@homeflare/alchemy 0.37.1 → 0.37.3

package/dist/proxmox/pbs-datastore-guard.d.ts

@@ -33,13 +33,15 @@ export declare const guardBackend: (live: PbsDatastoreAttributes, props: PbsData
 /**
  * Wait for PBS to finish, then answer the last thing it said.
  *
- * ⛔ IT EXISTS BECAUSE A PBS CREATE IS A FORKED WORKER AND THE CONFIG SECTION IS WRITTEN LAST.
+ * ⛔ THE ORIGINAL CREATE-WORKER ASSUMPTION BELOW WAS REASONED, NOT MEASURED.
  *   `POST /config/datastore` answers with a UPID while a `create-datastore` task builds the chunk
  *   store's 65536 directories; only when that finishes does the section reach `datastore.cfg`. An
  *   immediate read-back therefore sees a datastore that is not there yet, and the factory's "the
  *   write returned no error but the object is still absent" would fire on a create going perfectly.
  *   The DELETE forks a worker too. ⚠️ DOCUMENTED FROM THE PUBLISHED SCHEMA, NOT MEASURED — I hold
- *   no PBS token. If a create turns out to be synchronous, the first poll simply succeeds.
+ *   no PBS token. The pinned PBS 4.2.6-1 schema actually declares a NULL create response,
+ *   while DELETE declares a UPID. We preserve bounded readback for both; a synchronous create
+ *   succeeds at the first poll rather than depending on the old UPID assumption.
  * ★ IT TAKES THE READ AS AN EFFECT RATHER THAN A FUNCTION — the one simplification over
  *   ceph-pool-settle.ts: an Effect is a description, so re-running it re-reads and no dependency
  *   has to be threaded back in to avoid a cycle.
@@ -48,8 +50,9 @@ export declare const guardBackend: (live: PbsDatastoreAttributes, props: PbsData
  *   Anything still unsettled after two minutes is a fault to surface, not a wait to lengthen, and
  *   the caller's message points at the task log, which is where the real answer is. `Effect.sleep`
  *   yields between polls; nothing here parks a call on one long wait.
- * ⚠️ POLLING THE TASK STATUS INSTEAD WOULD BE WORSE, for ceph-pool-settle.ts's reason: every call
- *   mints a FRESH token, so the token asking about the task is not the one that started it.
+ * ⚠️ THE ORIGINAL TRANSPORT MINTED A TOKEN PER CALL, making task-owner polling unreliable.
+ *   The SDK runner now reuses leases, but create has no task id in its measured response schema.
+ *   This migration therefore preserves bounded readback rather than inventing a task handle.
  */
 export declare const settle: <A, E, R>(read: Effect.Effect<A, E, R>, done: (live: A) => boolean) => Effect.Effect<A, E, R>;
 //# sourceMappingURL=pbs-datastore-guard.d.ts.map

package/dist/proxmox/pbs-datastore-guard.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pbs-datastore-guard.d.ts","sourceRoot":"","sources":["../../src/proxmox/pbs-datastore-guard.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,KAAK,sBAAsB,EAAU,MAAM,yBAAyB,CAAC;AAC9E,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAmB5D;;;;GAIG;AACH,eAAO,MAAM,SAAS,SAAU,sBAAsB,SAAS,iBAAiB,sCAWzE,CAAC;AAER;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,YAAY,SAAU,sBAAsB,SAAS,iBAAiB,sCAY5E,CAAC;AAER;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,eAAO,MAAM,MAAM,GAAI,CAAC,EAAE,CAAC,EAAE,CAAC,QAAQ,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,OAAO,2BAQpF,CAAC"}
+{"version":3,"file":"pbs-datastore-guard.d.ts","sourceRoot":"","sources":["../../src/proxmox/pbs-datastore-guard.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,KAAK,sBAAsB,EAAU,MAAM,yBAAyB,CAAC;AAC9E,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAmB5D;;;;GAIG;AACH,eAAO,MAAM,SAAS,SAAU,sBAAsB,SAAS,iBAAiB,sCAWzE,CAAC;AAER;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,YAAY,SAAU,sBAAsB,SAAS,iBAAiB,sCAY5E,CAAC;AAER;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,eAAO,MAAM,MAAM,GAAI,CAAC,EAAE,CAAC,EAAE,CAAC,QAAQ,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,OAAO,2BAQpF,CAAC"}

package/dist/proxmox/pbs-datastore-lifecycle.d.ts

@@ -0,0 +1,56 @@
+import type { Input } from 'alchemy/Input';
+import * as Effect from 'effect/Effect';
+import type { PbsDatastoreProps } from './pbs-datastore.ts';
+import { type PbsDatastoreAttributes } from './pbs-datastore-form.ts';
+export declare const handlers: {
+    /**
+     * ⛔ EMPTY, AND HERE IT GUARDS THE ESTATE'S BACKUPS. `GET /config/datastore` returns every
+     *   datastore on the host, the one PVE's `type: pbs` storage writes into included. See
+     *   `pveHandlers` in resource.ts for why adoption stays an explicit act.
+     */
+    list: () => Effect.Effect<never[], never, never>;
+    read: ({ olds }: {
+        olds: PbsDatastoreProps;
+    }) => Effect.Effect<PbsDatastoreAttributes | undefined, Error | import("./credential-errors.ts").PveCredentialDenied | import("effect/Cause").TimeoutError | import("@distilled.cloud/proxmox-backup/Protocol").ProxmoxBackupOpError, import("effect/unstable/http/HttpClient").HttpClient>;
+    /**
+     * ⚠️ `isResolved` IS THE NARROWING, resource.ts's reason: at plan time a prop can still be an
+     *   unresolved Output, and comparing a placeholder to a live value reports a phantom update.
+     * ⛔ `guardPath` IS A DELIBERATE DEPARTURE FROM storage.ts, which lets its create-only field
+     *   plan as noop. Dying fails `alchemy plan` with both paths named — see the ⛔ on the prop.
+     */
+    diff: ({ news, output, }: {
+        news: Input<PbsDatastoreProps>;
+        output: PbsDatastoreAttributes | undefined;
+    }) => Effect.Effect<{
+        readonly action: 'update';
+    } | {
+        readonly action: 'noop';
+    } | undefined, Error | import("effect/unstable/http/HttpClientError").HttpClientError | import("./credential-errors.ts").PveCredentialDenied, import("effect/unstable/http/HttpClient").HttpClient>;
+    /**
+     * ⚠️ NOT THE FACTORY'S reconcile: it reads back ONCE, immediately — see the ⛔ on `settle`.
+     * ⛔ `guardPath` RUNS HERE TOO, AND THAT IS NOT BELT-AND-BRACES — see the ⛔ on it.
+     * ⛔ THE `matches` GUARD BEFORE THE PUT IS resource.ts's, AND IT IS WHY ADOPTION IS FREE.
+     */
+    reconcile: (args_0: {
+        news: PbsDatastoreProps;
+    }) => Effect.Effect<PbsDatastoreAttributes, Error | import("effect/unstable/http/HttpClientError").HttpClientError | import("./credential-errors.ts").PveCredentialDenied, import("effect/unstable/http/HttpClient").HttpClient>;
+    /**
+     * ⛔ FULLY IMPLEMENTED, NEVER A STUB, and it only ever runs on an explicit
+     *   `.pipe(RemovalPolicy.destroy())` because this family defaults to `retain`.
+     * ⛔ NO `destroy-data`. PBS's DELETE drops the section from `datastore.cfg` and leaves every
+     *   chunk and snapshot on disk; `destroy-data=1` erases the contents. It is not a prop and
+     *   not a flag here, so this provider can un-declare a datastore and can never erase one.
+     *   ⚠️ IT IS STILL A ONE-WAY DOOR FOR A DECLARATION: re-adding a datastore over an existing
+     *     chunk store needs `reuse-datastore`, which is deliberately not declarable — see the
+     *     ⚠️ on `createForm`. Re-adopt with `proxmox-backup-manager datastore create …`.
+     * ⚠️ NO `keep-job-configs` EITHER, SO THE JOBS GO TOO: PBS defaults it false and removes the
+     *   verify, sync and prune jobs referencing this datastore — objects nothing here declares.
+     *   PBS's default stands, so the blast radius is what a human clicking Remove would get.
+     * ⚠️ AND THE REFUSAL CAN ARRIVE AFTER THE RESPONSE: the delete forks a worker too, so a store
+     *   held open by a running backup can fail once the call has already returned 200.
+     */
+    delete: (args_0: {
+        olds: PbsDatastoreProps;
+    }) => Effect.Effect<undefined, Error | import("./credential-errors.ts").PveCredentialDenied | import("effect/Cause").TimeoutError | import("@distilled.cloud/proxmox-backup/Protocol").ProxmoxBackupOpError, import("effect/unstable/http/HttpClient").HttpClient>;
+};
+//# sourceMappingURL=pbs-datastore-lifecycle.d.ts.map

