@homeflare/alchemy 0.37.2 → 0.37.4

package/dist/proxmox/live-core-fixtures.d.ts

@@ -0,0 +1,40 @@
+/** Test-only declarations and vendor-shaped responses for the three migrated PVE families. */
+import type * as Effect from 'effect/Effect';
+import type * as HttpClient from 'effect/unstable/http/HttpClient';
+import { type FakeEngine } from '../verify/fake-engine.ts';
+import { type FakePve } from './fake-pve.ts';
+export declare const poolProps: {
+    poolid: string;
+    comment: string;
+    target: import("./credentials.ts").PveTarget;
+};
+export declare const backupProps: {
+    id: string;
+    schedule: string;
+    vmid: number[];
+    'prune-backups': string;
+    target: import("./credentials.ts").PveTarget;
+};
+export declare const metricProps: {
+    id: string;
+    type: 'influxdb';
+    server: string;
+    port: number;
+    target: import("./credentials.ts").PveTarget;
+};
+export interface CoreCase {
+    name: string;
+    path: string;
+    declare: () => Effect.Effect<unknown, never, unknown>;
+    engine: (fake: FakePve) => FakeEngine;
+    read: () => Effect.Effect<unknown, unknown, HttpClient.HttpClient>;
+    remove: () => Effect.Effect<unknown, unknown, HttpClient.HttpClient>;
+    live: Record<string, unknown>;
+    drift: Record<string, unknown>;
+    missing: () => Response;
+    createPath: string;
+    /** Actual form fields, including defaults, without SDK identifier spelling leaking onto wire. */
+    createForm: Record<string, string>;
+}
+export declare const coreCases: CoreCase[];
+//# sourceMappingURL=live-core-fixtures.d.ts.map

package/dist/proxmox/live-core-fixtures.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"live-core-fixtures.d.ts","sourceRoot":"","sources":["../../src/proxmox/live-core-fixtures.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,OAAO,KAAK,KAAK,MAAM,MAAM,eAAe,CAAC;AAE7C,OAAO,KAAK,KAAK,UAAU,MAAM,iCAAiC,CAAC;AACnE,OAAO,EAAE,KAAK,UAAU,EAAc,MAAM,0BAA0B,CAAC;AAGvE,OAAO,EAAe,KAAK,OAAO,EAAE,MAAM,eAAe,CAAC;AAK1D,eAAO,MAAM,SAAS;IAAK,MAAM;IAAS,OAAO;IAAa,MAAM;CAAe,CAAC;AACpF,eAAO,MAAM,WAAW;IACtB,EAAE;IACF,QAAQ;IACR,IAAI;IACJ,eAAe;IACf,MAAM;CACP,CAAC;AACF,eAAO,MAAM,WAAW;IACtB,EAAE;IACF,IAAI,EAAE,UAAU;IAChB,MAAM;IACN,IAAI;IACJ,MAAM;CACP,CAAC;AAEF,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IACtD,MAAM,EAAE,CAAC,IAAI,EAAE,OAAO,KAAK,UAAU,CAAC;IACtC,IAAI,EAAE,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,UAAU,CAAC,UAAU,CAAC,CAAC;IACnE,MAAM,EAAE,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,UAAU,CAAC,UAAU,CAAC,CAAC;IACrE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,OAAO,EAAE,MAAM,QAAQ,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,iGAAiG;IACjG,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACpC;AACD,eAAO,MAAM,SAAS,EAAE,QAAQ,EAmF/B,CAAC"}

package/dist/proxmox/metric-server-config.d.ts

@@ -0,0 +1,49 @@
+/** Pure existing forms, normalization and equality, shared by plan and SDK lifecycle. */
+import type { MetricServerAttributes, MetricServerProps } from './metric-server.ts';
+import { createBody, update } from './metric-server-form.ts';
+export declare const metricServerSpec: {
+    attributes: (live: Record<string, unknown>, props: MetricServerProps) => {
+        'otel-compression': string;
+        'otel-max-body-size': number;
+        'otel-path': string;
+        'otel-protocol': string;
+        'otel-timeout': number;
+        'otel-verify-ssl': boolean;
+        'api-path-prefix': string;
+        bucket: string;
+        disable: boolean;
+        id: string;
+        influxdbproto: string;
+        'max-body-size': number;
+        mtu: number;
+        organization: string;
+        path: string;
+        port: number;
+        server: string;
+        timeout: number;
+        type: import("./metric-server.ts").MetricServerType;
+        'verify-certificate': boolean;
+    } | undefined;
+    /** ⛔ THE SAME STRING AS `path`, DELIBERATELY — see the ⛔ in the header. */
+    collection: (props: MetricServerProps) => string;
+    /** ⚠️ `type` IS REQUIRED ON CREATE; `id` IS NOT SENT, because the id is the path. */
+    createForm: typeof createBody;
+    /**
+     * The vendor rules both forms are checked against at plan time — resource-spec.ts.
+     * ⚠️ POST AND PUT ARE THE SAME PATH HERE, and they are still two different tables: only the
+     *   POST marks `type` required, and only the PUT accepts `delete` and `digest`.
+     */
+    endpoint: {
+        create: string;
+        update: string;
+    };
+    /**
+     * ⛔ `id` and `type` are absent: one is the key the object was read by, the other is refused
+     *   rather than updated. Everything type-specific is `matchesType`'s, above.
+     */
+    matches: (attributes: MetricServerAttributes, props: MetricServerProps) => boolean;
+    path: (props: MetricServerProps) => string;
+    /** The form and its clear-list, from the one table in metric-server-form.ts. */
+    updateForm: typeof update;
+};
+//# sourceMappingURL=metric-server-config.d.ts.map

package/dist/proxmox/metric-server-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"metric-server-config.d.ts","sourceRoot":"","sources":["../../src/proxmox/metric-server-config.ts"],"names":[],"mappings":"AAAA,yFAAyF;AACzF,OAAO,KAAK,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAEpF,OAAO,EAAS,UAAU,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AA6BpE,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;IA6B3B,2EAA2E;;IAE3E,qFAAqF;;IAErF;;;;OAIG;;QAED,MAAM;QACN,MAAM;;IAER;;;OAGG;;;IAOH,gFAAgF;;CAEpB,CAAC"}

