guest with this ` + "vmid -- a deploy CREATES it again from ostemplate, with new, empty volumes.");
     return { action: "update" };
   }
   const change = judge(news, live);
@@ -3247,10 +3221,10 @@ var diff = (owner, news, olds) => Effect39.gen(function* () {
   if (change.drift.length === 0 && !moved)
     return { action: "noop" };
   const what = change.drift.length === 0 ? `the guest is on ${news.node} now, not ${output.node} -- a deploy re-records it, ` + "writing nothing." : `live config differs from the declaration in ${change.drift.join(", ")} -- a ` + "deploy writes these.";
-  yield* Effect39.logWarning(`Proxmox.Lxc ${news.node}/${String(news.vmid)}: ${what}`);
+  yield* Effect38.logWarning(`Proxmox.Lxc ${news.node}/${String(news.vmid)}: ${what}`);
   return { action: "update" };
 });
-var reconcile = (owner, news) => Effect39.gen(function* () {
+var reconcile = (owner, news) => Effect38.gen(function* () {
   const { output } = owner;
   const identity2 = identityRefusals(news, news, output);
   if (identity2.length > 0)
@@ -3296,12 +3270,12 @@ var whereOf = (olds, output) => ({
   target: olds.target,
   vmid: output?.vmid ?? olds.vmid
 });
-var read = (owner, olds) => Effect39.gen(function* () {
+var read = (owner, olds) => Effect38.gen(function* () {
   const where = whereOf(olds, owner.output);
   const live = yield* readLive(where);
   if (live === undefined)
     return;
-  const settled2 = Effect39.sync(() => judge(olds, live).drift.length === 0);
+  const settled2 = Effect38.sync(() => judge(olds, live).drift.length === 0);
   return yield* ownedRead(owner, attributesOf5(where, live), settled2);
 });
 var handlers7 = {
@@ -3313,7 +3287,7 @@ var handlers7 = {
     olds,
     output
   }) => diff({ fqn, instanceId, output }, news, olds),
-  list: () => Effect39.succeed([]),
+  list: () => Effect38.succeed([]),
   read: ({
     fqn,
     instanceId,
@@ -3327,11 +3301,11 @@ var handlers7 = {
     output
   }) => reconcile({ fqn, instanceId, output }, news)
 };
-var ProxmoxLxcProvider = () => Provider13.effect(ProxmoxLxc, Effect39.succeed(ProxmoxLxc.Provider.of(handlers7)).pipe(Effect39.map(provingResumes)));
+var ProxmoxLxcProvider = () => Provider13.effect(ProxmoxLxc, Effect38.succeed(ProxmoxLxc.Provider.of(handlers7)).pipe(Effect38.map(provingResumes)));
 // src/proxmox/metric-server.ts
 import { Resource as Resource14 } from "alchemy";
 import * as Provider14 from "alchemy/Provider";
-import * as Effect40 from "effect/Effect";
+import * as Effect39 from "effect/Effect";
 
 // src/proxmox/metric-server-form.ts
 var UNSET2 = -1;
@@ -3444,12 +3418,12 @@ var handlers8 = pveHandlers({
   path: (props) => `cluster/metrics/server/${props.id}`,
   updateForm: update
 });
-var ProxmoxMetricServerProvider = () => Provider14.effect(ProxmoxMetricServer, Effect40.succeed(ProxmoxMetricServer.Provider.of(handlers8)));
+var ProxmoxMetricServerProvider = () => Provider14.effect(ProxmoxMetricServer, Effect39.succeed(ProxmoxMetricServer.Provider.of(handlers8)));
 // src/proxmox/network-apply.ts
 import { Resource as Resource15 } from "alchemy";
 import { isResolved as isResolved11 } from "alchemy/Diff";
 import * as Provider15 from "alchemy/Provider";
-import * as Effect41 from "effect/Effect";
+import * as Effect40 from "effect/Effect";
 
 // src/proxmox/apply-endpoints.ts
 var NETWORK_APPLY_ENDPOINT = "pve:PUT /nodes/{node}/network";
@@ -3459,15 +3433,15 @@ var guardSdnApply = guardForm(SDN_APPLY_ENDPOINT, {}, true);
 
 // src/proxmox/network-apply.ts
 var ProxmoxNetworkApply = Resource15("Proxmox.NetworkApply");
-var read2 = (props) => pendingCount(props.target, props.node).pipe(Effect41.map((pending) => ({ node: props.node, pending })));
-var diff2 = (news) => Effect41.gen(function* () {
+var read2 = (props) => pendingCount(props.target, props.node).pipe(Effect40.map((pending) => ({ node: props.node, pending })));
+var diff2 = (news) => Effect40.gen(function* () {
   if (!isResolved11(news))
     return;
   const { pending } = yield* read2(news);
   return pending === 0 ? { action: "noop" } : { action: "update" };
 });
-var refuse = (node, why) => Effect41.die(new Error(`Proxmox.NetworkApply ${node}: ${why}`));
-var apply = (props) => Effect41.gen(function* () {
+var refuse = (node, why) => Effect40.die(new Error(`Proxmox.NetworkApply ${node}: ${why}`));
+var apply = (props) => Effect40.gen(function* () {
   const node = props.node;
   const staged = yield* pendingCount(props.target, node);
   if (staged === 0)
@@ -3497,19 +3471,19 @@ var apply = (props) => Effect41.gen(function* () {
   return { node, pending: left };
 });
 var handlers9 = {
-  delete: () => Effect41.void,
+  delete: () => Effect40.void,
   diff: ({ news }) => diff2(news),
-  list: () => Effect41.succeed([]),
+  list: () => Effect40.succeed([]),
   read: ({ olds }) => read2(olds),
   reconcile: ({ news }) => apply(news)
 };
-var ProxmoxNetworkApplyProvider = () => Provider15.effect(ProxmoxNetworkApply, Effect41.succeed(ProxmoxNetworkApply.Provider.of(handlers9)));
+var ProxmoxNetworkApplyProvider = () => Provider15.effect(ProxmoxNetworkApply, Effect40.succeed(ProxmoxNetworkApply.Provider.of(handlers9)));
 // src/proxmox/node-network.ts
 import { Resource as Resource16 } from "alchemy";
 import { isResolved as isResolved12 } from "alchemy/Diff";
 import * as Provider16 from "alchemy/Provider";
 import * as nodes9 from "@distilled.cloud/proxmox/nodes";
-import * as Effect43 from "effect/Effect";
+import * as Effect42 from "effect/Effect";
 
 // src/proxmox/node-network-form.ts
 var NODE_NETWORK_CREATE = "pve:POST /nodes/{node}/network";
@@ -3552,7 +3526,7 @@ var updateForm2 = (props) => {
 