package/dist/proxmox/pbs-datastore-lifecycle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pbs-datastore-lifecycle.d.ts","sourceRoot":"","sources":["../../src/proxmox/pbs-datastore-lifecycle.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,EAAE,KAAK,sBAAsB,EAA+B,MAAM,yBAAyB,CAAC;AAMnG,eAAO,MAAM,QAAQ;IACnB;;;;OAIG;IACH,IAAI;IACJ,IAAI,aAAa;QAAE,IAAI,EAAE,iBAAiB,CAAA;KAAE;IAC5C;;;;;OAKG;IACH,IAAI,sBAGD;QACD,IAAI,EAAE,KAAK,CAAC,iBAAiB,CAAC,CAAC;QAC/B,MAAM,EAAE,sBAAsB,GAAG,SAAS,CAAC;KAC5C;yBAU4C,QAAQ;;yBAGT,MAAM;;IAElD;;;;OAIG;IACH,SAAS;cAAyC,iBAAiB;;IAiCnE;;;;;;;;;;;;;;OAcG;IACH,MAAM;cAAyC,iBAAiB;;CAcjE,CAAC"}

package/dist/proxmox/pbs-datastore-wire.d.ts

@@ -0,0 +1,21 @@
+/** PBS 4.2.6-1 datastore SDK operations; no raw route-string transport. */
+import * as config from '@distilled.cloud/proxmox-backup/config';
+import * as Effect from 'effect/Effect';
+import type { PbsDatastoreProps } from './pbs-datastore.ts';
+/**
+ * ⛔ THE RAW READ FOLDED EVERY ERROR TO ABSENCE. Its `name` presence check could not distinguish
+ *   a missing section from a denied read: both suggested CREATE for a datastore holding backups.
+ *   The resulting "already exists" failure was loud, but the same fold on DELETE was worse:
+ *   the first denied read confirmed removal while the datastore still stood.
+ * ★ MEASURED 2026-09-24 against PBS 4.2.6-1: a missing section is plain-text HTTP400,
+ *   `no such datastore '<name>'`. The distilled patch types that GET response as
+ *   DatastoreNotFound. Only that tag means absent; no permission, transport or malformed-response
+ *   error can settle deletion. This replaces the old recommendation to disambiguate by listing.
+ * ⚠️ The read role still requires Datastore.Audit, and a missing grant now fails visibly.
+ */
+export declare const readOne: (props: PbsDatastoreProps) => Effect.Effect<import("./pbs-datastore-form.ts").PbsDatastoreAttributes | undefined, Error | import("./credential-errors.ts").PveCredentialDenied | import("effect/Cause").TimeoutError | config.ProxmoxBackupOpError, import("effect/unstable/http/HttpClient").HttpClient>;
+export declare const createOne: (props: PbsDatastoreProps) => Effect.Effect<config.CreateConfigDatastoreResponse, Error | import("./credential-errors.ts").PveCredentialDenied | import("effect/Cause").TimeoutError | config.ProxmoxBackupOpError, import("effect/unstable/http/HttpClient").HttpClient>;
+export declare const updateOne: (props: PbsDatastoreProps) => Effect.Effect<config.PutConfigDatastoreResponse, Error | import("./credential-errors.ts").PveCredentialDenied | import("effect/Cause").TimeoutError | config.ProxmoxBackupOpError, import("effect/unstable/http/HttpClient").HttpClient>;
+/** ⛔ No destroy-data or keep-job-configs flag: retain the original removal contract. */
+export declare const deleteOne: (props: PbsDatastoreProps) => Effect.Effect<string | undefined, Error | import("./credential-errors.ts").PveCredentialDenied | import("effect/Cause").TimeoutError | config.ProxmoxBackupOpError, import("effect/unstable/http/HttpClient").HttpClient>;
+//# sourceMappingURL=pbs-datastore-wire.d.ts.map

package/dist/proxmox/pbs-datastore-wire.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pbs-datastore-wire.d.ts","sourceRoot":"","sources":["../../src/proxmox/pbs-datastore-wire.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,OAAO,KAAK,MAAM,MAAM,wCAAwC,CAAC;AACjE,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAGxC,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAuD5D;;;;;;;;;;GAUG;AACH,eAAO,MAAM,OAAO,UAAW,iBAAiB,gRAI7C,CAAC;AAEJ,eAAO,MAAM,SAAS,UAAW,iBAAiB,gPACqC,CAAC;AAExF,eAAO,MAAM,SAAS,UAAW,iBAAiB,6OACkC,CAAC;AAErF,wFAAwF;AACxF,eAAO,MAAM,SAAS,UAAW,iBAAiB,8NAS9C,CAAC"}

package/dist/proxmox/pbs-datastore.d.ts

@@ -13,12 +13,11 @@
  *   `/access/domains` lists the realms `pbs`, `pam` and an openid realm. So the
  *   prefix, the `{"data": …}` envelope and the strict-TLS story are PVE's exactly — and only the
  *   credential differs. There is no `pve` realm here; a PVE token cannot authenticate at all.
- *   The header differs too, which is why `pve()` exists rather than `pve()` being reused — see the
- *   ⛔ on `pbsAuthorization` in pbs-datastore-form.ts.
+ *   The distilled PBS SDK owns that distinct header; `distilled-pbs.ts` supplies its credentials.
  *
- * ⛔ THERE IS NO OPENBAO MOUNT FOR PBS TODAY, SO NOTHING HERE CAN DEPLOY YET. `PbsTarget.mount` is
+ * ⚠️ HISTORICAL BOOTSTRAP BLOCKER, 2026-09-13: THERE WAS NO PBS MOUNT. `PbsTarget.mount` is
  *   a parameter for the reason `PveTarget.mount` is — the provider must be able to leave this
- *   estate — but the estate has nothing to put in it. MEASURED: under the agent's approle,
+ *   estate. A later PBS credential lane resolved the following incident. MEASURED: under the agent's approle,
  *   `bao token capabilities` answers `deny` for `proxmox-c1/creds/{read,provision}`,
  *   `proxmox-c2/creds/read` and every `…pbs…` path tried, and `sys/mounts` is 403 — so I could
  *   not enumerate the mounts to PROVE a PBS one is absent. That it is absent is the brief's
@@ -27,7 +26,7 @@
  *     <mount>/creds/<role>` answering `{"data":{"token_id":…,"secret":…}}`, where `token_id` is a
  *     PBS token id `user@realm!tokenname` — `hf-read@pbs!…` and `hf-provision@pbs!…`. Same short,
  *     non-renewable lease contract as `proxmox-c1`.
- *   ⚠️ PBS HAS NO DYNAMIC-SECRETS PLUGIN OF ITS OWN — OpenBao's Proxmox support is a PVE thing — so
+ *   ⚠️ PBS HAD NO DYNAMIC-SECRETS PLUGIN OF ITS OWN — OpenBao's Proxmox support is a PVE thing — so
  *     the mount is a small custom vendor against `POST /access/users/{id}/token/{name}`. Say which
  *     mount and role you needed rather than reaching for the read-only `metrics@pbs` token on
  *     the kv shelf: widening that would delete the outer lock for every reader of the shelf.
@@ -51,7 +50,7 @@
  */
 import { Resource } from 'alchemy';
 import * as Provider from 'alchemy/Provider';
-import { type PbsDatastoreAttributes, type PbsTarget } from './pbs-datastore-form.ts';
+import type { PbsDatastoreAttributes, PbsTarget } from './pbs-datastore-form.ts';
 import type { PveRequirements } from './resource.ts';
 export type { PbsDatastoreAttributes, PbsTarget };
 /**