package/dist/proxmox/metric-server-distilled.d.ts

@@ -0,0 +1,43 @@
+/** Metric-server SDK transport; pve-manager 9.2.11, no change to managed/secret fields. */
+import * as cluster from '@distilled.cloud/proxmox/cluster';
+import * as Effect from 'effect/Effect';
+import type { MetricServerProps } from './metric-server.ts';
+/**
+ * The vendor intentionally leaves this plugin-dependent response unstructured in its
+ * schema. Decode only the object envelope, then use the existing per-plugin normalization.
+ * A malformed response fails without including header credentials in a schema diagnostic.
+ */
+export declare const readMetricServerRow: (props: MetricServerProps) => Effect.Effect<{
+    readonly [x: string]: unknown;
+} | undefined, import("@distilled.cloud/caddy").BadGateway | import("@distilled.cloud/caddy").BadRequest | import("@distilled.cloud/caddy").ConfigError | import("@distilled.cloud/caddy").Conflict | Error | import("@distilled.cloud/caddy").Forbidden | import("@distilled.cloud/caddy").GatewayTimeout | import("effect/unstable/http/HttpClientError").HttpClientError | import("@distilled.cloud/caddy").InternalServerError | import("@distilled.cloud/caddy").Locked | import("@distilled.cloud/proxmox/Errors").ParameterVerificationFailed | import("./distilled-pve.ts").PveClusterExhausted | import("./credential-errors.ts").PveCredentialDenied | import("@distilled.cloud/caddy").ServiceUnavailable | import("effect/Cause").TimeoutError | import("@distilled.cloud/caddy").TooManyRequests | import("@distilled.cloud/caddy").Unauthorized | import("@distilled.cloud/caddy").UnprocessableEntity | import("@distilled.cloud/proxmox/Errors").ClientErrors, import("effect/unstable/http/HttpClient").HttpClient>;
+export declare const readMetricServer: (props: MetricServerProps) => Effect.Effect<{
+    'otel-compression': string;
+    'otel-max-body-size': number;
+    'otel-path': string;
+    'otel-protocol': string;
+    'otel-timeout': number;
+    'otel-verify-ssl': boolean;
+    'api-path-prefix': string;
+    bucket: string;
+    disable: boolean;
+    id: string;
+    influxdbproto: string;
+    'max-body-size': number;
+    mtu: number;
+    organization: string;
+    path: string;
+    port: number;
+    server: string;
+    timeout: number;
+    type: import("./metric-server.ts").MetricServerType;
+    'verify-certificate': boolean;
+} | undefined, import("@distilled.cloud/caddy").BadGateway | import("@distilled.cloud/caddy").BadRequest | import("@distilled.cloud/caddy").ConfigError | import("@distilled.cloud/caddy").Conflict | Error | import("@distilled.cloud/caddy").Forbidden | import("@distilled.cloud/caddy").GatewayTimeout | import("effect/unstable/http/HttpClientError").HttpClientError | import("@distilled.cloud/caddy").InternalServerError | import("@distilled.cloud/caddy").Locked | import("@distilled.cloud/proxmox/Errors").ParameterVerificationFailed | import("./distilled-pve.ts").PveClusterExhausted | import("./credential-errors.ts").PveCredentialDenied | import("@distilled.cloud/caddy").ServiceUnavailable | import("effect/Cause").TimeoutError | import("@distilled.cloud/caddy").TooManyRequests | import("@distilled.cloud/caddy").Unauthorized | import("@distilled.cloud/caddy").UnprocessableEntity | import("@distilled.cloud/proxmox/Errors").ClientErrors, import("effect/unstable/http/HttpClient").HttpClient>;
+/** Map only the existing form's declared keys; token and otel-headers never enter this map. */
+export declare const metricServerRequest: (props: MetricServerProps, form: Record<string, string>) => cluster.PutClusterMetricsServerRequest;
+/**
+ * Vendor DELETE dereferences the plugin without an absent-row check (MetricServer.pm:293).
+ * A typed GET miss therefore skips DELETE. A race or any other SDK error still propagates;
+ * never reinterpret an arbitrary 500 from deleting an invalid section as success.
+ */
+export declare const deleteMetricServer: (props: MetricServerProps) => Effect.Effect<void, Error | import("effect/unstable/http/HttpClientError").HttpClientError | import("./credential-errors.ts").PveCredentialDenied, import("effect/unstable/http/HttpClient").HttpClient>;
+//# sourceMappingURL=metric-server-distilled.d.ts.map

package/dist/proxmox/metric-server-distilled.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"metric-server-distilled.d.ts","sourceRoot":"","sources":["../../src/proxmox/metric-server-distilled.ts"],"names":[],"mappings":"AAAA,2FAA2F;AAC3F,OAAO,KAAK,OAAO,MAAM,kCAAkC,CAAC;AAE5D,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAKxC,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAE5D;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,UAAW,iBAAiB;;o+BAezD,CAAC;AAEJ,eAAO,MAAM,gBAAgB,UAAW,iBAAiB;;;;;;;;;;;;;;;;;;;;;o+BAGtD,CAAC;AAEJ,+FAA+F;AAC/F,eAAO,MAAM,mBAAmB,UACvB,iBAAiB,QAClB,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAC3B,OAAO,CAAC,8BAuBT,CAAC;AAEH;;;;GAIG;AACH,eAAO,MAAM,kBAAkB,UAAW,iBAAiB,6MASvD,CAAC"}

package/dist/proxmox/metric-server.d.ts

@@ -31,7 +31,7 @@
 import { Resource } from 'alchemy';
 import * as Provider from 'alchemy/Provider';
 import { type MetricServerOtelAttributes, type MetricServerOtelProps } from './metric-server-otel.ts';
-import { type PveRequirements, type WithTarget } from './resource.ts';
+import type { PveRequirements, WithTarget } from './resource-spec.ts';
 /**
  * PVE's status plugins. Which one a server is decides which fields it will even accept.
  *
@@ -110,14 +110,6 @@ export interface MetricServerAttributes extends MetricServerOtelAttributes {
 export interface ProxmoxMetricServer extends Resource<'Proxmox.MetricServer', MetricServerProps, MetricServerAttributes, never, PveRequirements> {
 }
 export declare const ProxmoxMetricServer: import("alchemy").ResourceClass<ProxmoxMetricServer>;
-/**
- * ⛔ THE EMPTY `list` FROM `pveHandlers` EARNS ITS KEEP HERE. `GET cluster/metrics/server` answers
- *   with every target the cluster already ships to, including the one somebody configured by hand
- *   years ago; adopting that is how a later `alchemy destroy` silences a graph nobody declared.
- * ⚠️ AND NOTHING BRAKES THIS DESTROY. A pool refuses while it holds guests, a container while it
- *   runs; a metric server just leaves `status.cfg`, the cluster stops shipping on the next
- *   interval, and no guest or task is affected. The plan diff is the only warning anyone gets —
- *   the top of this file again, this time caused by a deploy.
- */
+/** SDK lifecycle walked against pve-manager 9.2.11; failed reads never imply create. */
 export declare const ProxmoxMetricServerProvider: () => import("effect/Layer").Layer<Provider.Provider<ProxmoxMetricServer>, never, import("effect/unstable/http/HttpClient").HttpClient>;
 //# sourceMappingURL=metric-server.d.ts.map