 // src/proxmox/node-network-wire.ts
 import * as nodes8 from "@distilled.cloud/proxmox/nodes";
-import * as Effect42 from "effect/Effect";
+import * as Effect41 from "effect/Effect";
 var attributesOf6 = (live, props) => {
   const data = live;
   const liveType = text(data["type"]);
@@ -3586,12 +3560,12 @@ var attributesOf6 = (live, props) => {
     "vlan-raw-device": text(data["vlan-raw-device"])
   };
 };
-var readInterfaceOrFail = (props) => readOrUnreadable(runPve(props.target, "read", false, nodes8.getNodeNetwork({ iface: props.iface, node: props.node })).pipe(Effect42.catchTag("ParameterVerificationFailed", (error) => error.errors["iface"] === "interface does not exist" ? Effect42.succeed(undefined) : Effect42.fail(error)))).pipe(Effect42.map((live) => {
+var readInterfaceOrFail = (props) => readOrUnreadable(runPve(props.target, "read", false, nodes8.getNodeNetwork({ iface: props.iface, node: props.node })).pipe(Effect41.catchTag("ParameterVerificationFailed", (error) => error.errors["iface"] === "interface does not exist" ? Effect41.succeed(undefined) : Effect41.fail(error)))).pipe(Effect41.map((live) => {
   if (live === UNREADABLE)
     return UNREADABLE;
   return live === undefined ? undefined : attributesOf6(live, props);
 }));
-var readInterface = (props) => readInterfaceOrFail(props).pipe(Effect42.orElseSucceed(() => {
+var readInterface = (props) => readInterfaceOrFail(props).pipe(Effect41.orElseSucceed(() => {
   return;
 }));
 var dropUnreadable4 = (live) => live === UNREADABLE ? undefined : live;
@@ -3616,12 +3590,12 @@ var toDistilledUpdate2 = (props) => ({
   iface: props.iface,
   node: props.node
 });
-var ProxmoxNodeNetworkProvider = () => Provider16.effect(ProxmoxNodeNetwork, Effect43.succeed(ProxmoxNodeNetwork.Provider.of({
-  list: () => Effect43.succeed([]),
-  read: Effect43.fn(function* ({ olds, output }) {
+var ProxmoxNodeNetworkProvider = () => Provider16.effect(ProxmoxNodeNetwork, Effect42.succeed(ProxmoxNodeNetwork.Provider.of({
+  list: () => Effect42.succeed([]),
+  read: Effect42.fn(function* ({ olds, output }) {
     return dropUnreadable4(yield* output === undefined ? readInterface(olds) : readInterfaceOrFail(olds));
   }),
-  diff: Effect43.fn(function* ({ news, output }) {
+  diff: Effect42.fn(function* ({ news, output }) {
     if (!isResolved12(news))
       return;
     yield* guardWrite2(NODE_NETWORK_CREATE, createForm5(news), output === undefined);
@@ -3639,7 +3613,7 @@ var ProxmoxNodeNetworkProvider = () => Provider16.effect(ProxmoxNodeNetwork, Eff
     }
     return matches5(live, news) ? { action: "noop" } : { action: "update" };
   }),
-  reconcile: Effect43.fn(function* ({ news }) {
+  reconcile: Effect42.fn(function* ({ news }) {
     const before = dropUnreadable4(yield* readInterface(news));
     yield* guardWrite2(NODE_NETWORK_CREATE, createForm5(news), before === undefined);
     yield* guardWrite2(NODE_NETWORK_UPDATE, updateForm2(news), false);
@@ -3650,18 +3624,18 @@ var ProxmoxNodeNetworkProvider = () => Provider16.effect(ProxmoxNodeNetwork, Eff
     }
     const after = dropUnreadable4(yield* readInterface(news));
     if (after === undefined) {
-      return yield* Effect43.die(new Error(`nodes/${news.node}/network/${news.iface}: wrote with no error, but the ` + 'interface is still absent -- PVE wraps every answer in {"data":...} and can ' + "report success on a call that did nothing, so read back rather than trust it."));
+      return yield* Effect42.die(new Error(`nodes/${news.node}/network/${news.iface}: wrote with no error, but the ` + 'interface is still absent -- PVE wraps every answer in {"data":...} and can ' + "report success on a call that did nothing, so read back rather than trust it."));
     }
     return after;
   }),
-  delete: Effect43.fn(function* ({ olds }) {
+  delete: Effect42.fn(function* ({ olds }) {
     yield* runPve(olds.target, "provision", true, nodes9.deleteNodeNetwork2({ iface: olds.iface, node: olds.node }));
   })
 })));
 // src/proxmox/notification-matcher.ts
 import { Resource as Resource17 } from "alchemy";
 import * as Provider17 from "alchemy/Provider";
-import * as Effect44 from "effect/Effect";
+import * as Effect43 from "effect/Effect";
 
 // src/proxmox/notification-matcher-form.ts
 var list = (value) => Array.isArray(value) ? value.map((item) => String(item)) : [];
@@ -3751,11 +3725,11 @@ var handlers10 = pveHandlers({
   path: (props) => `cluster/notifications/matchers/${props.name}`,
   updateForm: matcherUpdateForm
 });
-var ProxmoxNotificationMatcherProvider = () => Provider17.effect(ProxmoxNotificationMatcher, Effect44.succeed(ProxmoxNotificationMatcher.Provider.of(handlers10)));
+var ProxmoxNotificationMatcherProvider = () => Provider17.effect(ProxmoxNotificationMatcher, Effect43.succeed(ProxmoxNotificationMatcher.Provider.of(handlers10)));
 // src/proxmox/notification-target.ts
 import { Resource as Resource18 } from "alchemy";
 import * as Provider18 from "alchemy/Provider";
-import * as Effect45 from "effect/Effect";
+import * as Effect44 from "effect/Effect";
 
 // src/proxmox/notification-target-endpoint.ts
 var ENDPOINTS = {
@@ -3837,15 +3811,15 @@ var handlers11 = pveHandlers({
   path: (props) => `cluster/notifications/endpoints/${props.type}/${props.name}`,
   updateForm: shape4
 });
-var ProxmoxNotificationTargetProvider = () => Provider18.effect(ProxmoxNotificationTarget, Effect45.succeed(ProxmoxNotificationTarget.Provider.of(handlers11)));
+var ProxmoxNotificationTargetProvider = () => Provider18.effect(ProxmoxNotificationTarget, Effect44.succeed(ProxmoxNotificationTarget.Provider.of(handlers11)));
 // src/proxmox/pbs-datastore.ts
 import { Resource as Resource19 } from "alchemy";
 import { isResolved as isResolved13 } from "alchemy/Diff";
 import * as Provider19 from "alchemy/Provider";
-import * as Effect49 from "effect/Effect";
+import * as Effect48 from "effect/Effect";
 
 // src/proxmox/pbs-datastore-form.ts
-import * as Effect46 from "effect/Effect";
+import * as Effect45 from "effect/Effect";
 var attributes = (live, props) => ({
   backend: propertyString(live["backend"]),
   comment: text(live["comment"]),
@@ -3897,35 +3871,35 @@ var createForm6 = (props) => ({
 });
 var updateForm3 = (props) => mutable(props);
 var object2 = (props) => `config/datastore/${props.name}`;
-var readOne = (props) => pve(props.target, "read", "GET", object2(props)).pipe(Effect46.map((live) => live === undefined || typeof live["name"] !== "string" ? undefined : attributes(live, props)), Effect46.orElseSucceed(() => {
+var readOne = (props) => pve(props.target, "read", "GET", object2(props)).pipe(Effect45.map((live) => live === undefined || typeof live["name"] !== "string" ? undefined : attributes(live, props)), Effect45.orElseSucceed(() => {
   return;
 }));
 
 // src/proxmox/pbs-datastore-guard.ts
-import * as Effect47 from "effect/Effect";
+import * as Effect46 from "effect/Effect";
 var samePath = (left, right) => {
   const trim = (value) => value.length > 1 ? value.replace(/\/+$/, "") : value;
   return trim(left) === trim(right);
 };
-var guardPath = (live, props) => live.path === "" || samePath(live.path, props.path) ? Effect47.void : Effect47.die(new Error(`${object2(props)}: declared path ${props.path} but PBS holds ${live.path}. \`path\` ` + "is create-only, so this cannot be reconciled and will NOT be planned as a silent " + "noop: backups would keep landing in the old directory behind a green plan. Correct " + "the declaration, or remove the datastore and declare a new one -- the contents live, " + "because `destroy-data` is never sent."));
-var guardBackend = (live, props) => props.backend === undefined || propertyString(props.backend) === live.backend ? Effect47.void : Effect47.die(new Error(`${object2(props)}: declared backend ${props.backend} but PBS holds ` + `${live.backend === "" ? "(none — a local datastore)" : live.backend}. \`backend\` ` + "is create-only: PBS has no update for it, so this cannot be reconciled and will NOT " + "be planned as a silent noop. Correct the declaration to match what is really there, " + "or remove the datastore and declare a new one -- the contents live, because " + "`destroy-data` is never sent."));
-var settle3 = (read3, done) => Effect47.gen(function* () {
+var guardPath = (live, props) => live.path === "" || samePath(live.path, props.path) ? Effect46.void : Effect46.die(new Error(`${object2(props)}: declared path ${props.path} but PBS holds ${live.path}. \`path\` ` + "is create-only, so this cannot be reconciled and will NOT be planned as a silent " + "noop: backups would keep landing in the old directory behind a green plan. Correct " + "the declaration, or remove the datastore and declare a new one -- the contents live, " + "because `destroy-data` is never sent."));
+var guardBackend = (live, props) => props.backend === undefined || propertyString(props.backend) === live.backend ? Effect46.void : Effect46.die(new Error(`${object2(props)}: declared backend ${props.backend} but PBS holds ` + `${live.backend === "" ? "(none — a local datastore)" : live.backend}. \`backend\` ` + "is create-only: PBS has no update for it, so this cannot be reconciled and will NOT " + "be planned as a silent noop. Correct the declaration to match what is really there, " + "or remove the datastore and declare a new one -- the contents live, because " + "`destroy-data` is never sent."));
+var settle2 = (read3, done) => Effect46.gen(function* () {
   for (let attempt = 0;attempt < 60; attempt += 1) {
     const live = yield* read3;
     if (done(live))
       return live;
-    yield* Effect47.sleep("2 seconds");
+    yield* Effect46.sleep("2 seconds");
   }
   return yield* read3;
 });
 