package/dist/proxmox/pbs-datastore.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pbs-datastore.d.ts","sourceRoot":"","sources":["../../src/proxmox/pbs-datastore.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkDG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAEnC,OAAO,KAAK,QAAQ,MAAM,kBAAkB,CAAC;AAG7C,OAAO,EACL,KAAK,sBAAsB,EAC3B,KAAK,SAAS,EAMf,MAAM,yBAAyB,CAAC;AAGjC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAGrD,YAAY,EAAE,sBAAsB,EAAE,SAAS,EAAE,CAAC;AAElD;;;;;;GAMG;AACH,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,SAAS,CAAC;IAClB,6FAA6F;IAC7F,IAAI,EAAE,MAAM,CAAC;IACb;;;;;;;;;OASG;IACH,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,0EAA0E;IAC1E,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gGAAgG;IAChG,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,kGAAkG;IAClG,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;;;OAKG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,kFAAkF;IAClF,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,+EAA+E;IAC/E,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,+FAA+F;IAC/F,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;;;;;OAQG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,iGAAiG;IACjG,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC;;;OAGG;IACH,yBAAyB,CAAC,EAAE,MAAM,CAAC;CACpC;AAED,MAAM,WAAW,YAAa,SAAQ,QAAQ,CAC5C,eAAe,EACf,iBAAiB,EACjB,sBAAsB,EACtB,KAAK,EACL,eAAe,CAChB;CAAG;AAEJ,uFAAuF;AACvF,eAAO,MAAM,YAAY,+CAEvB,CAAC;AAEH,eAAO,MAAM,oBAAoB,kIAkH9B,CAAC"}
+{"version":3,"file":"pbs-datastore.d.ts","sourceRoot":"","sources":["../../src/proxmox/pbs-datastore.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiDG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,KAAK,QAAQ,MAAM,kBAAkB,CAAC;AAE7C,OAAO,KAAK,EAAE,sBAAsB,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AAEjF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAErD,YAAY,EAAE,sBAAsB,EAAE,SAAS,EAAE,CAAC;AAElD;;;;;;GAMG;AACH,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,SAAS,CAAC;IAClB,6FAA6F;IAC7F,IAAI,EAAE,MAAM,CAAC;IACb;;;;;;;;;OASG;IACH,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,0EAA0E;IAC1E,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gGAAgG;IAChG,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,kGAAkG;IAClG,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;;;OAKG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,kFAAkF;IAClF,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,+EAA+E;IAC/E,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,+FAA+F;IAC/F,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;;;;;OAQG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,iGAAiG;IACjG,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC;;;OAGG;IACH,yBAAyB,CAAC,EAAE,MAAM,CAAC;CACpC;AAED,MAAM,WAAW,YAAa,SAAQ,QAAQ,CAC5C,eAAe,EACf,iBAAiB,EACjB,sBAAsB,EACtB,KAAK,EACL,eAAe,CAChB;CAAG;AAEJ,uFAAuF;AACvF,eAAO,MAAM,YAAY,+CAEvB,CAAC;AAEH,eAAO,MAAM,oBAAoB,kIACkD,CAAC"}

package/dist/proxmox/pbs-notification-input.d.ts

@@ -0,0 +1,18 @@
+import * as Effect from 'effect/Effect';
+import * as Schema from 'effect/Schema';
+declare const PbsNotificationInputRefusal_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "PbsNotificationInputRefusal";
+} & Readonly<A>;
+export declare class PbsNotificationInputRefusal extends PbsNotificationInputRefusal_base<{
+    readonly message: string;
+}> {
+}
+/**
+ * Fields already use SDK Type-side names; toType validates without any wire transforms.
+ * A schema diagnostic can reproduce the whole submitted form, including a webhook secret or
+ * SMTP password. Sanitize only our pre-request validation failure. SDK operation errors below
+ * this boundary retain their original typed tags and are never remapped.
+ */
+export declare const notificationInput: <S extends Schema.Top>(schema: S, fields: unknown) => Effect.Effect<S["Type"], PbsNotificationInputRefusal, never>;
+export {};
+//# sourceMappingURL=pbs-notification-input.d.ts.map

package/dist/proxmox/pbs-notification-input.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pbs-notification-input.d.ts","sourceRoot":"","sources":["../../src/proxmox/pbs-notification-input.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;;;;AAExC,qBAAa,2BAA4B,SAAQ,iCAAgD;IAC/F,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B,CAAC;CAAG;AAEL;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB,GAAI,CAAC,SAAS,MAAM,CAAC,GAAG,UAAU,CAAC,UAAU,OAAO,iEAS/E,CAAC"}

package/dist/proxmox/pbs-notification-matcher-distilled.d.ts

@@ -0,0 +1,11 @@
+/** PBS 4.2.6-1 matcher operations through SDK 0.3.0; failed reads never become absence. */
+import * as config from '@distilled.cloud/proxmox-backup/config';
+import * as Effect from 'effect/Effect';
+import { type MatcherCreateForm, type MatcherUpdateForm } from './notification-matcher-form.ts';
+import type { PbsNotificationMatcherProps as Props } from './pbs-notification-matcher.ts';
+export declare const readMatcher: (props: Props) => Effect.Effect<import("./notification-matcher-form.ts").NotificationMatcherAttributes | undefined, import("@distilled.cloud/caddy").BadGateway | import("@distilled.cloud/caddy").BadRequest | import("@distilled.cloud/caddy").ConfigError | import("@distilled.cloud/caddy").Conflict | Error | import("@distilled.cloud/caddy").Forbidden | import("@distilled.cloud/caddy").GatewayTimeout | import("effect/unstable/http/HttpClientError").HttpClientError | import("@distilled.cloud/caddy").InternalServerError | import("@distilled.cloud/caddy").Locked | import("@distilled.cloud/proxmox-backup/Errors").ParameterVerificationFailed | import("./credential-errors.ts").PveCredentialDenied | import("@distilled.cloud/caddy").ServiceUnavailable | import("effect/Cause").TimeoutError | import("@distilled.cloud/caddy").TooManyRequests | import("@distilled.cloud/caddy").Unauthorized | import("@distilled.cloud/caddy").UnprocessableEntity | import("@distilled.cloud/proxmox-backup/Errors").ClientErrors, import("effect/unstable/http/HttpClient").HttpClient>;
+export declare const createMatcher: (props: Props, form: MatcherCreateForm) => Effect.Effect<config.CreateConfigNotificationMatcherResponse, Error | import("./pbs-notification-input.ts").PbsNotificationInputRefusal | import("./credential-errors.ts").PveCredentialDenied | import("effect/Cause").TimeoutError | config.ProxmoxBackupOpError, import("effect/unstable/http/HttpClient").HttpClient>;
+export declare const updateMatcher: (props: Props, form: MatcherUpdateForm) => Effect.Effect<config.PutConfigNotificationMatcherResponse, Error | import("./pbs-notification-input.ts").PbsNotificationInputRefusal | import("./credential-errors.ts").PveCredentialDenied | import("effect/Cause").TimeoutError | config.ProxmoxBackupOpError, import("effect/unstable/http/HttpClient").HttpClient>;
+/** PBS reverts built-ins on deletion; it reports NotFound only for an absent user-created row. */
+export declare const deleteMatcher: (props: Props) => Effect.Effect<void | config.DeleteConfigNotificationMatcherResponse, import("@distilled.cloud/caddy").BadGateway | import("@distilled.cloud/caddy").BadRequest | import("@distilled.cloud/caddy").ConfigError | import("@distilled.cloud/caddy").Conflict | Error | import("@distilled.cloud/caddy").Forbidden | import("@distilled.cloud/caddy").GatewayTimeout | import("effect/unstable/http/HttpClientError").HttpClientError | import("@distilled.cloud/caddy").InternalServerError | import("@distilled.cloud/caddy").Locked | import("@distilled.cloud/proxmox-backup/Errors").ParameterVerificationFailed | import("./credential-errors.ts").PveCredentialDenied | import("@distilled.cloud/caddy").ServiceUnavailable | import("effect/Cause").TimeoutError | import("@distilled.cloud/caddy").TooManyRequests | import("@distilled.cloud/caddy").Unauthorized | import("@distilled.cloud/caddy").UnprocessableEntity | import("@distilled.cloud/proxmox-backup/Errors").ClientErrors, import("effect/unstable/http/HttpClient").HttpClient>;
+//# sourceMappingURL=pbs-notification-matcher-distilled.d.ts.map