package/dist/proxmox/metric-server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"metric-server.d.ts","sourceRoot":"","sources":["../../src/proxmox/metric-server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,KAAK,QAAQ,MAAM,kBAAkB,CAAC;AAG7C,OAAO,EACL,KAAK,0BAA0B,EAC/B,KAAK,qBAAqB,EAG3B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,KAAK,eAAe,EAAE,KAAK,UAAU,EAAe,MAAM,eAAe,CAAC;AAGnF;;;;;;;GAOG;AACH,MAAM,MAAM,gBAAgB,GAAG,UAAU,GAAG,UAAU,GAAG,eAAe,CAAC;AAEzE,MAAM,WAAW,iBAAkB,SAAQ,UAAU,EAAE,qBAAqB;IAC1E;qGACiG;IACjG,EAAE,EAAE,MAAM,CAAC;IACX;;;;OAIG;IACH,IAAI,EAAE,gBAAgB,CAAC;IACvB,oEAAoE;IACpE,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,yFAAyF;IACzF,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB;;;OAGG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,0FAA0F;IAC1F,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;;;OAMG;IACH,aAAa,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,OAAO,CAAC;IACzC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,wFAAwF;IACxF,KAAK,CAAC,EAAE,KAAK,CAAC;CACf;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,sBAAuB,SAAQ,0BAA0B;IACxE,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,gBAAgB,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,OAAO,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,iBAAiB,EAAE,MAAM,CAAC;IAC1B,eAAe,EAAE,MAAM,CAAC;IACxB,oBAAoB,EAAE,OAAO,CAAC;CAC/B;AAED,MAAM,WAAW,mBAAoB,SAAQ,QAAQ,CACnD,sBAAsB,EACtB,iBAAiB,EACjB,sBAAsB,EACtB,KAAK,EACL,eAAe,CAChB;CAAG;AAEJ,eAAO,MAAM,mBAAmB,sDAAwD,CAAC;AAmFzF;;;;;;;;GAQG;AACH,eAAO,MAAM,2BAA2B,yIACyD,CAAC"}
+{"version":3,"file":"metric-server.d.ts","sourceRoot":"","sources":["../../src/proxmox/metric-server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAanC,OAAO,KAAK,QAAQ,MAAM,kBAAkB,CAAC;AAE7C,OAAO,EACL,KAAK,0BAA0B,EAC/B,KAAK,qBAAqB,EAC3B,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAEtE;;;;;;;GAOG;AACH,MAAM,MAAM,gBAAgB,GAAG,UAAU,GAAG,UAAU,GAAG,eAAe,CAAC;AAEzE,MAAM,WAAW,iBAAkB,SAAQ,UAAU,EAAE,qBAAqB;IAC1E;qGACiG;IACjG,EAAE,EAAE,MAAM,CAAC;IACX;;;;OAIG;IACH,IAAI,EAAE,gBAAgB,CAAC;IACvB,oEAAoE;IACpE,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,yFAAyF;IACzF,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB;;;OAGG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,0FAA0F;IAC1F,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;;;OAMG;IACH,aAAa,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,OAAO,CAAC;IACzC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,wFAAwF;IACxF,KAAK,CAAC,EAAE,KAAK,CAAC;CACf;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,sBAAuB,SAAQ,0BAA0B;IACxE,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,gBAAgB,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,OAAO,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,iBAAiB,EAAE,MAAM,CAAC;IAC1B,eAAe,EAAE,MAAM,CAAC;IACxB,oBAAoB,EAAE,OAAO,CAAC;CAC/B;AAED,MAAM,WAAW,mBAAoB,SAAQ,QAAQ,CACnD,sBAAsB,EACtB,iBAAiB,EACjB,sBAAsB,EACtB,KAAK,EACL,eAAe,CAChB;CAAG;AAEJ,eAAO,MAAM,mBAAmB,sDAAwD,CAAC;AAazF,wFAAwF;AACxF,eAAO,MAAM,2BAA2B,yIA4DrC,CAAC"}

package/dist/proxmox/notification-matcher-distilled.d.ts

@@ -0,0 +1,9 @@
+/** PVE 9.2.11 matchers through distilled; 404 is measured absence, other failures propagate. */
+import * as cluster from '@distilled.cloud/proxmox/cluster';
+import * as Effect from 'effect/Effect';
+import type { NotificationMatcherProps } from './notification-matcher.ts';
+export declare const readMatcher: (props: NotificationMatcherProps) => Effect.Effect<import("./notification-matcher-form.ts").NotificationMatcherAttributes | undefined, import("@distilled.cloud/caddy").BadGateway | import("@distilled.cloud/caddy").BadRequest | import("@distilled.cloud/caddy").ConfigError | import("@distilled.cloud/caddy").Conflict | Error | import("@distilled.cloud/caddy").Forbidden | import("@distilled.cloud/caddy").GatewayTimeout | import("effect/unstable/http/HttpClientError").HttpClientError | import("@distilled.cloud/caddy").InternalServerError | import("@distilled.cloud/caddy").Locked | import("@distilled.cloud/proxmox/Errors").ParameterVerificationFailed | import("./distilled-pve.ts").PveClusterExhausted | import("./credential-errors.ts").PveCredentialDenied | import("@distilled.cloud/caddy").ServiceUnavailable | import("effect/Cause").TimeoutError | import("@distilled.cloud/caddy").TooManyRequests | import("@distilled.cloud/caddy").Unauthorized | import("@distilled.cloud/caddy").UnprocessableEntity | import("@distilled.cloud/proxmox/Errors").ClientErrors, import("effect/unstable/http/HttpClient").HttpClient>;
+export declare const createMatcher: (props: NotificationMatcherProps) => Effect.Effect<void, Error | import("./distilled-pve.ts").PveClusterExhausted | import("./credential-errors.ts").PveCredentialDenied | import("effect/Cause").TimeoutError | cluster.ProxmoxOpError, import("effect/unstable/http/HttpClient").HttpClient>;
+export declare const updateMatcher: (props: NotificationMatcherProps) => Effect.Effect<void, Error | import("./distilled-pve.ts").PveClusterExhausted | import("./credential-errors.ts").PveCredentialDenied | import("effect/Cause").TimeoutError | cluster.ProxmoxOpError, import("effect/unstable/http/HttpClient").HttpClient>;
+export declare const deleteMatcher: (props: NotificationMatcherProps) => Effect.Effect<void | cluster.DeleteClusterNotificationMatcherResponse, import("@distilled.cloud/caddy").BadGateway | import("@distilled.cloud/caddy").BadRequest | import("@distilled.cloud/caddy").ConfigError | import("@distilled.cloud/caddy").Conflict | Error | import("@distilled.cloud/caddy").Forbidden | import("@distilled.cloud/caddy").GatewayTimeout | import("effect/unstable/http/HttpClientError").HttpClientError | import("@distilled.cloud/caddy").InternalServerError | import("@distilled.cloud/caddy").Locked | import("@distilled.cloud/proxmox/Errors").ParameterVerificationFailed | import("./distilled-pve.ts").PveClusterExhausted | import("./credential-errors.ts").PveCredentialDenied | import("@distilled.cloud/caddy").ServiceUnavailable | import("effect/Cause").TimeoutError | import("@distilled.cloud/caddy").TooManyRequests | import("@distilled.cloud/caddy").Unauthorized | import("@distilled.cloud/caddy").UnprocessableEntity | import("@distilled.cloud/proxmox/Errors").ClientErrors, import("effect/unstable/http/HttpClient").HttpClient>;
+//# sourceMappingURL=notification-matcher-distilled.d.ts.map

package/dist/proxmox/notification-matcher-distilled.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"notification-matcher-distilled.d.ts","sourceRoot":"","sources":["../../src/proxmox/notification-matcher-distilled.ts"],"names":[],"mappings":"AAAA,gGAAgG;AAChG,OAAO,KAAK,OAAO,MAAM,kCAAkC,CAAC;AAC5D,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,2BAA2B,CAAC;AAS1E,eAAO,MAAM,WAAW,UAAW,wBAAwB,4jCAqBxD,CAAC;AAEJ,eAAO,MAAM,aAAa,UAAW,wBAAwB,8PAOzD,CAAC;AAEL,eAAO,MAAM,aAAa,UAAW,wBAAwB,8PAOzD,CAAC;AAEL,eAAO,MAAM,aAAa,UAAW,wBAAwB,iiCAML,CAAC"}