 // src/proxmox/pbs-datastore-endpoint.ts
-import * as Effect48 from "effect/Effect";
+import * as Effect47 from "effect/Effect";
 var DATASTORE_ENDPOINT = {
   create: "pbs:POST /config/datastore",
   update: "pbs:PUT /config/datastore/{name}"
 };
-var guardDatastoreForms = (props) => Effect48.gen(function* () {
+var guardDatastoreForms = (props) => Effect47.gen(function* () {
   yield* guardForm(DATASTORE_ENDPOINT.create, createForm6(props), true);
   yield* guardForm(DATASTORE_ENDPOINT.update, updateForm3(props), false);
 });
@@ -3934,10 +3908,10 @@ var guardDatastoreForms = (props) => Effect48.gen(function* () {
 var PbsDatastore = Resource19("Pbs.Datastore", {
   defaultRemovalPolicy: "retain"
 });
-var PbsDatastoreProvider = () => Provider19.effect(PbsDatastore, Effect49.succeed(PbsDatastore.Provider.of({
-  list: () => Effect49.succeed([]),
+var PbsDatastoreProvider = () => Provider19.effect(PbsDatastore, Effect48.succeed(PbsDatastore.Provider.of({
+  list: () => Effect48.succeed([]),
   read: ({ olds }) => readOne(olds),
-  diff: ({ news, output }) => Effect49.gen(function* () {
+  diff: ({ news, output }) => Effect48.gen(function* () {
     if (!isResolved13(news))
       return;
     yield* guardDatastoreForms(news);
@@ -3950,7 +3924,7 @@ var PbsDatastoreProvider = () => Provider19.effect(PbsDatastore, Effect49.succee
     yield* guardBackend(live, news);
     return matches6(live, news) ? { action: "noop" } : { action: "update" };
   }),
-  reconcile: Effect49.fn(function* ({ news }) {
+  reconcile: Effect48.fn(function* ({ news }) {
     yield* guardDatastoreForms(news);
     const live = yield* readOne(news);
     let upid;
@@ -3964,24 +3938,24 @@ var PbsDatastoreProvider = () => Provider19.effect(PbsDatastore, Effect49.succee
         yield* pve(news.target, "provision", "PUT", object2(news), form);
       }
     }
-    const after = yield* settle3(readOne(news), (row) => row !== undefined && matches6(row, news));
+    const after = yield* settle2(readOne(news), (row) => row !== undefined && matches6(row, news));
     if (after === undefined || !matches6(after, news)) {
-      return yield* Effect49.die(new Error(`${object2(news)}: the write returned no error but the datastore still does not ` + `match the declaration after 120s. PBS answered with task ${upid ?? "(none)"} ` + "-- read it with `proxmox-backup-manager task log <upid>`. A slow disk is a " + "plausible cause (see `settle`); a create over an existing chunk store is not, " + "because PBS refuses that outright rather than timing out."));
+      return yield* Effect48.die(new Error(`${object2(news)}: the write returned no error but the datastore still does not ` + `match the declaration after 120s. PBS answered with task ${upid ?? "(none)"} ` + "-- read it with `proxmox-backup-manager task log <upid>`. A slow disk is a " + "plausible cause (see `settle`); a create over an existing chunk store is not, " + "because PBS refuses that outright rather than timing out."));
     }
     return after;
   }),
-  delete: Effect49.fn(function* ({ olds }) {
+  delete: Effect48.fn(function* ({ olds }) {
     yield* pve(olds.target, "provision", "DELETE", object2(olds));
-    const left = yield* settle3(readOne(olds), (row) => row === undefined);
+    const left = yield* settle2(readOne(olds), (row) => row === undefined);
     if (left !== undefined) {
-      return yield* Effect49.die(new Error(`${object2(olds)}: the DELETE returned no error but the datastore is still in ` + "datastore.cfg after 120s. Either a backup, verify or GC task still holds it, " + "or the provision role lacks Datastore.Allocate on /datastore/" + `${olds.name}. Read the task log with \`proxmox-backup-manager task log <upid>\`.`));
+      return yield* Effect48.die(new Error(`${object2(olds)}: the DELETE returned no error but the datastore is still in ` + "datastore.cfg after 120s. Either a backup, verify or GC task still holds it, " + "or the provision role lacks Datastore.Allocate on /datastore/" + `${olds.name}. Read the task log with \`proxmox-backup-manager task log <upid>\`.`));
     }
   })
 })));
 // src/proxmox/pbs-notification-matcher.ts
 import { Resource as Resource20 } from "alchemy";
 import * as Provider20 from "alchemy/Provider";
-import * as Effect50 from "effect/Effect";
+import * as Effect49 from "effect/Effect";
 var PbsNotificationMatcher = Resource20("Pbs.NotificationMatcher");
 var handlers12 = pveHandlers({
   attributes: (live, props) => matcherAttributes(live, props.name),
@@ -3995,15 +3969,15 @@ var handlers12 = pveHandlers({
   path: (props) => `config/notifications/matchers/${props.name}`,
   updateForm: matcherUpdateForm
 });
-var PbsNotificationMatcherProvider = () => Provider20.effect(PbsNotificationMatcher, Effect50.succeed(PbsNotificationMatcher.Provider.of(handlers12)));
+var PbsNotificationMatcherProvider = () => Provider20.effect(PbsNotificationMatcher, Effect49.succeed(PbsNotificationMatcher.Provider.of(handlers12)));
 // src/proxmox/pbs-notification-target.ts
 import { Resource as Resource21 } from "alchemy";
 import * as Provider21 from "alchemy/Provider";
-import * as Effect52 from "effect/Effect";
+import * as Effect51 from "effect/Effect";
 
 // src/proxmox/pbs-notification-target-lifecycle.ts
 import { isResolved as isResolved14 } from "alchemy/Diff";
-import * as Effect51 from "effect/Effect";
+import * as Effect50 from "effect/Effect";
 
 // src/proxmox/pbs-notification-target-endpoint.ts
 var ENDPOINTS2 = {
@@ -4280,12 +4254,12 @@ var targetForm = (props, groups, carry, mode) => {
 