package/dist/proxmox/pbs-notification-matcher-distilled.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pbs-notification-matcher-distilled.d.ts","sourceRoot":"","sources":["../../src/proxmox/pbs-notification-matcher-distilled.ts"],"names":[],"mappings":"AAAA,2FAA2F;AAC3F,OAAO,KAAK,MAAM,MAAM,wCAAwC,CAAC;AACjE,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAGxC,OAAO,EACL,KAAK,iBAAiB,EACtB,KAAK,iBAAiB,EAEvB,MAAM,gCAAgC,CAAC;AACxC,OAAO,KAAK,EAAE,2BAA2B,IAAI,KAAK,EAAE,MAAM,+BAA+B,CAAC;AAE1F,eAAO,MAAM,WAAW,UAAW,KAAK,uhCAerC,CAAC;AAYJ,eAAO,MAAM,aAAa,UAAW,KAAK,QAAQ,iBAAiB,8TAQhE,CAAC;AAEJ,eAAO,MAAM,aAAa,UAAW,KAAK,QAAQ,iBAAiB,2TAOhE,CAAC;AAEJ,kGAAkG;AAClG,eAAO,MAAM,aAAa,UAAW,KAAK,0/BAKc,CAAC"}

package/dist/proxmox/pbs-notification-matcher.d.ts

@@ -36,13 +36,14 @@
  * ★ WHAT THIS NEEDS, READ OFF THE SERVER'S SCHEMA (generated/pbs.ts source):
  *     read      GET                 Sys.Audit  on /system/notifications
  *     write     POST, PUT, DELETE   Sys.Modify on /system/notifications
- *   ⚠️ NOT A DATASTORE PRIVILEGE. A PBS credential scoped to `/datastore/...` reads every matcher
- *     as absent — the "absent, then already exists" signature notification-target.ts describes.
+ *   ⚠️ NOT A DATASTORE PRIVILEGE. A credential scoped to `/datastore/...` cannot read matchers;
+ *     the old client treated that refusal as absent — notification-target.ts describes the
+ *     resulting "absent, then already exists" signature.
  */
 import { Resource } from 'alchemy';
 import * as Provider from 'alchemy/Provider';
 import { type NotificationMatcherAttributes, type NotificationMatcherFields } from './notification-matcher-form.ts';
-import { type PveRequirements, type WithPbsTarget } from './resource.ts';
+import type { PveRequirements, WithPbsTarget } from './resource.ts';
 export interface PbsNotificationMatcherProps extends NotificationMatcherFields, WithPbsTarget {
 }
 export interface PbsNotificationMatcher extends Resource<'Pbs.NotificationMatcher', PbsNotificationMatcherProps, NotificationMatcherAttributes, never, PveRequirements> {

package/dist/proxmox/pbs-notification-matcher.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pbs-notification-matcher.d.ts","sourceRoot":"","sources":["../../src/proxmox/pbs-notification-matcher.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,KAAK,QAAQ,MAAM,kBAAkB,CAAC;AAE7C,OAAO,EACL,KAAK,6BAA6B,EAClC,KAAK,yBAAyB,EAK/B,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,KAAK,eAAe,EAAE,KAAK,aAAa,EAAe,MAAM,eAAe,CAAC;AAEtF,MAAM,WAAW,2BAA4B,SAAQ,yBAAyB,EAAE,aAAa;CAAG;AAEhG,MAAM,WAAW,sBAAuB,SAAQ,QAAQ,CACtD,yBAAyB,EACzB,2BAA2B,EAC3B,6BAA6B,EAC7B,KAAK,EACL,eAAe,CAChB;CAAG;AAEJ,0FAA0F;AAC1F,eAAO,MAAM,sBAAsB,yDAA8D,CAAC;AAgBlG,eAAO,MAAM,8BAA8B,4IAIxC,CAAC"}
+{"version":3,"file":"pbs-notification-matcher.d.ts","sourceRoot":"","sources":["../../src/proxmox/pbs-notification-matcher.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,KAAK,QAAQ,MAAM,kBAAkB,CAAC;AAI7C,OAAO,EACL,KAAK,6BAA6B,EAClC,KAAK,yBAAyB,EAI/B,MAAM,gCAAgC,CAAC;AACxC,OAAO,KAAK,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AASpE,MAAM,WAAW,2BAA4B,SAAQ,yBAAyB,EAAE,aAAa;CAAG;AAEhG,MAAM,WAAW,sBAAuB,SAAQ,QAAQ,CACtD,yBAAyB,EACzB,2BAA2B,EAC3B,6BAA6B,EAC7B,KAAK,EACL,eAAe,CAChB;CAAG;AAEJ,0FAA0F;AAC1F,eAAO,MAAM,sBAAsB,yDAA8D,CAAC;AA4DlG,eAAO,MAAM,8BAA8B,4IAIxC,CAAC"}

package/dist/proxmox/pbs-notification-target-distilled.d.ts

@@ -0,0 +1,20 @@
+/**
+ * PBS 4.2.6-1 notification operations, generated from its vendor schema in SDK 0.3.0.
+ *
+ * ★ Keep targetForm's selective secret groups and deletion semantics. The SDK schemas validate
+ *   the spelling adapter before their typed operations encode it; no request shape is cast.
+ *   Only the SDK's NotFound is absence. An unreadable target must stop adoption, not create it.
+ */
+import * as config from '@distilled.cloud/proxmox-backup/config';
+import type { ProxmoxBackupOpError } from '@distilled.cloud/proxmox-backup/Protocol';
+import * as Effect from 'effect/Effect';
+import type { PveForm } from './client.ts';
+import type { PbsNotificationTargetProps as Props } from './pbs-notification-target.ts';
+export declare const readTarget: (props: Props) => Effect.Effect<import("./pbs-notification-target.ts").PbsNotificationTargetAttributes | undefined, import("@distilled.cloud/caddy").BadGateway | import("@distilled.cloud/caddy").BadRequest | import("@distilled.cloud/caddy").ConfigError | import("@distilled.cloud/caddy").Conflict | Error | import("@distilled.cloud/caddy").Forbidden | import("@distilled.cloud/caddy").GatewayTimeout | import("effect/unstable/http/HttpClientError").HttpClientError | import("@distilled.cloud/caddy").InternalServerError | import("@distilled.cloud/caddy").Locked | import("@distilled.cloud/proxmox-backup/Errors").ParameterVerificationFailed | import("./credential-errors.ts").PveCredentialDenied | import("@distilled.cloud/caddy").ServiceUnavailable | import("effect/Cause").TimeoutError | import("@distilled.cloud/caddy").TooManyRequests | import("@distilled.cloud/caddy").Unauthorized | import("@distilled.cloud/caddy").UnprocessableEntity | import("@distilled.cloud/proxmox-backup/Errors").ClientErrors, import("effect/unstable/http/HttpClient").HttpClient>;
+/** No request: run the same translated-input validation before replacement can delete anything. */
+export declare const validateTargetWrite: (props: Props, form: PveForm, mode: 'create' | 'update') => Effect.Effect<void, import("./pbs-notification-input.ts").PbsNotificationInputRefusal, never>;
+export declare const createTarget: (props: Props, form: PveForm) => Effect.Effect<config.CreateConfigNotificationEndpointSendmailResponse, Error | import("./pbs-notification-input.ts").PbsNotificationInputRefusal | import("./credential-errors.ts").PveCredentialDenied | import("effect/Cause").TimeoutError | ProxmoxBackupOpError, import("effect/unstable/http/HttpClient").HttpClient>;
+export declare const updateTarget: (props: Props, form: PveForm) => Effect.Effect<config.PutConfigNotificationEndpointSendmailResponse, Error | import("./pbs-notification-input.ts").PbsNotificationInputRefusal | import("./credential-errors.ts").PveCredentialDenied | import("effect/Cause").TimeoutError | ProxmoxBackupOpError, import("effect/unstable/http/HttpClient").HttpClient>;
+/** Built-ins still follow PBS's revert-on-delete semantics; missing objects are already deleted. */
+export declare const deleteTarget: (props: Props) => Effect.Effect<void | config.DeleteConfigNotificationEndpointSendmailResponse, import("@distilled.cloud/caddy").BadGateway | import("@distilled.cloud/caddy").BadRequest | import("@distilled.cloud/caddy").ConfigError | import("@distilled.cloud/caddy").Conflict | Error | import("@distilled.cloud/caddy").Forbidden | import("@distilled.cloud/caddy").GatewayTimeout | import("effect/unstable/http/HttpClientError").HttpClientError | import("@distilled.cloud/caddy").InternalServerError | import("@distilled.cloud/caddy").Locked | import("@distilled.cloud/proxmox-backup/Errors").ParameterVerificationFailed | import("./credential-errors.ts").PveCredentialDenied | import("@distilled.cloud/caddy").ServiceUnavailable | import("effect/Cause").TimeoutError | import("@distilled.cloud/caddy").TooManyRequests | import("@distilled.cloud/caddy").Unauthorized | import("@distilled.cloud/caddy").UnprocessableEntity | import("@distilled.cloud/proxmox-backup/Errors").ClientErrors, import("effect/unstable/http/HttpClient").HttpClient>;
+//# sourceMappingURL=pbs-notification-target-distilled.d.ts.map