package/dist/proxmox/notification-matcher-lifecycle.d.ts

@@ -0,0 +1,27 @@
+import type { Input } from 'alchemy/Input';
+import * as Effect from 'effect/Effect';
+import type { NotificationMatcherProps as Props } from './notification-matcher.ts';
+import { type NotificationMatcherAttributes as Attributes } from './notification-matcher-form.ts';
+export declare const matcherHandlers: {
+    /** Built-ins and human-created matchers are not auto-enrolled; adoption is explicit. */
+    list: () => Effect.Effect<never[], never, never>;
+    read: ({ olds }: {
+        olds: Props;
+    }) => Effect.Effect<Attributes | undefined, Error | import("effect/unstable/http/HttpClientError").HttpClientError | import("./credential-errors.ts").PveCredentialDenied, import("effect/unstable/http/HttpClient").HttpClient>;
+    diff: ({ news, olds, output, }: {
+        news: Input<Props>;
+        olds: Props;
+        output: Attributes | undefined;
+    }) => Effect.Effect<{
+        readonly action: 'replace';
+    } | {
+        readonly action: "noop" | "update";
+    } | undefined, Error | import("effect/unstable/http/HttpClientError").HttpClientError | import("./credential-errors.ts").PveCredentialDenied, import("effect/unstable/http/HttpClient").HttpClient>;
+    reconcile: ({ news }: {
+        news: Props;
+    }) => Effect.Effect<Attributes, Error | import("./distilled-pve.ts").PveClusterExhausted | import("./credential-errors.ts").PveCredentialDenied | import("effect/Cause").TimeoutError | import("@distilled.cloud/proxmox/Protocol").ProxmoxOpError, import("effect/unstable/http/HttpClient").HttpClient>;
+    delete: ({ olds }: {
+        olds: Props;
+    }) => Effect.Effect<void | import("@distilled.cloud/proxmox/cluster").DeleteClusterNotificationMatcherResponse, import("@distilled.cloud/caddy").BadGateway | import("@distilled.cloud/caddy").BadRequest | import("@distilled.cloud/caddy").ConfigError | import("@distilled.cloud/caddy").Conflict | Error | import("@distilled.cloud/caddy").Forbidden | import("@distilled.cloud/caddy").GatewayTimeout | import("effect/unstable/http/HttpClientError").HttpClientError | import("@distilled.cloud/caddy").InternalServerError | import("@distilled.cloud/caddy").Locked | import("@distilled.cloud/proxmox/Errors").ParameterVerificationFailed | import("./distilled-pve.ts").PveClusterExhausted | import("./credential-errors.ts").PveCredentialDenied | import("@distilled.cloud/caddy").ServiceUnavailable | import("effect/Cause").TimeoutError | import("@distilled.cloud/caddy").TooManyRequests | import("@distilled.cloud/caddy").Unauthorized | import("@distilled.cloud/caddy").UnprocessableEntity | import("@distilled.cloud/proxmox/Errors").ClientErrors, import("effect/unstable/http/HttpClient").HttpClient>;
+};
+//# sourceMappingURL=notification-matcher-lifecycle.d.ts.map

package/dist/proxmox/notification-matcher-lifecycle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"notification-matcher-lifecycle.d.ts","sourceRoot":"","sources":["../../src/proxmox/notification-matcher-lifecycle.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,EAAE,wBAAwB,IAAI,KAAK,EAAE,MAAM,2BAA2B,CAAC;AACnF,OAAO,EACL,KAAK,6BAA6B,IAAI,UAAU,EAIjD,MAAM,gCAAgC,CAAC;AAgBxC,eAAO,MAAM,eAAe;IAC1B,wFAAwF;IACxF,IAAI;IACJ,IAAI,aAAa;QAAE,IAAI,EAAE,KAAK,CAAA;KAAE;IAMhC,IAAI,4BAID;QACD,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QACnB,IAAI,EAAE,KAAK,CAAC;QACZ,MAAM,EAAE,UAAU,GAAG,SAAS,CAAC;KAChC;yBAGiD,SAAS;;;;IAU3D,SAAS,aAAa;QAAE,IAAI,EAAE,KAAK,CAAA;KAAE;IAarC,MAAM,aAAa;QAAE,IAAI,EAAE,KAAK,CAAA;KAAE;CACnC,CAAC"}

package/dist/proxmox/notification-matcher.d.ts

@@ -24,14 +24,14 @@
  *   ⛔ `Mapping.Use` IS NOT ENOUGH, though the COLLECTION GET accepts it: the per-object read this
  *     family makes lists only Audit and Modify (pve-manager API2/Cluster/Notifications.pm
  *     `get_matcher`, read at HEAD 2026-09-22 — corrected here; PR 95 said Use sufficed).
- *   ⛔ A MISSING READ PRIVILEGE LOOKS LIKE "ABSENT", not like a 403 — see the same file. For
- *     `default-matcher` that turns an adoption into a planned CREATE that PVE refuses as a
- *     duplicate: the noop below needs a read lease holding Mapping.Audit.
+ *   ⛔ THE OLD HAND CLIENT FOLDED A MISSING READ PRIVILEGE INTO "ABSENT", planning a duplicate
+ *     create. The distilled read now catches only NotFound: a refused read fails the plan.
+ *     The noop still requires a read lease holding Mapping.Audit.
  */
 import { Resource } from 'alchemy';
 import * as Provider from 'alchemy/Provider';
-import { type NotificationMatcherAttributes, type NotificationMatcherFields } from './notification-matcher-form.ts';
-import { type PveRequirements, type WithTarget } from './resource.ts';
+import type { NotificationMatcherAttributes, NotificationMatcherFields } from './notification-matcher-form.ts';
+import type { PveRequirements, WithTarget } from './resource-spec.ts';
 export interface NotificationMatcherProps extends NotificationMatcherFields, WithTarget {
 }
 export interface ProxmoxNotificationMatcher extends Resource<'Proxmox.NotificationMatcher', NotificationMatcherProps, NotificationMatcherAttributes, never, PveRequirements> {

package/dist/proxmox/notification-matcher.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"notification-matcher.d.ts","sourceRoot":"","sources":["../../src/proxmox/notification-matcher.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,KAAK,QAAQ,MAAM,kBAAkB,CAAC;AAE7C,OAAO,EACL,KAAK,6BAA6B,EAClC,KAAK,yBAAyB,EAK/B,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,KAAK,eAAe,EAAE,KAAK,UAAU,EAAe,MAAM,eAAe,CAAC;AAEnF,MAAM,WAAW,wBAAyB,SAAQ,yBAAyB,EAAE,UAAU;CAAG;AAE1F,MAAM,WAAW,0BAA2B,SAAQ,QAAQ,CAC1D,6BAA6B,EAC7B,wBAAwB,EACxB,6BAA6B,EAC7B,KAAK,EACL,eAAe,CAChB;CAAG;AAEJ;;;;GAIG;AACH,eAAO,MAAM,0BAA0B,6DAEtC,CAAC;AAgBF,eAAO,MAAM,kCAAkC,gJAI5C,CAAC"}
+{"version":3,"file":"notification-matcher.d.ts","sourceRoot":"","sources":["../../src/proxmox/notification-matcher.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,KAAK,QAAQ,MAAM,kBAAkB,CAAC;AAE7C,OAAO,KAAK,EACV,6BAA6B,EAC7B,yBAAyB,EAC1B,MAAM,gCAAgC,CAAC;AACxC,OAAO,KAAK,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAGtE,MAAM,WAAW,wBAAyB,SAAQ,yBAAyB,EAAE,UAAU;CAAG;AAE1F,MAAM,WAAW,0BAA2B,SAAQ,QAAQ,CAC1D,6BAA6B,EAC7B,wBAAwB,EACxB,6BAA6B,EAC7B,KAAK,EACL,eAAe,CAChB;CAAG;AAEJ;;;;GAIG;AACH,eAAO,MAAM,0BAA0B,6DAEtC,CAAC;AAEF,eAAO,MAAM,kCAAkC,gJAI5C,CAAC"}