 // src/proxmox/pbs-notification-target-lifecycle.ts
 var path = (props) => `config/notifications/endpoints/${props.type}/${props.name}`;
-var readLive2 = (props) => pve(props.target, "read", "GET", path(props)).pipe(Effect51.map((data) => data == null ? undefined : targetAttributes(data, props)), Effect51.orElseSucceed(() => {
+var readLive2 = (props) => pve(props.target, "read", "GET", path(props)).pipe(Effect50.map((data) => data == null ? undefined : targetAttributes(data, props)), Effect50.orElseSucceed(() => {
   return;
 }));
 var refuse2 = (props) => {
   const reasons = refusals(props);
-  return reasons.length === 0 ? Effect51.void : Effect51.die(new Error(`${path(props)}: ${reasons.join("; ")}.`));
+  return reasons.length === 0 ? Effect50.void : Effect50.die(new Error(`${path(props)}: ${reasons.join("; ")}.`));
 };
 var toCarry = (live, props, groups, sealed) => {
   const header = headerState(live, props, groups) === "stale";
@@ -4297,16 +4271,16 @@ var requireValues = (props, groups, carry) => {
     ...carry.header ? groups.header.missing : [],
     ...carry.sealed ? groups.sealed.missing : []
   ];
-  return missing.length === 0 ? Effect51.void : Effect51.die(new Error(`${path(props)}: this write must send write-only values, and ${missing.join(", ")} ` + "is unset or empty in the deploying environment. Export it and deploy again."));
+  return missing.length === 0 ? Effect50.void : Effect50.die(new Error(`${path(props)}: this write must send write-only values, and ${missing.join(", ")} ` + "is unset or empty in the deploying environment. Export it and deploy again."));
 };
 var handlers13 = {
-  list: () => Effect51.succeed([]),
-  read: ({ olds, output }) => (output === undefined ? refuse2(olds) : Effect51.void).pipe(Effect51.andThen(readLive2(olds)), Effect51.map((live) => live === undefined ? undefined : { ...live, sealed: output?.sealed ?? "" })),
+  list: () => Effect50.succeed([]),
+  read: ({ olds, output }) => (output === undefined ? refuse2(olds) : Effect50.void).pipe(Effect50.andThen(readLive2(olds)), Effect50.map((live) => live === undefined ? undefined : { ...live, sealed: output?.sealed ?? "" })),
   diff: ({
     news,
     olds,
     output
-  }) => Effect51.gen(function* () {
+  }) => Effect50.gen(function* () {
     if (output === undefined || !isResolved14(news))
       return;
     if (olds !== undefined && (olds.type !== news.type || olds.name !== news.name)) {
@@ -4318,7 +4292,7 @@ var handlers13 = {
       return { action: "update" };
     return toCarry(live, news, resolveGroups(news), output.sealed) === undefined ? { action: "noop" } : { action: "update" };
   }),
-  reconcile: ({ news, output }) => Effect51.gen(function* () {
+  reconcile: ({ news, output }) => Effect50.gen(function* () {
     yield* refuse2(news);
     const groups = resolveGroups(news);
     const live = yield* readLive2(news);
@@ -4344,7 +4318,7 @@ var handlers13 = {
     }
     const after = yield* readLive2(news);
     if (after === undefined) {
-      return yield* Effect51.die(new Error(`${path(news)}: the write returned no error but the target is still absent.`));
+      return yield* Effect50.die(new Error(`${path(news)}: the write returned no error but the target is still absent.`));
     }
     return { ...after, sealed };
   }),
@@ -4353,11 +4327,11 @@ var handlers13 = {
 
 // src/proxmox/pbs-notification-target.ts
 var PbsNotificationTarget = Resource21("Pbs.NotificationTarget");
-var PbsNotificationTargetProvider = () => Provider21.effect(PbsNotificationTarget, Effect52.succeed(PbsNotificationTarget.Provider.of(handlers13)));
+var PbsNotificationTargetProvider = () => Provider21.effect(PbsNotificationTarget, Effect51.succeed(PbsNotificationTarget.Provider.of(handlers13)));
 // src/proxmox/pbs-prune-job.ts
 import { Resource as Resource22 } from "alchemy";
 import * as Provider22 from "alchemy/Provider";
-import * as Effect53 from "effect/Effect";
+import * as Effect52 from "effect/Effect";
 
 // src/proxmox/pbs-prune-job-form.ts
 var KEEP_KEYS = [
@@ -4433,11 +4407,11 @@ var handlers14 = pveHandlers({
   path: (props) => `config/prune/${props.id}`,
   updateForm: updateBody2
 });
-var PbsPruneJobProvider = () => Provider22.effect(PbsPruneJob, Effect53.succeed(PbsPruneJob.Provider.of(handlers14)));
+var PbsPruneJobProvider = () => Provider22.effect(PbsPruneJob, Effect52.succeed(PbsPruneJob.Provider.of(handlers14)));
 // src/proxmox/pbs-sync-job.ts
 import { Resource as Resource23 } from "alchemy";
 import * as Provider23 from "alchemy/Provider";
-import * as Effect54 from "effect/Effect";
+import * as Effect53 from "effect/Effect";
 
 // src/proxmox/pbs-sync-job-form.ts
 var UNSET4 = -1;
@@ -4514,11 +4488,11 @@ var handlers15 = pveHandlers({
 
 // src/proxmox/pbs-sync-job.ts
 var PbsSyncJob = Resource23("Pbs.SyncJob");
-var PbsSyncJobProvider = () => Provider23.effect(PbsSyncJob, Effect54.succeed(PbsSyncJob.Provider.of(handlers15)));
+var PbsSyncJobProvider = () => Provider23.effect(PbsSyncJob, Effect53.succeed(PbsSyncJob.Provider.of(handlers15)));
 // src/proxmox/pbs-verify-job.ts
 import { Resource as Resource24 } from "alchemy";
 import * as Provider24 from "alchemy/Provider";
-import * as Effect55 from "effect/Effect";
+import * as Effect54 from "effect/Effect";
 
 // src/proxmox/pbs-verify-job-form.ts
 var rechecks = (ignoreVerified, outdatedAfter) => {
@@ -4563,11 +4537,11 @@ var handlers16 = pveHandlers({
   path: (props) => `config/verify/${props.id}`,
   updateForm: shape7
 });
-var PbsVerifyJobProvider = () => Provider24.effect(PbsVerifyJob, Effect55.succeed(PbsVerifyJob.Provider.of(handlers16)));
+var PbsVerifyJobProvider = () => Provider24.effect(PbsVerifyJob, Effect54.succeed(PbsVerifyJob.Provider.of(handlers16)));
 // src/proxmox/pool.ts
 import { Resource as Resource25 } from "alchemy";
 import * as Provider25 from "alchemy/Provider";
-import * as Effect56 from "effect/Effect";
+import * as Effect55 from "effect/Effect";
 var ProxmoxPool = Resource25("Proxmox.Pool");
 var poolCreateForm = (props) => ({
   comment: props.comment ?? "",
@@ -4592,7 +4566,7 @@ var handlers17 = pveHandlers({
   path: (props) => `pools/${props.poolid}`,
   updateForm: poolUpdateForm
 });
-var ProxmoxPoolProvider = () => Provider25.effect(ProxmoxPool, Effect56.succeed(ProxmoxPool.Provider.of(handlers17)));
+var ProxmoxPoolProvider = () => Provider25.effect(ProxmoxPool, Effect55.succeed(ProxmoxPool.Provider.of(handlers17)));
 // src/proxmox/provision-baseline.ts
 var PROVISION_PRIVILEGES = Object.freeze([
   "Datastore.Allocate",
@@ -4785,14 +4759,14 @@ echo 'provision baseline: done. Next: point the OpenBao proxmox mount at these u
 // src/proxmox/provision-declare.ts
 import { adopt } from "alchemy/AdoptPolicy";
 import * as RemovalPolicy from "alchemy/RemovalPolicy";
-import * as Effect60 from "effect/Effect";
+import * as Effect59 from "effect/Effect";
 
 // src/proxmox/role.ts
 import { Resource as Resource26 } from "alchemy";
 import { isResolved as isResolved15 } from "alchemy/Diff";
 import * as Provider26 from "alchemy/Provider";
 import * as access5 from "@distilled.cloud/proxmox/access";
-import * as Effect57 from "effect/Effect";
+import * as Effect56 from "effect/Effect";
 
 // src/proxmox/role-wire.ts
 var ROLE_CREATE = "pve:POST /access/roles";
@@ -4815,19 +4789,19 @@ var matches7 = (attributes2, props) => canonical2(attributes2.privs).join(",") =
 