package/dist/proxmox/pbs-notification-target-distilled.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pbs-notification-target-distilled.d.ts","sourceRoot":"","sources":["../../src/proxmox/pbs-notification-target-distilled.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,KAAK,MAAM,MAAM,wCAAwC,CAAC;AACjE,OAAO,KAAK,EAEV,oBAAoB,EACrB,MAAM,0CAA0C,CAAC;AAClD,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAExC,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAE3C,OAAO,KAAK,EAAE,0BAA0B,IAAI,KAAK,EAAE,MAAM,8BAA8B,CAAC;AAsCxF,eAAO,MAAM,UAAU,UAAW,KAAK,uhCAIpC,CAAC;AAEJ,mGAAmG;AACnG,eAAO,MAAM,mBAAmB,UAAW,KAAK,QAAQ,OAAO,QAAQ,QAAQ,GAAG,QAAQ,kGAczF,CAAC;AAEF,eAAO,MAAM,YAAY,UAAW,KAAK,QAAQ,OAAO,gUAevD,CAAC;AAEF,eAAO,MAAM,YAAY,UAAW,KAAK,QAAQ,OAAO,6TAevD,CAAC;AAEF,oGAAoG;AACpG,eAAO,MAAM,YAAY,UAAW,KAAK,mgCAWxC,CAAC"}

package/dist/proxmox/pbs-notification-target-lifecycle.d.ts

@@ -46,7 +46,7 @@ export declare const handlers: {
         header: string;
         headerDigest: string;
         secret: string;
-    } | undefined, never, import("effect/unstable/http/HttpClient").HttpClient>;
+    } | undefined, import("@distilled.cloud/caddy").BadGateway | import("@distilled.cloud/caddy").BadRequest | import("@distilled.cloud/caddy").ConfigError | import("@distilled.cloud/caddy").Conflict | Error | import("@distilled.cloud/caddy").Forbidden | import("@distilled.cloud/caddy").GatewayTimeout | import("effect/unstable/http/HttpClientError").HttpClientError | import("@distilled.cloud/caddy").InternalServerError | import("@distilled.cloud/caddy").Locked | import("@distilled.cloud/proxmox-backup/Errors").ParameterVerificationFailed | import("./credential-errors.ts").PveCredentialDenied | import("@distilled.cloud/caddy").ServiceUnavailable | import("effect/Cause").TimeoutError | import("@distilled.cloud/caddy").TooManyRequests | import("@distilled.cloud/caddy").Unauthorized | import("@distilled.cloud/caddy").UnprocessableEntity | import("@distilled.cloud/proxmox-backup/Errors").ClientErrors, import("effect/unstable/http/HttpClient").HttpClient>;
     /**
      * ⚠️ `Input<Props>` and `isResolved`, resource.ts's reason: at plan time a prop can still be an
      *   unresolved Output, and comparing a placeholder to a live value reports a phantom update.
@@ -66,7 +66,7 @@ export declare const handlers: {
     } | {
         readonly deleteFirst?: never;
         readonly action: 'noop';
-    } | undefined, never, import("effect/unstable/http/HttpClient").HttpClient>;
+    } | undefined, Error | import("effect/unstable/http/HttpClientError").HttpClientError | import("./credential-errors.ts").PveCredentialDenied, import("effect/unstable/http/HttpClient").HttpClient>;
     reconcile: ({ news, output }: {
         news: Props;
         output: Attributes | undefined;
@@ -91,10 +91,10 @@ export declare const handlers: {
         header: string;
         headerDigest: string;
         secret: string;
-    }, Error | import("./credential-errors.ts").PveCredentialDenied, import("effect/unstable/http/HttpClient").HttpClient>;
+    }, Error | import("effect/unstable/http/HttpClientError").HttpClientError | import("./credential-errors.ts").PveCredentialDenied, import("effect/unstable/http/HttpClient").HttpClient>;
     delete: ({ olds }: {
         olds: Props;
-    }) => Effect.Effect<unknown, Error | import("./credential-errors.ts").PveCredentialDenied, import("effect/unstable/http/HttpClient").HttpClient>;
+    }) => Effect.Effect<void | import("@distilled.cloud/proxmox-backup/config").DeleteConfigNotificationEndpointSendmailResponse, import("@distilled.cloud/caddy").BadGateway | import("@distilled.cloud/caddy").BadRequest | import("@distilled.cloud/caddy").ConfigError | import("@distilled.cloud/caddy").Conflict | Error | import("@distilled.cloud/caddy").Forbidden | import("@distilled.cloud/caddy").GatewayTimeout | import("effect/unstable/http/HttpClientError").HttpClientError | import("@distilled.cloud/caddy").InternalServerError | import("@distilled.cloud/caddy").Locked | import("@distilled.cloud/proxmox-backup/Errors").ParameterVerificationFailed | import("./credential-errors.ts").PveCredentialDenied | import("@distilled.cloud/caddy").ServiceUnavailable | import("effect/Cause").TimeoutError | import("@distilled.cloud/caddy").TooManyRequests | import("@distilled.cloud/caddy").Unauthorized | import("@distilled.cloud/caddy").UnprocessableEntity | import("@distilled.cloud/proxmox-backup/Errors").ClientErrors, import("effect/unstable/http/HttpClient").HttpClient>;
 };
 export {};
 //# sourceMappingURL=pbs-notification-target-lifecycle.d.ts.map

package/dist/proxmox/pbs-notification-target-lifecycle.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pbs-notification-target-lifecycle.d.ts","sourceRoot":"","sources":["../../src/proxmox/pbs-notification-target-lifecycle.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAIxC,OAAO,KAAK,EACV,+BAA+B,EAC/B,0BAA0B,EAC3B,MAAM,8BAA8B,CAAC;AActC,KAAK,KAAK,GAAG,0BAA0B,CAAC;AACxC,KAAK,UAAU,GAAG,+BAA+B,CAAC;AA8ClD,eAAO,MAAM,QAAQ;IACnB,kGAAkG;IAClG,IAAI;IACJ;;;;;;;;;;;;;;;OAeG;IACH,IAAI,qBAAqB;QAAE,IAAI,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,UAAU,GAAG,SAAS,CAAA;KAAE;;;;;;;;;;;;;;;;;;;;;;IAOxE;;;;;OAKG;IACH,IAAI,4BAID;QACD,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QACnB,IAAI,EAAE,KAAK,CAAC;QACZ,MAAM,EAAE,UAAU,GAAG,SAAS,CAAC;KAChC;yBAIsB,SAAS;;;;yBAIa,QAAQ;;;yBAElC,MAAM;;IAGzB,SAAS,qBAAqB;QAAE,IAAI,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,UAAU,GAAG,SAAS,CAAA;KAAE;;;;;;;;;;;;;;;;;;;;;;IAyC7E,MAAM,aAAa;QAAE,IAAI,EAAE,KAAK,CAAA;KAAE;CACnC,CAAC"}
+{"version":3,"file":"pbs-notification-target-lifecycle.d.ts","sourceRoot":"","sources":["../../src/proxmox/pbs-notification-target-lifecycle.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAUxC,OAAO,KAAK,EACV,+BAA+B,EAC/B,0BAA0B,EAC3B,MAAM,8BAA8B,CAAC;AAatC,KAAK,KAAK,GAAG,0BAA0B,CAAC;AACxC,KAAK,UAAU,GAAG,+BAA+B,CAAC;AAoClD,eAAO,MAAM,QAAQ;IACnB,kGAAkG;IAClG,IAAI;IACJ;;;;;;;;;;;;;;;OAeG;IACH,IAAI,qBAAqB;QAAE,IAAI,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,UAAU,GAAG,SAAS,CAAA;KAAE;;;;;;;;;;;;;;;;;;;;;;IAOxE;;;;;OAKG;IACH,IAAI,4BAID;QACD,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QACnB,IAAI,EAAE,KAAK,CAAC;QACZ,MAAM,EAAE,UAAU,GAAG,SAAS,CAAC;KAChC;yBAoBsB,SAAS;;;;yBAGa,QAAQ;;;yBAElC,MAAM;;IAGzB,SAAS,qBAAqB;QAAE,IAAI,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,UAAU,GAAG,SAAS,CAAA;KAAE;;;;;;;;;;;;;;;;;;;;;;IAwC7E,MAAM,aAAa;QAAE,IAAI,EAAE,KAAK,CAAA;KAAE;CACnC,CAAC"}