package/dist/proxmox/notification-sdk-input.d.ts

@@ -0,0 +1,22 @@
+/** PVE 9.2.11 form names mapped to the generated SDK's TypeScript field names. */
+import { ProxmoxParseError } from '@distilled.cloud/proxmox/Errors';
+import * as Effect from 'effect/Effect';
+import * as Schema from 'effect/Schema';
+declare const NotificationRequestInvalid_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "NotificationRequestInvalid";
+} & Readonly<A>;
+/** Local schema refusal names the operation, never a form value (headers may be sensitive). */
+export declare class NotificationRequestInvalid extends NotificationRequestInvalid_base<{
+    readonly operation: string;
+}> {
+}
+/**
+ * The provider's forms already enforce vendor constraints. This final generated-schema
+ * check validates the translated Type-side fields without a cast. Unexpected family fields
+ * fail explicitly instead of disappearing through the decoder's default excess-property stripping.
+ */
+export declare const notificationRequest: <S extends Schema.Top>(schema: S, fields: object) => Effect.Effect<S["Type"], NotificationRequestInvalid, never>;
+/** Validate required response fields with the SDK schema without discarding vendor extras. */
+export declare const notificationResponse: <S extends Schema.Top>(schema: S) => (body: S['Type']) => Effect.Effect<S["Type"], ProxmoxParseError, never>;
+export {};
+//# sourceMappingURL=notification-sdk-input.d.ts.map

package/dist/proxmox/notification-sdk-input.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"notification-sdk-input.d.ts","sourceRoot":"","sources":["../../src/proxmox/notification-sdk-input.ts"],"names":[],"mappings":"AAAA,kFAAkF;AAClF,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AAEpE,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;;;;AAExC,+FAA+F;AAC/F,qBAAa,0BAA2B,SAAQ,gCAA+C;IAC7F,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B,CAAC;CAAG;AAEL;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,GAAI,CAAC,SAAS,MAAM,CAAC,GAAG,UAAU,CAAC,UAAU,MAAM,gEAOhF,CAAC;AAEJ,8FAA8F;AAC9F,eAAO,MAAM,oBAAoB,GAC9B,CAAC,SAAS,MAAM,CAAC,GAAG,UAAU,CAAC,YACzB,CAAC,CAAC,MAAM,CAAC,uDAUb,CAAC"}

package/dist/proxmox/notification-target-distilled.d.ts

@@ -0,0 +1,12 @@
+/** PVE 9.2.11 target operations. Named SDK calls retain each endpoint's own request schema. */
+import * as cluster from '@distilled.cloud/proxmox/cluster';
+import type { ProxmoxOpError } from '@distilled.cloud/proxmox/Protocol';
+import * as Effect from 'effect/Effect';
+import type { NotificationTargetProps as Props } from './notification-target.ts';
+export declare const readTarget: (props: Props) => Effect.Effect<import("./notification-target.ts").NotificationTargetAttributes | undefined, import("@distilled.cloud/caddy").BadGateway | import("@distilled.cloud/caddy").BadRequest | import("@distilled.cloud/caddy").ConfigError | import("@distilled.cloud/caddy").Conflict | Error | import("@distilled.cloud/caddy").Forbidden | import("@distilled.cloud/caddy").GatewayTimeout | import("effect/unstable/http/HttpClientError").HttpClientError | import("@distilled.cloud/caddy").InternalServerError | import("@distilled.cloud/caddy").Locked | import("@distilled.cloud/proxmox/Errors").ParameterVerificationFailed | import("./distilled-pve.ts").PveClusterExhausted | import("./credential-errors.ts").PveCredentialDenied | import("@distilled.cloud/caddy").ServiceUnavailable | import("effect/Cause").TimeoutError | import("@distilled.cloud/caddy").TooManyRequests | import("@distilled.cloud/caddy").Unauthorized | import("@distilled.cloud/caddy").UnprocessableEntity | import("@distilled.cloud/proxmox/Errors").ClientErrors, import("effect/unstable/http/HttpClient").HttpClient>;
+/** No request: replacement planning must reject SDK-only input errors before any DELETE. */
+export declare const validateTargetWrite: (props: Props, create: boolean) => Effect.Effect<void, import("./notification-sdk-input.ts").NotificationRequestInvalid, never>;
+export declare const createTarget: (props: Props) => Effect.Effect<cluster.CreateClusterNotificationEndpointGotifyResponse, Error | import("./notification-sdk-input.ts").NotificationRequestInvalid | import("./distilled-pve.ts").PveClusterExhausted | import("./credential-errors.ts").PveCredentialDenied | import("effect/Cause").TimeoutError | ProxmoxOpError, import("effect/unstable/http/HttpClient").HttpClient>;
+export declare const updateTarget: (props: Props) => Effect.Effect<cluster.PutClusterNotificationEndpointGotifyResponse, Error | import("./notification-sdk-input.ts").NotificationRequestInvalid | import("./distilled-pve.ts").PveClusterExhausted | import("./credential-errors.ts").PveCredentialDenied | import("effect/Cause").TimeoutError | ProxmoxOpError, import("effect/unstable/http/HttpClient").HttpClient>;
+export declare const deleteTarget: (props: Props) => Effect.Effect<void | cluster.DeleteClusterNotificationEndpointGotifyResponse, import("@distilled.cloud/caddy").BadGateway | import("@distilled.cloud/caddy").BadRequest | import("@distilled.cloud/caddy").ConfigError | import("@distilled.cloud/caddy").Conflict | Error | import("@distilled.cloud/caddy").Forbidden | import("@distilled.cloud/caddy").GatewayTimeout | import("effect/unstable/http/HttpClientError").HttpClientError | import("@distilled.cloud/caddy").InternalServerError | import("@distilled.cloud/caddy").Locked | import("@distilled.cloud/proxmox/Errors").ParameterVerificationFailed | import("./distilled-pve.ts").PveClusterExhausted | import("./credential-errors.ts").PveCredentialDenied | import("@distilled.cloud/caddy").ServiceUnavailable | import("effect/Cause").TimeoutError | import("@distilled.cloud/caddy").TooManyRequests | import("@distilled.cloud/caddy").Unauthorized | import("@distilled.cloud/caddy").UnprocessableEntity | import("@distilled.cloud/proxmox/Errors").ClientErrors, import("effect/unstable/http/HttpClient").HttpClient>;
+//# sourceMappingURL=notification-target-distilled.d.ts.map

package/dist/proxmox/notification-target-distilled.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"notification-target-distilled.d.ts","sourceRoot":"","sources":["../../src/proxmox/notification-target-distilled.ts"],"names":[],"mappings":"AAAA,+FAA+F;AAC/F,OAAO,KAAK,OAAO,MAAM,kCAAkC,CAAC;AAC5D,OAAO,KAAK,EAAoB,cAAc,EAAE,MAAM,mCAAmC,CAAC;AAC1F,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAExC,OAAO,KAAK,EAAE,uBAAuB,IAAI,KAAK,EAAE,MAAM,0BAA0B,CAAC;AA2CjF,eAAO,MAAM,UAAU,UAAW,KAAK,qjCAIpC,CAAC;AAkCJ,4FAA4F;AAC5F,eAAO,MAAM,mBAAmB,UAAW,KAAK,UAAU,OAAO,iGAehE,CAAC;AAEF,eAAO,MAAM,YAAY,UAAW,KAAK,4WAmBxC,CAAC;AAEF,eAAO,MAAM,YAAY,UAAW,KAAK,yWAmBxC,CAAC;AAEF,eAAO,MAAM,YAAY,UAAW,KAAK,wiCAaxC,CAAC"}

package/dist/proxmox/notification-target-form.d.ts

@@ -6,6 +6,8 @@
  *   one metric-server uses: this file turns a declaration into a form, and the resource file says
  *   what a target IS and when it has changed. The `import type` back is erased, so it is a cycle
  *   on paper only.
+ * ★ These shapes still feed specGuards and preserve scalar/default/omission mapping. The
+ *   distilled adapter replaces list fields with typed arrays; the SDK owns their wire encoding.
  */
 import type { NotificationTargetProps } from './notification-target.ts';
 /** ⚠️ `0` is "PVE holds no port". Integers have come back as strings elsewhere, so parse both. */