 // src/proxmox/role.ts
 var ProxmoxRole = Resource26("Proxmox.Role");
-var readRole = (props) => readOrUnreadable(runPve(props.target, "read", false, access5.listAccessRoles({}))).pipe(Effect57.map((rows) => {
+var readRole = (props) => readOrUnreadable(runPve(props.target, "read", false, access5.listAccessRoles({}))).pipe(Effect56.map((rows) => {
   if (rows === UNREADABLE)
     return UNREADABLE;
   const row = find2(rows, props.roleid);
   return row === undefined ? undefined : attributesOf7(row, props);
 }));
 var dropUnreadable5 = (live) => live === UNREADABLE ? undefined : live;
-var ProxmoxRoleProvider = () => Provider26.effect(ProxmoxRole, Effect57.succeed(ProxmoxRole.Provider.of({
-  list: () => Effect57.succeed([]),
-  read: Effect57.fn(function* ({ olds }) {
+var ProxmoxRoleProvider = () => Provider26.effect(ProxmoxRole, Effect56.succeed(ProxmoxRole.Provider.of({
+  list: () => Effect56.succeed([]),
+  read: Effect56.fn(function* ({ olds }) {
     return dropUnreadable5(yield* readRole(olds));
   }),
-  diff: Effect57.fn(function* ({ news, output }) {
+  diff: Effect56.fn(function* ({ news, output }) {
     if (!isResolved15(news))
       return;
     yield* guardWrite2(ROLE_CREATE, createForm7(news), output === undefined);
@@ -4845,7 +4819,7 @@ var ProxmoxRoleProvider = () => Provider26.effect(ProxmoxRole, Effect57.succeed(
     }
     return matches7(live, news) ? { action: "noop" } : { action: "update" };
   }),
-  reconcile: Effect57.fn(function* ({ news }) {
+  reconcile: Effect56.fn(function* ({ news }) {
     const before = dropUnreadable5(yield* readRole(news));
     yield* guardWrite2(ROLE_CREATE, createForm7(news), before === undefined);
     yield* guardWrite2(ROLE_UPDATE, updateForm4(news), false);
@@ -4856,11 +4830,11 @@ var ProxmoxRoleProvider = () => Provider26.effect(ProxmoxRole, Effect57.succeed(
     }
     const after = dropUnreadable5(yield* readRole(news));
     if (after === undefined) {
-      return yield* Effect57.die(new Error(`access/roles/${news.roleid}: the write returned no error but the role is ` + 'still absent. PVE wraps every answer in {"data":...} and can report success ' + "on a call that did nothing -- read back rather than trusting the status code."));
+      return yield* Effect56.die(new Error(`access/roles/${news.roleid}: the write returned no error but the role is ` + 'still absent. PVE wraps every answer in {"data":...} and can report success ' + "on a call that did nothing -- read back rather than trusting the status code."));
     }
     return after;
   }),
-  delete: Effect57.fn(function* ({ olds }) {
+  delete: Effect56.fn(function* ({ olds }) {
     yield* runPve(olds.target, "provision", true, access5.deleteAccessRole({ roleid: olds.roleid }));
   })
 })));
@@ -4870,11 +4844,11 @@ import { Resource as Resource27 } from "alchemy";
 import { isResolved as isResolved16 } from "alchemy/Diff";
 import * as Provider27 from "alchemy/Provider";
 import * as access7 from "@distilled.cloud/proxmox/access";
-import * as Effect59 from "effect/Effect";
+import * as Effect58 from "effect/Effect";
 
 // src/proxmox/user-wire.ts
 import * as access6 from "@distilled.cloud/proxmox/access";
-import * as Effect58 from "effect/Effect";
+import * as Effect57 from "effect/Effect";
 var USER_CREATE = "pve:POST /access/users";
 var USER_UPDATE = "pve:PUT /access/users/{userid}";
 var int2 = (value) => {
@@ -4916,20 +4890,18 @@ var attributesOf8 = (live, props) => ({
   userid: props.userid
 });
 var matches8 = (attributes2, props) => attributes2.comment === (props.comment ?? "") && attributes2.email === (props.email ?? "") && attributes2.enable === (props.enable !== false) && attributes2.expire === (props.expire ?? 0) && attributes2.firstname === (props.firstname ?? "") && attributes2.lastname === (props.lastname ?? "") && attributes2.groups.join(",") === groupSet(props.groups).join(",");
-var readUserOrFail = (props) => readOrUnreadable(runPve(props.target, "read", false, access6.getAccessUser({ userid: props.userid }))).pipe(Effect58.map((live) => live === UNREADABLE ? UNREADABLE : attributesOf8(live, props)));
-var readUser = (props) => readUserOrFail(props).pipe(Effect58.orElseSucceed(() => {
-  return;
-}));
+var readUserOrFail = (props) => readOrUnreadable(runPve(props.target, "read", false, access6.getAccessUser({ userid: props.userid }))).pipe(Effect57.map((live) => live === UNREADABLE ? UNREADABLE : attributesOf8(live, props)));
+var readUser = (props) => readUserOrFail(props).pipe(Effect57.catchTag("UserNotFound", () => Effect57.succeed(undefined)));
 var dropUnreadable6 = (live) => live === UNREADABLE ? undefined : live;
 
 // src/proxmox/user.ts
 var ProxmoxUser = Resource27("Proxmox.User");
-var ProxmoxUserProvider = () => Provider27.effect(ProxmoxUser, Effect59.succeed(ProxmoxUser.Provider.of({
-  list: () => Effect59.succeed([]),
-  read: Effect59.fn(function* ({ olds, output }) {
+var ProxmoxUserProvider = () => Provider27.effect(ProxmoxUser, Effect58.succeed(ProxmoxUser.Provider.of({
+  list: () => Effect58.succeed([]),
+  read: Effect58.fn(function* ({ olds, output }) {
     return dropUnreadable6(yield* output === undefined ? readUser(olds) : readUserOrFail(olds));
   }),
-  diff: Effect59.fn(function* ({ news, output }) {
+  diff: Effect58.fn(function* ({ news, output }) {
     if (!isResolved16(news))
       return;
     yield* guardWrite2(USER_CREATE, createForm8(news), output === undefined);
@@ -4947,7 +4919,7 @@ var ProxmoxUserProvider = () => Provider27.effect(ProxmoxUser, Effect59.succeed(
     }
     return matches8(live, news) ? { action: "noop" } : { action: "update" };
   }),
-  reconcile: Effect59.fn(function* ({ news }) {
+  reconcile: Effect58.fn(function* ({ news }) {
     const before = dropUnreadable6(yield* readUser(news));
     yield* guardWrite2(USER_CREATE, createForm8(news), before === undefined);
     yield* guardWrite2(USER_UPDATE, updateForm5(news), false);
@@ -4958,18 +4930,18 @@ var ProxmoxUserProvider = () => Provider27.effect(ProxmoxUser, Effect59.succeed(
     }
     const after = dropUnreadable6(yield* readUser(news));
     if (after === undefined) {
-      return yield* Effect59.die(new Error(`access/users/${news.userid}: the write returned no error but the account is ` + 'still absent. PVE wraps every answer in {"data":...} and can report success ' + "on a call that did nothing -- read back rather than trusting the status code."));
+      return yield* Effect58.die(new Error(`access/users/${news.userid}: the write returned no error but the account is ` + 'still absent. PVE wraps every answer in {"data":...} and can report success ' + "on a call that did nothing -- read back rather than trusting the status code."));
     }
     return after;
   }),
-  delete: Effect59.fn(function* ({ olds }) {
+  delete: Effect58.fn(function* ({ olds }) {
     yield* runPve(olds.target, "provision", true, access7.deleteAccessUser({ userid: olds.userid }));
   })
 })));
 
 // src/proxmox/provision-declare.ts
-var declareProvisionBaseline = (id, target, names2 = {}, options = {}) => Effect60.gen(function* () {
-  const baseline = yield* Effect60.try({
+var declareProvisionBaseline = (id, target, names2 = {}, options = {}) => Effect59.gen(function* () {
+  const baseline = yield* Effect59.try({
     catch: (cause) => cause instanceof Error ? cause : new Error(String(cause)),
     try: () => provisionBaseline(names2)
   });
@@ -4983,13 +4955,13 @@ var declareProvisionBaseline = (id, target, names2 = {}, options = {}) => Effect
     target
   }));
   const group = yield* owned(ProxmoxGroup(`${id}-mint-group`, { ...baseline.group, target }));
-  const users = yield* Effect60.all(baseline.users.map((user) => owned(ProxmoxUser(`${id}-${user.lane}-user`, {
+  const users = yield* Effect59.all(baseline.users.map((user) => owned(ProxmoxUser(`${id}-${user.lane}-user`, {
     comment: user.comment,
     groups: [...user.groups],
     target,
     userid: user.userid
   }))));
-  const grants = yield* Effect60.all(baseline.grants.map((grant) => owned(ProxmoxAcl(`${id}-${grant.lane}-grant`, {
+  const grants = yield* Effect59.all(baseline.grants.map((grant) => owned(ProxmoxAcl(`${id}-${grant.lane}-grant`, {
     path: "/",
     propagate: true,
     roleid: grant.roleid,
@@ -5002,7 +4974,7 @@ var declareProvisionBaseline = (id, target, names2 = {}, options = {}) => Effect
 // src/proxmox/qemu.ts
 import { Resource as Resource28 } from "alchemy";
 import * as Provider28 from "alchemy/Provider";
-import * as Effect61 from "effect/Effect";
+import * as Effect60 from "effect/Effect";
 var ProxmoxVm = Resource28("Proxmox.Vm");
 var createForm9 = (props) => ({ ...shape9(props), vmid: String(props.vmid) });
 var shape9 = (props) => ({
@@ -5033,11 +5005,11 @@ var handlers18 = pveHandlers({
   path: (props) => `nodes/${props.node}/qemu/${String(props.vmid)}/config`,
   updateForm: shape9
 });
-var ProxmoxVmProvider = () => Provider28.effect(ProxmoxVm, Effect61.succeed(ProxmoxVm.Provider.of(handlers18)));
+var ProxmoxVmProvider = () => Provider28.effect(ProxmoxVm, Effect60.succeed(ProxmoxVm.Provider.of(handlers18)));
 // src/proxmox/replication-job.ts
 import { Resource as Resource29 } from "alchemy";
 import * as Provider29 from "alchemy/Provider";
-import * as Effect62 from "effect/Effect";
+import * as Effect61 from "effect/Effect";
 