package/dist/proxmox/pbs-notification-target.d.ts

@@ -24,7 +24,7 @@
  *   the consequence. Read `origin` before declaring a name you did not create.
  *
  * ★ WHAT THIS NEEDS (generated/pbs.ts source): Sys.Audit on /system/notifications to read,
- *   Sys.Modify there to write. A datastore-scoped credential reads every target as absent.
+ *   Sys.Modify there to write. A datastore-scoped credential cannot read targets; its typed refusal now fails the plan.
  */
 import { Resource } from 'alchemy';
 import * as Provider from 'alchemy/Provider';

package/dist/proxmox/pbs-prune-job-lifecycle.d.ts

@@ -0,0 +1,22 @@
+import type { Input } from 'alchemy/Input';
+import * as Effect from 'effect/Effect';
+import type { PruneJobAttributes, PruneJobProps } from './pbs-prune-job.ts';
+export declare const handlers: {
+    list: () => Effect.Effect<never[], never, never>;
+    read: ({ olds }: {
+        olds: PruneJobProps;
+    }) => Effect.Effect<PruneJobAttributes | undefined, Error | import("./credential-errors.ts").PveCredentialDenied | import("effect/Cause").TimeoutError | import("@distilled.cloud/proxmox-backup/Protocol").ProxmoxBackupOpError, import("effect/unstable/http/HttpClient").HttpClient>;
+    diff: ({ news, output, }: {
+        news: Input<PruneJobProps>;
+        output: PruneJobAttributes | undefined;
+    }) => Effect.Effect<{
+        readonly action: "noop" | "update";
+    } | undefined, Error | import("effect/unstable/http/HttpClientError").HttpClientError | import("./credential-errors.ts").PveCredentialDenied, import("effect/unstable/http/HttpClient").HttpClient>;
+    reconcile: ({ news }: {
+        news: PruneJobProps;
+    }) => Effect.Effect<PruneJobAttributes, Error | import("effect/unstable/http/HttpClientError").HttpClientError | import("./credential-errors.ts").PveCredentialDenied, import("effect/unstable/http/HttpClient").HttpClient>;
+    delete: ({ olds }: {
+        olds: PruneJobProps;
+    }) => Effect.Effect<import("@distilled.cloud/proxmox-backup/config").DeleteConfigPruneResponse | undefined, Error | import("./credential-errors.ts").PveCredentialDenied | import("effect/Cause").TimeoutError | import("@distilled.cloud/proxmox-backup/Protocol").ProxmoxBackupOpError, import("effect/unstable/http/HttpClient").HttpClient>;
+};
+//# sourceMappingURL=pbs-prune-job-lifecycle.d.ts.map

package/dist/proxmox/pbs-prune-job-lifecycle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pbs-prune-job-lifecycle.d.ts","sourceRoot":"","sources":["../../src/proxmox/pbs-prune-job-lifecycle.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAExC,OAAO,KAAK,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAM5E,eAAO,MAAM,QAAQ;IAEnB,IAAI;IACJ,IAAI,aAAa;QAAE,IAAI,EAAE,aAAa,CAAA;KAAE;IACxC,IAAI,sBAGD;QACD,IAAI,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC;QAC3B,MAAM,EAAE,kBAAkB,GAAG,SAAS,CAAC;KACxC;;;IAaD,SAAS,aAAa;QAAE,IAAI,EAAE,aAAa,CAAA;KAAE;IAgB7C,MAAM,aAAa;QAAE,IAAI,EAAE,aAAa,CAAA;KAAE;CAC3C,CAAC"}

package/dist/proxmox/pbs-prune-job-spec.d.ts

@@ -0,0 +1,5 @@
+/** PBS 4.2.6-1 values and vendor form guards; SDK transport is in pbs-prune-job-wire.ts. */
+import type { PruneJobAttributes, PruneJobProps } from './pbs-prune-job.ts';
+import type { PveSpec } from './resource-spec.ts';
+export declare const spec: PveSpec<PruneJobProps, PruneJobAttributes>;
+//# sourceMappingURL=pbs-prune-job-spec.d.ts.map

package/dist/proxmox/pbs-prune-job-spec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pbs-prune-job-spec.d.ts","sourceRoot":"","sources":["../../src/proxmox/pbs-prune-job-spec.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,OAAO,KAAK,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAC5E,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAOlD,eAAO,MAAM,IAAI,EAAE,OAAO,CAAC,aAAa,EAAE,kBAAkB,CA2C3D,CAAC"}

package/dist/proxmox/pbs-prune-job-wire.d.ts

@@ -0,0 +1,11 @@
+/** PBS 4.2.6-1 operations through @distilled.cloud/proxmox-backup. */
+import * as config from '@distilled.cloud/proxmox-backup/config';
+import * as Effect from 'effect/Effect';
+import type { PruneJobProps } from './pbs-prune-job.ts';
+/** ⛔ Only the SDK PruneJobNotFound is absence; permission, transport and malformed replies propagate. */
+export declare const readOne: (props: PruneJobProps) => Effect.Effect<import("./pbs-prune-job.ts").PruneJobAttributes | undefined, Error | import("./credential-errors.ts").PveCredentialDenied | import("effect/Cause").TimeoutError | config.ProxmoxBackupOpError, import("effect/unstable/http/HttpClient").HttpClient>;
+export declare const createOne: (props: PruneJobProps) => Effect.Effect<config.CreateConfigPruneResponse, Error | import("./credential-errors.ts").PveCredentialDenied | import("effect/Cause").TimeoutError | config.ProxmoxBackupOpError, import("effect/unstable/http/HttpClient").HttpClient>;
+export declare const updateOne: (props: PruneJobProps) => Effect.Effect<config.PutConfigPruneResponse, Error | import("./credential-errors.ts").PveCredentialDenied | import("effect/Cause").TimeoutError | config.ProxmoxBackupOpError, import("effect/unstable/http/HttpClient").HttpClient>;
+/** Deleting the schedule never deletes backups; already missing is a successful deletion. */
+export declare const deleteOne: (props: PruneJobProps) => Effect.Effect<config.DeleteConfigPruneResponse | undefined, Error | import("./credential-errors.ts").PveCredentialDenied | import("effect/Cause").TimeoutError | config.ProxmoxBackupOpError, import("effect/unstable/http/HttpClient").HttpClient>;
+//# sourceMappingURL=pbs-prune-job-wire.d.ts.map

package/dist/proxmox/pbs-prune-job-wire.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pbs-prune-job-wire.d.ts","sourceRoot":"","sources":["../../src/proxmox/pbs-prune-job-wire.ts"],"names":[],"mappings":"AAAA,sEAAsE;AACtE,OAAO,KAAK,MAAM,MAAM,wCAAwC,CAAC;AACjE,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAExC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AA4CxD,yGAAyG;AACzG,eAAO,MAAM,OAAO,UAAW,aAAa,uQAIzC,CAAC;AAEJ,eAAO,MAAM,SAAS,UAAW,aAAa,4OACqC,CAAC;AAEpF,eAAO,MAAM,SAAS,UAAW,aAAa,yOACkC,CAAC;AAEjF,6FAA6F;AAC7F,eAAO,MAAM,SAAS,UAAW,aAAa,wPAK1C,CAAC"}