package/dist/proxmox/notification-target-form.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"notification-target-form.d.ts","sourceRoot":"","sources":["../../src/proxmox/notification-target-form.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,0BAA0B,CAAC;AAoBxE,kGAAkG;AAClG,eAAO,MAAM,MAAM,UAAW,OAAO,KAAG,MAGvC,CAAC;AASF;;;;;;;;GAQG;AACH,eAAO,MAAM,WAAW,UAAW,OAAO,KAAG,MAO1C,CAAC;AAEJ,mGAAmG;AACnG,eAAO,MAAM,UAAU,UAAW,OAAO,KAAG,MAC+C,CAAC;AAK5F;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,KAAK,UAAW,uBAAuB,KAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAkB1E,CAAC;AAEH;;;;;GAKG;AACH,eAAO,MAAM,WAAW,UAAW,uBAAuB,KAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAGhF,CAAC"}
+{"version":3,"file":"notification-target-form.d.ts","sourceRoot":"","sources":["../../src/proxmox/notification-target-form.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,0BAA0B,CAAC;AAoBxE,kGAAkG;AAClG,eAAO,MAAM,MAAM,UAAW,OAAO,KAAG,MAGvC,CAAC;AASF;;;;;;;;GAQG;AACH,eAAO,MAAM,WAAW,UAAW,OAAO,KAAG,MAO1C,CAAC;AAEJ,mGAAmG;AACnG,eAAO,MAAM,UAAU,UAAW,OAAO,KAAG,MAC+C,CAAC;AAK5F;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,KAAK,UAAW,uBAAuB,KAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAkB1E,CAAC;AAEH;;;;;GAKG;AACH,eAAO,MAAM,WAAW,UAAW,uBAAuB,KAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAGhF,CAAC"}

package/dist/proxmox/notification-target-lifecycle.d.ts

@@ -0,0 +1,29 @@
+import type { Input } from 'alchemy/Input';
+import * as Effect from 'effect/Effect';
+import type { NotificationTargetAttributes as Attributes, NotificationTargetProps as Props } from './notification-target.ts';
+export declare const targetHandlers: {
+    /** Targets include built-ins and human-owned endpoints; enrollment remains explicit. */
+    list: () => Effect.Effect<never[], never, never>;
+    read: ({ olds }: {
+        olds: Props;
+    }) => Effect.Effect<Attributes | undefined, Error | import("effect/unstable/http/HttpClientError").HttpClientError | import("./credential-errors.ts").PveCredentialDenied, import("effect/unstable/http/HttpClient").HttpClient>;
+    diff: ({ news, olds, output, }: {
+        news: Input<Props>;
+        olds: Props;
+        output: Attributes | undefined;
+    }) => Effect.Effect<{
+        readonly action: 'replace';
+        readonly deleteFirst: boolean;
+    } | {
+        readonly deleteFirst?: never;
+        readonly action: "noop" | "update";
+    } | undefined, Error | import("effect/unstable/http/HttpClientError").HttpClientError | import("./credential-errors.ts").PveCredentialDenied, import("effect/unstable/http/HttpClient").HttpClient>;
+    reconcile: ({ news }: {
+        news: Props;
+    }) => Effect.Effect<Attributes, Error | import("effect/unstable/http/HttpClientError").HttpClientError | import("./credential-errors.ts").PveCredentialDenied, import("effect/unstable/http/HttpClient").HttpClient>;
+    /** Vendor DELETE reverts built-ins; SDK NotFound makes an absent custom target idempotent. */
+    delete: ({ olds }: {
+        olds: Props;
+    }) => Effect.Effect<void | import("@distilled.cloud/proxmox/cluster").DeleteClusterNotificationEndpointGotifyResponse, import("@distilled.cloud/caddy").BadGateway | import("@distilled.cloud/caddy").BadRequest | import("@distilled.cloud/caddy").ConfigError | import("@distilled.cloud/caddy").Conflict | Error | import("@distilled.cloud/caddy").Forbidden | import("@distilled.cloud/caddy").GatewayTimeout | import("effect/unstable/http/HttpClientError").HttpClientError | import("@distilled.cloud/caddy").InternalServerError | import("@distilled.cloud/caddy").Locked | import("@distilled.cloud/proxmox/Errors").ParameterVerificationFailed | import("./distilled-pve.ts").PveClusterExhausted | import("./credential-errors.ts").PveCredentialDenied | import("@distilled.cloud/caddy").ServiceUnavailable | import("effect/Cause").TimeoutError | import("@distilled.cloud/caddy").TooManyRequests | import("@distilled.cloud/caddy").Unauthorized | import("@distilled.cloud/caddy").UnprocessableEntity | import("@distilled.cloud/proxmox/Errors").ClientErrors, import("effect/unstable/http/HttpClient").HttpClient>;
+};
+//# sourceMappingURL=notification-target-lifecycle.d.ts.map

package/dist/proxmox/notification-target-lifecycle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"notification-target-lifecycle.d.ts","sourceRoot":"","sources":["../../src/proxmox/notification-target-lifecycle.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,EACV,4BAA4B,IAAI,UAAU,EAC1C,uBAAuB,IAAI,KAAK,EACjC,MAAM,0BAA0B,CAAC;AAclC,eAAO,MAAM,cAAc;IACzB,wFAAwF;IACxF,IAAI;IACJ,IAAI,aAAa;QAAE,IAAI,EAAE,KAAK,CAAA;KAAE;IAMhC,IAAI,4BAID;QACD,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QACnB,IAAI,EAAE,KAAK,CAAC;QACZ,MAAM,EAAE,UAAU,GAAG,SAAS,CAAC;KAChC;yBAUsB,SAAS;;;;;;IAWhC,SAAS,aAAa;QAAE,IAAI,EAAE,KAAK,CAAA;KAAE;IAarC,8FAA8F;IAC9F,MAAM,aAAa;QAAE,IAAI,EAAE,KAAK,CAAA;KAAE;CACnC,CAAC"}

package/dist/proxmox/notification-target-spec.d.ts

@@ -0,0 +1,5 @@
+/** Pure target state and vendor guards, kept separate from the SDK lifecycle. */
+import type { NotificationTargetAttributes, NotificationTargetProps } from './notification-target.ts';
+import type { PveSpec } from './resource-spec.ts';
+export declare const targetSpec: PveSpec<NotificationTargetProps, NotificationTargetAttributes>;
+//# sourceMappingURL=notification-target-spec.d.ts.map

package/dist/proxmox/notification-target-spec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"notification-target-spec.d.ts","sourceRoot":"","sources":["../../src/proxmox/notification-target-spec.ts"],"names":[],"mappings":"AAAA,iFAAiF;AACjF,OAAO,KAAK,EACV,4BAA4B,EAC5B,uBAAuB,EACxB,MAAM,0BAA0B,CAAC;AAClC,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAKlD,eAAO,MAAM,UAAU,EAAE,OAAO,CAAC,uBAAuB,EAAE,4BAA4B,CAyDrF,CAAC"}