 // src/proxmox/replication-job-form.ts
 var DEFAULT_SCHEDULE = "*/15";
@@ -5091,15 +5063,15 @@ var handlers19 = pveHandlers({
   path: (props) => `cluster/replication/${jobId(props)}`,
   updateForm: updateBody4
 });
-var ProxmoxReplicationJobProvider = () => Provider29.effect(ProxmoxReplicationJob, Effect62.succeed(ProxmoxReplicationJob.Provider.of(handlers19)));
+var ProxmoxReplicationJobProvider = () => Provider29.effect(ProxmoxReplicationJob, Effect61.succeed(ProxmoxReplicationJob.Provider.of(handlers19)));
 // src/proxmox/sdn-apply.ts
 import { Resource as Resource30 } from "alchemy";
 import { isResolved as isResolved17 } from "alchemy/Diff";
 import * as Provider30 from "alchemy/Provider";
-import * as Effect64 from "effect/Effect";
+import * as Effect63 from "effect/Effect";
 
 // src/proxmox/sdn-apply-read.ts
-import * as Effect63 from "effect/Effect";
+import * as Effect62 from "effect/Effect";
 var MARKED = [
   "cluster/sdn/zones",
   "cluster/sdn/vnets",
@@ -5108,7 +5080,7 @@ var MARKED = [
   "cluster/sdn/route-maps"
 ];
 var subsystemAbsent = (error) => error instanceof PveError && error.status === 501;
-var markedPending = (target) => Effect63.all(MARKED.map((collection) => pve(target, "read", "GET", `${collection}?pending=1`).pipe(Effect63.map((rows) => (rows ?? []).filter((row) => row.state !== undefined).length), Effect63.catchIf(subsystemAbsent, () => Effect63.succeed(0)))), { concurrency: "unbounded" }).pipe(Effect63.map((counts) => counts.reduce((total, count2) => total + count2, 0)));
+var markedPending = (target) => Effect62.all(MARKED.map((collection) => pve(target, "read", "GET", `${collection}?pending=1`).pipe(Effect62.map((rows) => (rows ?? []).filter((row) => row.state !== undefined).length), Effect62.catchIf(subsystemAbsent, () => Effect62.succeed(0)))), { concurrency: "unbounded" }).pipe(Effect62.map((counts) => counts.reduce((total, count2) => total + count2, 0)));
 var fabricStaged = (staged, running) => {
   if (staged === undefined && running === undefined)
     return 0;
@@ -5116,9 +5088,9 @@ var fabricStaged = (staged, running) => {
     return "inconsistent";
   return staged === running ? 0 : 1;
 };
-var fabricPending = (target) => Effect63.all(["pending", "running"].map((view) => pve(target, "read", "GET", `cluster/sdn/fabrics/all?${view}=1`).pipe(Effect63.map(canonical3), Effect63.catchIf(subsystemAbsent, () => Effect63.succeed(undefined)))), { concurrency: "unbounded" }).pipe(Effect63.flatMap(([staged, running]) => {
+var fabricPending = (target) => Effect62.all(["pending", "running"].map((view) => pve(target, "read", "GET", `cluster/sdn/fabrics/all?${view}=1`).pipe(Effect62.map(canonical3), Effect62.catchIf(subsystemAbsent, () => Effect62.succeed(undefined)))), { concurrency: "unbounded" }).pipe(Effect62.flatMap(([staged, running]) => {
   const verdict = fabricStaged(staged, running);
-  return verdict === "inconsistent" ? Effect63.die(new Error("cluster/sdn/fabrics/all answered 501 for one of ?pending=1 and ?running=1 and not " + "the other. Refusing to read that as a staged fabric change.")) : Effect63.succeed(verdict);
+  return verdict === "inconsistent" ? Effect62.die(new Error("cluster/sdn/fabrics/all answered 501 for one of ?pending=1 and ?running=1 and not " + "the other. Refusing to read that as a staged fabric change.")) : Effect62.succeed(verdict);
 }));
 var canonical3 = (value) => JSON.stringify(sortDeep(value));
 var sortDeep = (value) => {
@@ -5131,23 +5103,23 @@ var sortDeep = (value) => {
   }
   return value;
 };
-var sdnPendingCount = (target) => Effect63.all([markedPending(target), fabricPending(target)], { concurrency: "unbounded" }).pipe(Effect63.map(([marked, fabric]) => marked + fabric));
+var sdnPendingCount = (target) => Effect62.all([markedPending(target), fabricPending(target)], { concurrency: "unbounded" }).pipe(Effect62.map(([marked, fabric]) => marked + fabric));
 
 // src/proxmox/sdn-apply.ts
 var ProxmoxSdnApply = Resource30("Proxmox.SdnApply");
-var read3 = (props) => sdnPendingCount(props.target).pipe(Effect64.map((pending) => ({ pending })));
-var ProxmoxSdnApplyProvider = () => Provider30.effect(ProxmoxSdnApply, Effect64.succeed(ProxmoxSdnApply.Provider.of({
-  list: () => Effect64.succeed([]),
-  read: Effect64.fn(function* ({ olds }) {
+var read3 = (props) => sdnPendingCount(props.target).pipe(Effect63.map((pending) => ({ pending })));
+var ProxmoxSdnApplyProvider = () => Provider30.effect(ProxmoxSdnApply, Effect63.succeed(ProxmoxSdnApply.Provider.of({
+  list: () => Effect63.succeed([]),
+  read: Effect63.fn(function* ({ olds }) {
     return yield* read3(olds);
   }),
-  diff: Effect64.fn(function* ({ news }) {
+  diff: Effect63.fn(function* ({ news }) {
     if (!isResolved17(news))
       return;
     const { pending } = yield* read3(news);
     return pending === 0 ? { action: "noop" } : { action: "update" };
   }),
-  reconcile: Effect64.fn(function* ({ news }) {
+  reconcile: Effect63.fn(function* ({ news }) {
     const staged = yield* read3(news);
     if (staged.pending === 0)
       return staged;
@@ -5155,16 +5127,16 @@ var ProxmoxSdnApplyProvider = () => Provider30.effect(ProxmoxSdnApply, Effect64.
     yield* pve(news.target, "provision", "PUT", "cluster/sdn");
     const after = yield* read3(news);
     if (after.pending !== 0) {
-      return yield* Effect64.die(new Error(`PUT /cluster/sdn returned no error but ${String(after.pending)} SDN object(s) ` + "are still staged. The running config does not match the declared one -- check " + "`pvesh get /cluster/sdn/zones --pending 1` for the objects PVE refused."));
+      return yield* Effect63.die(new Error(`PUT /cluster/sdn returned no error but ${String(after.pending)} SDN object(s) ` + "are still staged. The running config does not match the declared one -- check " + "`pvesh get /cluster/sdn/zones --pending 1` for the objects PVE refused."));
     }
     return after;
   }),
-  delete: () => Effect64.void
+  delete: () => Effect63.void
 })));
 // src/proxmox/sdn-subnet.ts
 import { Resource as Resource31 } from "alchemy";
 import * as Provider31 from "alchemy/Provider";
-import * as Effect65 from "effect/Effect";
+import * as Effect64 from "effect/Effect";
 