package/dist/proxmox/pbs-prune-job.d.ts

@@ -1,6 +1,6 @@
 /**
  * `Pbs.PruneJob` — a Proxmox Backup Server retention schedule, declared. PBS is a SIBLING of PVE,
- * so this family reuses `pveHandlers` wholesale rather than growing a second factory.
+ * and this family uses its own distilled SDK's typed config operations (PBS 4.2.6-1).
  *
  * ⛔ THIS IS THE ONE RESOURCE IN THIS PACKAGE THAT DESTROYS DATA ON AN ORDINARY *UPDATE*. CephPool,
  *   ZfsPool and Storage can destroy data too — which is exactly why they default to `retain` and
@@ -26,8 +26,9 @@
  *   `-1` in the attributes means "absent from prune.cfg", the sentinel storage.ts uses for
  *   `maxfiles`, because `0` here is a real and very different setting.
  *
- * ⛔ THE CREDENTIAL DOES NOT EXIST YET, SO NOTHING BELOW HAS EVER MADE A CALL. PBS is a different
- *   host and a different auth realm from PVE. MEASURED 2026-09-13: pbs.example.com:8007 answers
+ * ⚠️ HISTORICAL BOOTSTRAP BLOCKER, 2026-09-13: PBS was a different
+ *   host and auth realm from PVE. The later PBS credential lane and SDK resolved this blocker.
+ *   MEASURED 2026-09-13: pbs.example.com:8007 answers
  *   HTTP 401 under STRICT TLS behind a real Let's Encrypt certificate (CN=pbs.example.com, issuer
  *   YR1, valid 2026-09-02 to 2026-12-01) — so there is no `-k` to reach for and `client.ts` needs
  *   no TLS escape hatch, exactly as on PVE. What it does need is a header it cannot build today.
@@ -47,7 +48,7 @@
  * ★ WHAT A `PbsTarget` NEEDS, AND WHY IT IS ALMOST `PveTarget`. Structurally `PveTarget` already
  *   fits a PBS host: a credential mount name and an `/api2/json` base are the whole of it, and PBS
  *   shares the `{"data": …}` envelope, the four-operation shape and the read-back discipline —
- *   which is exactly why this file declares a spec and stops. The single thing `PveTarget` cannot
+ *   which is why the pure spec survives the SDK transport migration. The single thing `PveTarget` cannot
  *   carry is WHICH AUTHORIZATION SCHEME the host at the other end speaks, so `PbsTarget` below adds
  *   that and nothing else rather than bending the PVE type in silence.
  *
@@ -55,9 +56,9 @@
  *   below are MEASURED from the PBS API as published at pbs.proxmox.com/docs/api-viewer, fetched
  *   2026-09-13 — current PBS 4.x. Before PBS 2.2 there was no `/config/prune` at all: retention
  *   lived on the datastore section itself, as `keep-*` plus `prune-schedule` under
- *   `/config/datastore/{name}`. Against anything older every path here 404s, `pveOperations.read`
- *   folds that into "absent", and the plan says create forever. Check `GET /api2/json/version`
- *   before the first plan.
+ *   `/config/datastore/{name}`. The old `pveOperations.read` folded those 404s into "absent",
+ *   producing a create forever. The SDK path now propagates an unknown route's 404; only the
+ *   vendor's typed missing-prune response means absent. Check the PBS version before planning.
  *
  * ★ THE READ LANE NEEDS NOTHING EXTRA, UNLIKE THREE PVE FAMILIES — so there is no `readRole:
  *   'provision'` below and there should not be one. MEASURED: `GET /config/prune/{id}` requires
@@ -79,7 +80,7 @@
 import { Resource } from 'alchemy';
 import * as Provider from 'alchemy/Provider';
 import type { PbsTarget } from './credentials.ts';
-import { type PveRequirements, type WithPbsTarget } from './resource.ts';
+import type { PveRequirements, WithPbsTarget } from './resource-spec.ts';
 /**
  * ⚠️ THE PROPS ARE PBS'S OWN KEY NAMES, HYPHENS INCLUDED, for backup-job.ts's reason: the form
  *   builder is then a copy rather than a translation table, and a translation table is one more

package/dist/proxmox/pbs-prune-job.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pbs-prune-job.d.ts","sourceRoot":"","sources":["../../src/proxmox/pbs-prune-job.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6EG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,KAAK,QAAQ,MAAM,kBAAkB,CAAC;AAE7C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAElD,OAAO,EAAE,KAAK,eAAe,EAAE,KAAK,aAAa,EAAe,MAAM,eAAe,CAAC;AAGtF;;;;;GAKG;AACH,MAAM,WAAW,aAAc,SAAQ,aAAa;IAClD,uFAAuF;IACvF,MAAM,EAAE,SAAS,CAAC;IAClB;;;;OAIG;IACH,EAAE,EAAE,MAAM,CAAC;IACX;+FAC2F;IAC3F,KAAK,EAAE,MAAM,CAAC;IACd;;;;;;OAMG;IACH,QAAQ,EAAE,MAAM,CAAC;IACjB,iGAAiG;IACjG,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,yFAAyF;IACzF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;gGAC4F;IAC5F,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,uFAAuF;IACvF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,EAAE,EAAE,MAAM,CAAC;IACX,mGAAmG;IACnG,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,8FAA8F;IAC9F,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,WAAY,SAAQ,QAAQ,CAC3C,cAAc,EACd,aAAa,EACb,kBAAkB,EAClB,KAAK,EACL,eAAe,CAChB;CAAG;AAEJ;;;;GAIG;AACH,eAAO,MAAM,WAAW,8CAAwC,CAAC;AAkDjE;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,mBAAmB,iIACiD,CAAC"}
+{"version":3,"file":"pbs-prune-job.d.ts","sourceRoot":"","sources":["../../src/proxmox/pbs-prune-job.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8EG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,KAAK,QAAQ,MAAM,kBAAkB,CAAC;AAG7C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,KAAK,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAEzE;;;;;GAKG;AACH,MAAM,WAAW,aAAc,SAAQ,aAAa;IAClD,uFAAuF;IACvF,MAAM,EAAE,SAAS,CAAC;IAClB;;;;OAIG;IACH,EAAE,EAAE,MAAM,CAAC;IACX;+FAC2F;IAC3F,KAAK,EAAE,MAAM,CAAC;IACd;;;;;;OAMG;IACH,QAAQ,EAAE,MAAM,CAAC;IACjB,iGAAiG;IACjG,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,yFAAyF;IACzF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;gGAC4F;IAC5F,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,uFAAuF;IACvF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,EAAE,EAAE,MAAM,CAAC;IACX,mGAAmG;IACnG,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,8FAA8F;IAC9F,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,WAAY,SAAQ,QAAQ,CAC3C,cAAc,EACd,aAAa,EACb,kBAAkB,EAClB,KAAK,EACL,eAAe,CAChB;CAAG;AAEJ;;;;GAIG;AACH,eAAO,MAAM,WAAW,8CAAwC,CAAC;AAEjE;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,mBAAmB,iIACiD,CAAC"}

package/dist/proxmox/pbs-sync-job-attributes.d.ts

@@ -0,0 +1,34 @@
+/** Stable PBS sync-job state; only vendor configuration, never runtime task status. */
+export interface SyncJobAttributes {
+    /** From the props — it is the path this object was read by. */
+    id: string;
+    store: string;
+    /** `''` is the root namespace, which is also how PBS spells it. */
+    ns: string;
+    /** `''` means a LOCAL sync — datastore to datastore on this PBS. */
+    remote: string;
+    'remote-store': string;
+    'remote-ns': string;
+    /** `''` means the job runs only when somebody starts it. */
+    schedule: string;
+    comment: string;
+    'remove-vanished': boolean;
+    /** ⚠️ Absent on the wire means `false`, PBS's own default. */
+    'verified-only': boolean;
+    /** `''` means no owner in the config, i.e. `root@pam` at runtime. An identifier, never a secret. */
+    owner: string;
+    /** Bytes per second, or `UNSET` (-1). See `bytes()`. */
+    'rate-in': number;
+    /** `UNSET` (-1) means unset, which means full recursion. `0` is a real value meaning none. */
+    'max-depth': number;
+    /** `UNSET` (-1) means all snapshots. */
+    'transfer-last': number;
+    /**
+     * ⚠️ REPORTED, NEVER SENT, NEVER COMPARED — the live filter list joined for display only. See the
+     *   ⛔ on the prop for why it is not declarable.
+     */
+    'group-filter': string;
+    /** `pull` or `push`. Reported, never compared — create-only here. */
+    'sync-direction': string;
+}
+//# sourceMappingURL=pbs-sync-job-attributes.d.ts.map

package/dist/proxmox/pbs-sync-job-attributes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pbs-sync-job-attributes.d.ts","sourceRoot":"","sources":["../../src/proxmox/pbs-sync-job-attributes.ts"],"names":[],"mappings":"AAAA,uFAAuF;AACvF,MAAM,WAAW,iBAAiB;IAChC,+DAA+D;IAC/D,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,mEAAmE;IACnE,EAAE,EAAE,MAAM,CAAC;IACX,oEAAoE;IACpE,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,4DAA4D;IAC5D,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,iBAAiB,EAAE,OAAO,CAAC;IAC3B,8DAA8D;IAC9D,eAAe,EAAE,OAAO,CAAC;IACzB,oGAAoG;IACpG,KAAK,EAAE,MAAM,CAAC;IACd,wDAAwD;IACxD,SAAS,EAAE,MAAM,CAAC;IAClB,8FAA8F;IAC9F,WAAW,EAAE,MAAM,CAAC;IACpB,wCAAwC;IACxC,eAAe,EAAE,MAAM,CAAC;IACxB;;;OAGG;IACH,cAAc,EAAE,MAAM,CAAC;IACvB,qEAAqE;IACrE,gBAAgB,EAAE,MAAM,CAAC;CAC1B"}