package/dist/proxmox/notification-target.d.ts

@@ -45,14 +45,13 @@
  *   ⚠️ PREFER A SECOND ROLE GRANTED AT `/mapping/notifications` OVER WIDENING THE PROVISIONING ROLE
  *     ON `/`. `/mapping` also holds the PCI and USB passthrough maps, so Mapping.Modify at the root
  *     lets a credential scoped to make containers rewire somebody's hardware.
- *   ⛔ A MISSING READ PRIVILEGE DOES NOT LOOK LIKE A 403. `pveOperations.read` ends in
- *     `orElseSucceed(() => undefined)`, so a 403 on the GET is indistinguishable from "absent": the
- *     plan says create, PVE answers "already exists", and the fault was an ACL all along. That pair
- *     is the signature — grant Mapping.Audit to the READ role before changing anything else.
+ *   ⛔ THE OLD HAND CLIENT FOLDED 403 INTO "ABSENT": the plan said create, PVE refused the
+ *     duplicate, and the fault was an ACL all along. Distilled now propagates that failure.
+ *     Grant Mapping.Audit to the READ role before adopting; only typed NotFound means absent.
  */
 import { Resource } from 'alchemy';
 import * as Provider from 'alchemy/Provider';
-import { type PveRequirements, type WithTarget } from './resource.ts';
+import type { PveRequirements, WithTarget } from './resource-spec.ts';
 /** The four families PVE ships. `GET /cluster/notifications/endpoints` lists exactly these. */
 export type NotificationTargetType = 'gotify' | 'sendmail' | 'smtp' | 'webhook';
 /**

package/dist/proxmox/notification-target.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"notification-target.d.ts","sourceRoot":"","sources":["../../src/proxmox/notification-target.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmDG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,KAAK,QAAQ,MAAM,kBAAkB,CAAC;AAI7C,OAAO,EAAE,KAAK,eAAe,EAAE,KAAK,UAAU,EAAe,MAAM,eAAe,CAAC;AAGnF,+FAA+F;AAC/F,MAAM,MAAM,sBAAsB,GAAG,QAAQ,GAAG,UAAU,GAAG,MAAM,GAAG,SAAS,CAAC;AAEhF;;;;;;;GAOG;AACH,MAAM,WAAW,uBAAwB,SAAQ,UAAU;IACzD,gFAAgF;IAChF,IAAI,EAAE,sBAAsB,CAAC;IAC7B;;;OAGG;IACH,IAAI,EAAE,MAAM,CAAC;IACb,2BAA2B;IAC3B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,oFAAoF;IACpF,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,+EAA+E;IAC/E,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3B,iFAAiF;IACjF,aAAa,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,uFAAuF;IACvF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,sFAAsF;IACtF,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,gDAAgD;IAChD,IAAI,CAAC,EAAE,UAAU,GAAG,UAAU,GAAG,KAAK,CAAC;IACvC,+EAA+E;IAC/E,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,2DAA2D;IAC3D,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,+EAA+E;IAC/E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,0CAA0C;IAC1C,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,qFAAqF;IACrF,MAAM,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,KAAK,CAAC;IAChC;;;OAGG;IACH,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3B;;;;;OAKG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;;;GAIG;AACH,MAAM,WAAW,4BAA4B;IAC3C,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,sBAAsB,CAAC;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,OAAO,CAAC;IACjB,8FAA8F;IAC9F,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,+DAA+D;IAC/D,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,4FAA4F;IAC5F,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,yBAA0B,SAAQ,QAAQ,CACzD,4BAA4B,EAC5B,uBAAuB,EACvB,4BAA4B,EAC5B,KAAK,EACL,eAAe,CAChB;CAAG;AAEJ,eAAO,MAAM,yBAAyB,4DAErC,CAAC;AA6DF;;;;;GAKG;AACH,eAAO,MAAM,iCAAiC,+IAI3C,CAAC"}
+{"version":3,"file":"notification-target.d.ts","sourceRoot":"","sources":["../../src/proxmox/notification-target.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkDG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,KAAK,QAAQ,MAAM,kBAAkB,CAAC;AAE7C,OAAO,KAAK,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAGtE,+FAA+F;AAC/F,MAAM,MAAM,sBAAsB,GAAG,QAAQ,GAAG,UAAU,GAAG,MAAM,GAAG,SAAS,CAAC;AAEhF;;;;;;;GAOG;AACH,MAAM,WAAW,uBAAwB,SAAQ,UAAU;IACzD,gFAAgF;IAChF,IAAI,EAAE,sBAAsB,CAAC;IAC7B;;;OAGG;IACH,IAAI,EAAE,MAAM,CAAC;IACb,2BAA2B;IAC3B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,oFAAoF;IACpF,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,+EAA+E;IAC/E,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3B,iFAAiF;IACjF,aAAa,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,uFAAuF;IACvF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,sFAAsF;IACtF,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,gDAAgD;IAChD,IAAI,CAAC,EAAE,UAAU,GAAG,UAAU,GAAG,KAAK,CAAC;IACvC,+EAA+E;IAC/E,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,2DAA2D;IAC3D,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,+EAA+E;IAC/E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,0CAA0C;IAC1C,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,qFAAqF;IACrF,MAAM,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,KAAK,CAAC;IAChC;;;OAGG;IACH,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3B;;;;;OAKG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;;;GAIG;AACH,MAAM,WAAW,4BAA4B;IAC3C,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,sBAAsB,CAAC;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,OAAO,CAAC;IACjB,8FAA8F;IAC9F,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,+DAA+D;IAC/D,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,4FAA4F;IAC5F,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,yBAA0B,SAAQ,QAAQ,CACzD,4BAA4B,EAC5B,uBAAuB,EACvB,4BAA4B,EAC5B,KAAK,EACL,eAAe,CAChB;CAAG;AAEJ,eAAO,MAAM,yBAAyB,4DAErC,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,iCAAiC,+IAI3C,CAAC"}

package/dist/proxmox/pbs-datastore-endpoint.d.ts

@@ -2,7 +2,7 @@
  * `Pbs.Datastore`'s two vendor endpoints, and the plan-time check over its two forms.
  *
  * ★ A FILE OF ITS OWN BECAUSE THIS FAMILY DOES NOT USE `pveHandlers`. It writes its own `diff` and
- *   `reconcile` (a create answers with a task id, so it settles rather than reading back once), so
+ *   `reconcile` (bounded readback handles settling after a write; create returns no task id), so
  *   it cannot inherit the guard from resource.ts — and a copy of the two calls inside that already
  *   long file is exactly the per-resource copy-paste the shared handler exists to prevent.
  *