 // src/proxmox/sdn-subnet-form.ts
 var subnetId = (props) => `${props.zone}-${props.cidr.replace("/", "-")}`;
@@ -5224,11 +5196,11 @@ var handlers20 = pveHandlers({
   path: (props) => `cluster/sdn/vnets/${props.vnet}/subnets/${subnetId(props)}`,
   updateForm: updateForm6
 });
-var ProxmoxSdnSubnetProvider = () => Provider31.effect(ProxmoxSdnSubnet, Effect65.succeed(ProxmoxSdnSubnet.Provider.of(handlers20)));
+var ProxmoxSdnSubnetProvider = () => Provider31.effect(ProxmoxSdnSubnet, Effect64.succeed(ProxmoxSdnSubnet.Provider.of(handlers20)));
 // src/proxmox/sdn-vnet.ts
 import { Resource as Resource32 } from "alchemy";
 import * as Provider32 from "alchemy/Provider";
-import * as Effect66 from "effect/Effect";
+import * as Effect65 from "effect/Effect";
 var ProxmoxSdnVnet = Resource32("Proxmox.SdnVnet");
 var tagOf = (value) => typeof value === "number" ? value : undefined;
 var shape11 = (props) => {
@@ -5266,11 +5238,11 @@ var handlers21 = pveHandlers({
   path: (props) => `cluster/sdn/vnets/${props.vnet}`,
   updateForm: updateForm7
 });
-var ProxmoxSdnVnetProvider = () => Provider32.effect(ProxmoxSdnVnet, Effect66.succeed(ProxmoxSdnVnet.Provider.of(handlers21)));
+var ProxmoxSdnVnetProvider = () => Provider32.effect(ProxmoxSdnVnet, Effect65.succeed(ProxmoxSdnVnet.Provider.of(handlers21)));
 // src/proxmox/sdn-zone.ts
 import { Resource as Resource33 } from "alchemy";
 import * as Provider33 from "alchemy/Provider";
-import * as Effect67 from "effect/Effect";
+import * as Effect66 from "effect/Effect";
 var ProxmoxSdnZone = Resource33("Proxmox.SdnZone");
 var sameIpam = (live, declared2) => (live === "" ? "pve" : live) === (declared2 === undefined || declared2 === "" ? "pve" : declared2);
 var body6 = (props) => ({
@@ -5323,13 +5295,13 @@ var handlers22 = pveHandlers({
     return withClears(fields, clear);
   }
 });
-var ProxmoxSdnZoneProvider = () => Provider33.effect(ProxmoxSdnZone, Effect67.succeed(ProxmoxSdnZone.Provider.of(handlers22)));
+var ProxmoxSdnZoneProvider = () => Provider33.effect(ProxmoxSdnZone, Effect66.succeed(ProxmoxSdnZone.Provider.of(handlers22)));
 // src/proxmox/storage.ts
 import { Resource as Resource34 } from "alchemy";
 import { isResolved as isResolved18 } from "alchemy/Diff";
 import * as Provider34 from "alchemy/Provider";
 import * as storage2 from "@distilled.cloud/proxmox/storage";
-import * as Effect69 from "effect/Effect";
+import * as Effect68 from "effect/Effect";
 
 // src/proxmox/storage-form.ts
 var STORAGE_CREATE = "pve:POST /storage";
@@ -5361,7 +5333,7 @@ var toDistilledUpdate3 = (props) => underscored(updateForm8(props));
 
 // src/proxmox/storage-wire.ts
 import * as storage from "@distilled.cloud/proxmox/storage";
-import * as Effect68 from "effect/Effect";
+import * as Effect67 from "effect/Effect";
 var str2 = (value, fallback = "") => typeof value === "string" ? value : fallback;
 var tokens = (value) => value.split(",").map((part) => part.trim()).filter((part) => part !== "").sort().join(",");
 var sameList2 = (declared2, live) => declared2 === undefined || tokens(declared2) === tokens(live);
@@ -5380,10 +5352,8 @@ var attributesOf9 = (live, props) => {
     type: str2(data["type"], props.type)
   };
 };
-var readStorageOrFail = (props) => readOrUnreadable(runPve(props.target, "provision", false, storage.getStorage({ storage: props.storage }))).pipe(Effect68.map((live) => live === UNREADABLE ? UNREADABLE : attributesOf9(live, props)));
-var readStorage = (props) => readStorageOrFail(props).pipe(Effect68.orElseSucceed(() => {
-  return;
-}));
+var readStorageOrFail = (props) => readOrUnreadable(runPve(props.target, "provision", false, storage.getStorage({ storage: props.storage }))).pipe(Effect67.map((live) => live === UNREADABLE ? UNREADABLE : attributesOf9(live, props)));
+var readStorage = (props) => readStorageOrFail(props).pipe(Effect67.catchTag("StorageNotFound", () => Effect67.succeed(undefined)));
 var dropUnreadable7 = (live) => live === UNREADABLE ? undefined : live;
 var matches9 = (attributes2, props) => sameList2(props.content, attributes2.content) && sameList2(props.nodes, attributes2.nodes) && sameList2(props["prune-backups"], attributes2["prune-backups"]) && same7(props.disable, attributes2.disable) && same7(props.shared, attributes2.shared) && same7(props.preallocation, attributes2.preallocation) && same7(props.comment, attributes2.comment);
 
@@ -5391,12 +5361,12 @@ var matches9 = (attributes2, props) => sameList2(props.content, attributes2.cont
 var ProxmoxStorage = Resource34("Proxmox.Storage", {
   defaultRemovalPolicy: "retain"
 });
-var ProxmoxStorageProvider = () => Provider34.effect(ProxmoxStorage, Effect69.succeed(ProxmoxStorage.Provider.of({
-  list: () => Effect69.succeed([]),
-  read: Effect69.fn(function* ({ olds, output }) {
+var ProxmoxStorageProvider = () => Provider34.effect(ProxmoxStorage, Effect68.succeed(ProxmoxStorage.Provider.of({
+  list: () => Effect68.succeed([]),
+  read: Effect68.fn(function* ({ olds, output }) {
     return dropUnreadable7(yield* output === undefined ? readStorage(olds) : readStorageOrFail(olds));
   }),
-  diff: Effect69.fn(function* ({ news, output }) {
+  diff: Effect68.fn(function* ({ news, output }) {
     if (!isResolved18(news))
       return;
     yield* guardWrite2(STORAGE_CREATE, createForm11(news), output === undefined);
@@ -5414,7 +5384,7 @@ var ProxmoxStorageProvider = () => Provider34.effect(ProxmoxStorage, Effect69.su
     }
     return matches9(live, news) ? { action: "noop" } : { action: "update" };
   }),
-  reconcile: Effect69.fn(function* ({ news }) {
+  reconcile: Effect68.fn(function* ({ news }) {
     const before = dropUnreadable7(yield* readStorage(news));
     yield* guardWrite2(STORAGE_CREATE, createForm11(news), before === undefined);
     yield* guardWrite2(STORAGE_UPDATE, updateForm8(news), false);
@@ -5425,11 +5395,11 @@ var ProxmoxStorageProvider = () => Provider34.effect(ProxmoxStorage, Effect69.su
     }
     const after = dropUnreadable7(yield* readStorage(news));
     if (after === undefined) {
-      return yield* Effect69.die(new Error(`storage/${news.storage}: the write returned no error but the storage is still ` + 'absent. PVE wraps every answer in {"data":...} and can report success on a ' + "call that did nothing -- read back rather than trusting the status code."));
+      return yield* Effect68.die(new Error(`storage/${news.storage}: the write returned no error but the storage is still ` + 'absent. PVE wraps every answer in {"data":...} and can report success on a ' + "call that did nothing -- read back rather than trusting the status code."));
     }
     return after;
   }),
-  delete: Effect69.fn(function* ({ olds }) {
+  delete: Effect68.fn(function* ({ olds }) {
     yield* runPve(olds.target, "provision", true, storage2.deleteStorage({ storage: olds.storage }));
   })
 })));
@@ -5437,11 +5407,11 @@ var ProxmoxStorageProvider = () => Provider34.effect(ProxmoxStorage, Effect69.su
 import { Resource as Resource35 } from "alchemy";
 import { isResolved as isResolved19 } from "alchemy/Diff";
 import * as Provider35 from "alchemy/Provider";
-import * as Effect72 from "effect/Effect";
+import * as Effect71 from "effect/Effect";
 