package/dist/proxmox/pbs-sync-job-form.d.ts

@@ -1,4 +1,24 @@
 import type { SyncJobAttributes, SyncJobProps } from './pbs-sync-job.ts';
+/**
+ * A sync job on the wire: how a PBS answer becomes comparable values, how a declaration becomes a
+ * create or an update, and — because that question is downstream of this one — when it has changed.
+ *
+ * ★ SPLIT OUT OF pbs-sync-job.ts FOR THE 250-LINE CAP; the ★ SEAM there says why `matches` came
+ *   with the wire instead of staying with the props. The `import type` back is a cycle on paper
+ *   only — erased before anything runs, so the runtime arrow points one way, resource to wire.
+ *
+ * ★ HISTORICALLY IT USED THE SHARED PVE CLIENT, NOT A PBS ONE. An earlier draft of this file was written
+ *   against a `./pbs-client.ts` that never existed, and spelled out what it would have to export.
+ *   That module is not needed: PBS speaks the same `/api2/json` paths and the same `{"data": …}`
+ *   envelope, its OpenBao mount vends the same `{token_id, secret}`, and the only difference is
+ *   the authorization header — so `PveTarget` carries a `scheme` and `authorization()` spells
+ *   `PBSAPIToken=<id>:<secret>` for `'pbs'`. The SDK now owns that header; the pure spec below
+ *   preserves the existing field and retention semantics.
+ *   The one PBS-specific thing that survived is the FORM TYPE: PBS decodes a multi-valued field
+ *   from repeated keys, and the distilled PBS protocol must preserve that encoding.
+
+ */
+import type { PveSpec } from './resource-spec.ts';
 /**
  * The marker for "PBS has no value for this number".
  *
@@ -58,26 +78,5 @@ export declare const createBody: (props: SyncJobProps) => Record<string, string>
  *   there rather than a change.
  */
 export declare const updateBody: (props: SyncJobProps) => Record<string, string>;
-export declare const handlers: {
-    list: () => import("effect/Effect").Effect<never[], never, never>;
-    read: ({ olds }: {
-        olds: SyncJobProps;
-    }) => import("effect/Effect").Effect<SyncJobAttributes | undefined, never, import("effect/unstable/http/HttpClient").HttpClient>;
-    diff: ({ news, output }: {
-        news: import("alchemy").Input<SyncJobProps>;
-        output: SyncJobAttributes | undefined;
-    }) => import("effect/Effect").Effect<{
-        readonly action: 'update';
-    } | {
-        readonly action: 'noop';
-    } | {
-        readonly action: 'replace';
-    } | undefined, never, import("effect/unstable/http/HttpClient").HttpClient>;
-    reconcile: ({ news }: {
-        news: SyncJobProps;
-    }) => import("effect/Effect").Effect<SyncJobAttributes, Error | import("./credential-errors.ts").PveCredentialDenied, import("effect/unstable/http/HttpClient").HttpClient>;
-    delete: ({ olds }: {
-        olds: SyncJobProps;
-    }) => import("effect/Effect").Effect<unknown, Error | import("./credential-errors.ts").PveCredentialDenied, import("effect/unstable/http/HttpClient").HttpClient>;
-};
+export declare const spec: PveSpec<SyncJobProps, SyncJobAttributes>;
 //# sourceMappingURL=pbs-sync-job-form.d.ts.map

package/dist/proxmox/pbs-sync-job-form.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pbs-sync-job-form.d.ts","sourceRoot":"","sources":["../../src/proxmox/pbs-sync-job-form.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAsBzE;;;;;;;;;;GAUG;AACH,eAAO,MAAM,KAAK,KAAK,CAAC;AAgBxB;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,KAAK,UAAW,OAAO,KAAG,MAOtC,CAAC;AAEF;;;;;;;;GAQG;AACH,eAAO,MAAM,OAAO,UAAW,OAAO,KAAG,MACsD,CAAC;AA0ChG;;;;;;;;;GASG;AACH,eAAO,MAAM,UAAU,UAAW,YAAY,KAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAIpE,CAAC;AAEH;;;;;;;GAOG;AACH,eAAO,MAAM,UAAU,UAAW,YAAY,KAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAiB,CAAC;AAExF,eAAO,MAAM,QAAQ;;;;;;;;;;;;;;;;;;;;;CAmFnB,CAAC"}
+{"version":3,"file":"pbs-sync-job-form.d.ts","sourceRoot":"","sources":["../../src/proxmox/pbs-sync-job-form.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACzE;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAGlD;;;;;;;;;;GAUG;AACH,eAAO,MAAM,KAAK,KAAK,CAAC;AAgBxB;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,KAAK,UAAW,OAAO,KAAG,MAOtC,CAAC;AAEF;;;;;;;;GAQG;AACH,eAAO,MAAM,OAAO,UAAW,OAAO,KAAG,MACsD,CAAC;AA0ChG;;;;;;;;;GASG;AACH,eAAO,MAAM,UAAU,UAAW,YAAY,KAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAIpE,CAAC;AAEH;;;;;;;GAOG;AACH,eAAO,MAAM,UAAU,UAAW,YAAY,KAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAiB,CAAC;AAExF,eAAO,MAAM,IAAI,EAAE,OAAO,CAAC,YAAY,EAAE,iBAAiB,CAmFzD,CAAC"}

package/dist/proxmox/pbs-sync-job-lifecycle.d.ts

@@ -0,0 +1,22 @@
+import type { Input } from 'alchemy/Input';
+import * as Effect from 'effect/Effect';
+import type { SyncJobAttributes, SyncJobProps } from './pbs-sync-job.ts';
+export declare const handlers: {
+    list: () => Effect.Effect<never[], never, never>;
+    read: ({ olds }: {
+        olds: SyncJobProps;
+    }) => Effect.Effect<SyncJobAttributes | undefined, Error | import("./credential-errors.ts").PveCredentialDenied | import("effect/Cause").TimeoutError | import("@distilled.cloud/proxmox-backup/Protocol").ProxmoxBackupOpError, import("effect/unstable/http/HttpClient").HttpClient>;
+    diff: ({ news, output }: {
+        news: Input<SyncJobProps>;
+        output: SyncJobAttributes | undefined;
+    }) => Effect.Effect<{
+        readonly action: "noop" | "update";
+    } | undefined, Error | import("effect/unstable/http/HttpClientError").HttpClientError | import("./credential-errors.ts").PveCredentialDenied, import("effect/unstable/http/HttpClient").HttpClient>;
+    reconcile: ({ news }: {
+        news: SyncJobProps;
+    }) => Effect.Effect<SyncJobAttributes, Error | import("effect/unstable/http/HttpClientError").HttpClientError | import("./credential-errors.ts").PveCredentialDenied, import("effect/unstable/http/HttpClient").HttpClient>;
+    delete: ({ olds }: {
+        olds: SyncJobProps;
+    }) => Effect.Effect<import("@distilled.cloud/proxmox-backup/config").DeleteConfigSyncResponse | undefined, Error | import("./credential-errors.ts").PveCredentialDenied | import("effect/Cause").TimeoutError | import("@distilled.cloud/proxmox-backup/Protocol").ProxmoxBackupOpError, import("effect/unstable/http/HttpClient").HttpClient>;
+};
+//# sourceMappingURL=pbs-sync-job-lifecycle.d.ts.map

package/dist/proxmox/pbs-sync-job-lifecycle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pbs-sync-job-lifecycle.d.ts","sourceRoot":"","sources":["../../src/proxmox/pbs-sync-job-lifecycle.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAExC,OAAO,KAAK,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAMzE,eAAO,MAAM,QAAQ;IAEnB,IAAI;IACJ,IAAI,aAAa;QAAE,IAAI,EAAE,YAAY,CAAA;KAAE;IACvC,IAAI,qBAAqB;QAAE,IAAI,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;QAAC,MAAM,EAAE,iBAAiB,GAAG,SAAS,CAAA;KAAE;;;IAa7F,SAAS,aAAa;QAAE,IAAI,EAAE,YAAY,CAAA;KAAE;IAgB5C,MAAM,aAAa;QAAE,IAAI,EAAE,YAAY,CAAA;KAAE;CAC1C,CAAC"}