 // src/proxmox/zfs-pool-wire.ts
 import * as nodes10 from "@distilled.cloud/proxmox/nodes";
-import * as Effect70 from "effect/Effect";
+import * as Effect69 from "effect/Effect";
 var leafDevices = (children) => Array.isArray(children) ? children.flatMap((entry) => {
   const vdev = entry;
   const nested = leafDevices(vdev.children);
@@ -5454,18 +5424,18 @@ var attributesOf10 = (live, props) => ({
   node: props.node,
   state: text(live.state, "unknown")
 });
-var readPoolOrFail = (props) => readOrUnreadable(runPve(props.target, "read", false, nodes10.getNodeDiskZfs({ name: props.name, node: props.node }))).pipe(Effect70.map((live) => {
+var readPoolOrFail = (props) => readOrUnreadable(runPve(props.target, "read", false, nodes10.getNodeDiskZfs({ name: props.name, node: props.node }))).pipe(Effect69.map((live) => {
   if (live === UNREADABLE)
     return UNREADABLE;
   return text(live.name) === "" ? undefined : attributesOf10(live, props);
 }));
-var readPool = (props) => readPoolOrFail(props).pipe(Effect70.orElseSucceed(() => {
+var readPool = (props) => readPoolOrFail(props).pipe(Effect69.orElseSucceed(() => {
   return;
 }));
 var dropUnreadable8 = (live) => live === UNREADABLE ? undefined : live;
 
 // src/proxmox/zfs-pool-form.ts
-import * as Effect71 from "effect/Effect";
+import * as Effect70 from "effect/Effect";
 import * as nodes11 from "@distilled.cloud/proxmox/nodes";
 var ZFS_POOL_CREATE = "pve:POST /nodes/{node}/disks/zfs";
 var zfsPoolCreateEndpoint = (props) => props.devices === undefined || props.raidlevel === undefined ? undefined : ZFS_POOL_CREATE;
@@ -5486,25 +5456,25 @@ var toDistilledCreate5 = (props) => {
   };
 };
 var SETTLE_ATTEMPTS = 30;
-var createPool = (props, read4) => Effect71.gen(function* () {
+var createPool = (props, read4) => Effect70.gen(function* () {
   const existing = yield* read4(props);
   if (existing !== undefined)
     return existing;
   if (props.devices === undefined || props.raidlevel === undefined) {
-    return yield* Effect71.die(new Error(`${props.node}/${props.name}: this is an adopt-only declaration (no \`devices\` or ` + "`raidlevel`) and the pool is not there to adopt. An adopt-only Proxmox.ZfsPool never " + "creates -- declare both fields for a pool this resource should build, or point this " + "declaration at a pool that already exists on this node."));
+    return yield* Effect70.die(new Error(`${props.node}/${props.name}: this is an adopt-only declaration (no \`devices\` or ` + "`raidlevel`) and the pool is not there to adopt. An adopt-only Proxmox.ZfsPool never " + "creates -- declare both fields for a pool this resource should build, or point this " + "declaration at a pool that already exists on this node."));
   }
   yield* guardForm(zfsPoolCreateEndpoint(props), asForm2(createForm12(props)), true);
   const upid = yield* runPve(props.target, "provision", true, nodes11.createNodeDiskZfs(toDistilledCreate5(props)));
-  const settle4 = (attempts) => Effect71.gen(function* () {
+  const settle3 = (attempts) => Effect70.gen(function* () {
     const live = yield* read4(props);
     if (live !== undefined || attempts <= 0)
       return live;
-    yield* Effect71.sleep("2 seconds");
-    return yield* settle4(attempts - 1);
+    yield* Effect70.sleep("2 seconds");
+    return yield* settle3(attempts - 1);
   });
-  const after = yield* settle4(SETTLE_ATTEMPTS);
+  const after = yield* settle3(SETTLE_ATTEMPTS);
   if (after === undefined) {
-    return yield* Effect71.die(new Error(`nodes/${props.node}/disks/zfs/${props.name}: POST returned ${text(upid, "(no UPID)")} ` + "but the pool has not appeared. That POST only forks a `zfscreate` worker, so the task " + `holds the real error -- read it with \`pvesh get /nodes/${props.node}/tasks/<upid>/log\`. ` + "NOTHING WAS RETRIED AND NOTHING WAS CLEANED UP: if the worker reached `zpool create`, " + "the declared devices have already been written to. DO NOT RE-RUN THIS DEPLOY BEFORE " + 'READING THAT LOG: `read` cannot tell "the worker is still running" from "the pool is ' + 'genuinely gone", so a re-run this soon can POST a SECOND `zpool create` at the SAME ' + "devices while the first one is still mid-write -- confirm the task finished (one way " + "or the other) before trying again."));
+    return yield* Effect70.die(new Error(`nodes/${props.node}/disks/zfs/${props.name}: POST returned ${text(upid, "(no UPID)")} ` + "but the pool has not appeared. That POST only forks a `zfscreate` worker, so the task " + `holds the real error -- read it with \`pvesh get /nodes/${props.node}/tasks/<upid>/log\`. ` + "NOTHING WAS RETRIED AND NOTHING WAS CLEANED UP: if the worker reached `zpool create`, " + "the declared devices have already been written to. DO NOT RE-RUN THIS DEPLOY BEFORE " + 'READING THAT LOG: `read` cannot tell "the worker is still running" from "the pool is ' + 'genuinely gone", so a re-run this soon can POST a SECOND `zpool create` at the SAME ' + "devices while the first one is still mid-write -- confirm the task finished (one way " + "or the other) before trying again."));
   }
   return after;
 });
@@ -5514,12 +5484,12 @@ var destroyPool = (props) => runPve(props.target, "provision", true, nodes11.del
 var ProxmoxZfsPool = Resource35("Proxmox.ZfsPool", {
   defaultRemovalPolicy: "retain"
 });
-var ProxmoxZfsPoolProvider = () => Provider35.effect(ProxmoxZfsPool, Effect72.succeed(ProxmoxZfsPool.Provider.of({
-  list: () => Effect72.succeed([]),
-  read: Effect72.fn(function* ({ olds, output }) {
+var ProxmoxZfsPoolProvider = () => Provider35.effect(ProxmoxZfsPool, Effect71.succeed(ProxmoxZfsPool.Provider.of({
+  list: () => Effect71.succeed([]),
+  read: Effect71.fn(function* ({ olds, output }) {
     return dropUnreadable8(yield* output === undefined ? readPool(olds) : readPoolOrFail(olds));
   }),
-  diff: Effect72.fn(function* ({ news, output }) {
+  diff: Effect71.fn(function* ({ news, output }) {
     if (!isResolved19(news))
       return;
     yield* guardForm(zfsPoolCreateEndpoint(news), asForm2(createForm12(news)), output === undefined);
@@ -5536,10 +5506,10 @@ var ProxmoxZfsPoolProvider = () => Provider35.effect(ProxmoxZfsPool, Effect72.su
     }
     return { action: "noop" };
   }),
-  reconcile: Effect72.fn(function* ({ news }) {
-    return yield* createPool(news, (props) => readPool(props).pipe(Effect72.map(dropUnreadable8)));
+  reconcile: Effect71.fn(function* ({ news }) {
+    return yield* createPool(news, (props) => readPool(props).pipe(Effect71.map(dropUnreadable8)));
   }),
-  delete: Effect72.fn(function* ({ olds }) {
+  delete: Effect71.fn(function* ({ olds }) {
     yield* destroyPool(olds);
   })
 })));
@@ -5619,5 +5589,5 @@ export {
   violations
 };
 
-//# debugId=483DD0A45E397D2364756E2164756E21
+//# debugId=7C16E956F2A3150864756E2164756E21
 //# sourceMappingURL=index.js.map