package/dist/proxmox/pbs-datastore-form.d.ts

@@ -1,40 +1,39 @@
 /**
- * A PBS datastore on the wire: the transport that reaches PBS, the form it wants, and the coercion
- * back to something comparable.
+ * A PBS datastore's pure vendor forms and coercion back to comparable state. SDK transport is
+ * in pbs-datastore-wire.ts; lifecycle behavior is in pbs-datastore-lifecycle.ts.
  *
  * ★ SPLIT OUT OF pbs-datastore.ts FOR THE 250-LINE CAP, the seam notification-target-form.ts uses:
- *   this file is everything that touches PBS's encoding, and the resource file is the declaration
- *   and the five handlers. The `import type` back is erased, so it is a cycle on paper only.
+ *   this file originally held PBS encoding beside forms, while the resource held its declaration
+ *   and five handlers. The `import type` back is erased, so it is a cycle on paper only.
  *
- * ⛔ THIS FILE IS OVER THE 250-LINE CAP AND THE EXTRACTION IS NAMED RATHER THAN FUDGED. `PbsTarget`,
+ * ⛔ HISTORICAL EXTRACTION NOTE: THIS FILE EXCEEDED THE 250-LINE CAP IN THE ORIGINAL DRAFT. `PbsTarget`,
  *   `PbsRole`, `PbsError`, `pbsAuthorization`, `PveForm`, `encode`, `pbs` and `settle` — about 150
  *   lines — are a PBS CLIENT, not a datastore form, and belong in `pbs-client.ts`. Lifting them
  *   leaves this file near 200 and costs nothing but a move. It was not done here only because the
  *   family was commissioned as a two-file split; ceph-pool is the in-package precedent for three
  *   (ceph-pool.ts + ceph-pool-form.ts + ceph-pool-settle.ts, 532 lines for one family). Everything
  *   in that list is also what Pbs.SyncJob, Pbs.PruneJob and Pbs.Remote will each need unchanged,
- *   so the second PBS family forces the move anyway. ⛔ DO NOT MEET THE CAP BY CUTTING COMMENTS.
+ *   so the second PBS family forced that move. The SDK and focused siblings now own these seams.
+ *   ⛔ DO NOT MEET THE CAP BY CUTTING COMMENTS.
  */
-import * as Effect from 'effect/Effect';
-import { type PveForm } from './client.ts';
 import type { PbsTarget as ApiPbsTarget } from './credentials.ts';
 import type { PbsDatastoreProps } from './pbs-datastore.ts';
 /**
- * ★ PBS REUSES THE PVE CLIENT RATHER THAN OWNING ONE. An earlier draft of this file carried its
- *   own `PbsTarget`, `PbsError`, `pbsAuthorization`, form encoder and `pve()` — a near-copy of
- *   client.ts differing in one header. They are gone: `PveTarget` now carries a `scheme`, and
- *   `authorization()` spells the header `PBSAPIToken=<id>:<secret>` when it is `'pbs'`. The
- *   insight that survived is the FORM TYPE — PBS decodes a multi-valued field from repeated keys
- *   where PVE wants a comma string — and that now lives on `PveForm` in client.ts, so both
- *   products share one encoder and neither can reach for the other's convention by accident.
+ * ★ PBS ORIGINALLY REUSED THE PVE CLIENT RATHER THAN OWNING ANOTHER. An earlier draft carried
+ *   its own `PbsTarget`, `PbsError`, `pbsAuthorization`, form encoder and `pve()` — a near-copy of
+ *   client.ts differing in one header. The shared target's `scheme` replaced that copy. This
+ *   family now uses the distilled PBS SDK through `distilled-pbs.ts`, retaining the same leased
+ *   credentials and PBS authorization scheme. The important encoding distinction survives:
+ *   PBS decodes a multi-valued field from repeated keys where PVE wants a comma string. The SDK
+ *   protocol owns that behavior; these pure forms describe only this datastore's scalar fields.
  *
  * 🔴 THIS ALIAS SAID `= PveTarget` AND IT WAS WRONG — Pbs.Datastore REQUIRED A PVE TARGET. When
  *   `credentials.ts` grew a real `PbsTarget` with `scheme: 'pbs'`, this line was left pointing at
  *   the PVE type, which pins `scheme: 'pve'`. So the one family that most needs the discriminant
  *   was the one family that refused the correct value: declaring a datastore against the PBS host
  *   failed to compile with `Type '"pbs"' is not assignable to type 'Input<"pve">'`, and passing a
- *   PVE target compiled fine and would have 401'd every call — which `read` folds into "absent",
- *   so the plan would say CREATE for a datastore holding the estate's backups.
+ *   PVE target compiled fine and would have 401'd every call — which the old `read` folded into
+ *   "absent", so the plan would say CREATE for a datastore holding the estate's backups.
  *   ⛔ IT SURVIVED BECAUSE NOTHING EVER DECLARED ONE. The provider was registered in
  *   alchemy.run.ts from the day it was written and `pveHandlers`' `list` answers empty, so
  *   registration exercises no call site at all. Three sibling families import `PbsTarget` from
@@ -99,7 +98,7 @@ export declare const matches: (live: PbsDatastoreAttributes, props: PbsDatastore
  *   slot, not of the declaration; one that could re-point it is one that can send backups to the
  *   wrong drive.
  */
-export declare const createForm: (props: PbsDatastoreProps) => PveForm;
+export declare const createForm: (props: PbsDatastoreProps) => Record<string, string>;
 /**
  * ⛔ THERE IS NO `delete` LIST HERE, AND THAT IS A CHOICE ABOUT BACKUPS RATHER THAN AN OMISSION.
  *   sdn-vnet.ts derives one from absent props, which is right for an alias and wrong for a
@@ -119,29 +118,6 @@ export declare const createForm: (props: PbsDatastoreProps) => PveForm;
  *     element that fails the enum check. `PveForm` and `encode` already carry arrays for exactly
  *     this. ⚠️ REASONED FROM THE PUBLISHED SCHEMA, NOT PROVEN ON A WIRE.
  */
-export declare const updateForm: (props: PbsDatastoreProps) => PveForm;
+export declare const updateForm: (props: PbsDatastoreProps) => Record<string, string>;
 export declare const object: (props: PbsDatastoreProps) => string;
-/**
- * The live datastore, or undefined.
- *
- * ⛔ `name` IS THE PRESENCE TEST, NOT THE STATUS CODE — PBS does not answer 404 for a section that
- *   is missing from `datastore.cfg`, it answers a generic error, so there is no code to key off.
- * ⛔ A MISSING READ PRIVILEGE THEREFORE LOOKS EXACTLY LIKE ABSENCE, because the fold below cannot
- *   tell them apart. The signature is a plan that says CREATE followed by PBS answering
- *   "datastore '<name>' already exists." — that pair means Datastore.Audit, not a missing
- *   datastore. It is loud and non-destructive, which is the only reason the fold is tolerable here;
- *   see the ⛔ on `readRole` in resource.ts for the PVE families where it is not.
- * ⛔ ON THE DELETE PATH THE SAME FOLD IS A LIE, AND THIS IS THE ONE HAZARD IN THIS FAMILY I COULD
- *   NOT CLOSE. `delete` settles by polling this read until it answers `undefined` — and a `read`
- *   role that lacks `Datastore.Audit` answers `undefined` from the very first poll, so EVERY delete
- *   would report success while the datastore stood. Worse, the two lanes are different leases: the
- *   DELETE goes out under `provision` and may genuinely fail, and this read cannot see that it did.
- *   ★ THE SHAPE OF THE FIX IS ALREADY IN THIS PACKAGE: `confirmAbsent` in ceph-pool-settle.ts asks
- *     a SECOND, DIFFERENT question — does the collection LIST this object? — and lets a failure
- *     PROPAGATE rather than folding it, so "I could not ask" fails the deploy instead of passing
- *     it. Add the same over `GET /config/datastore` before anyone relies on a reported deletion.
- *   ⚠️ UNTIL THEN THE PRECONDITION IS EXPLICIT: the `read` role MUST hold `Datastore.Audit` on the
- *     datastore, or this provider cannot tell a deletion from a refusal.
- */
-export declare const readOne: (props: PbsDatastoreProps) => Effect.Effect<PbsDatastoreAttributes | undefined, never, import("effect/unstable/http/HttpClient").HttpClient>;
 //# sourceMappingURL=pbs-datastore-form.d.ts.map

package/dist/proxmox/pbs-datastore-form.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pbs-datastore-form.d.ts","sourceRoot":"","sources":["../../src/proxmox/pbs-datastore-form.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,KAAK,OAAO,EAAO,MAAM,aAAa,CAAC;AAChD,OAAO,KAAK,EAAE,SAAS,IAAI,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAClE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAG5D;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,MAAM,SAAS,GAAG,YAAY,CAAC;AAErC,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb;;;;OAIG;IACH,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,MAAM,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,4FAA4F;IAC5F,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,OAAO,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,kBAAkB,EAAE,MAAM,CAAC;IAC3B,sFAAsF;IACtF,OAAO,EAAE,MAAM,CAAC;IAChB,wBAAwB,EAAE,MAAM,CAAC;IACjC,yBAAyB,EAAE,MAAM,CAAC;CACnC;AAED;;;;;;GAMG;AACH,eAAO,MAAM,UAAU,SACf,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,SACtB,iBAAiB,KACvB,sBAoBD,CAAC;AAIH;;;;;;;;;GASG;AACH,eAAO,MAAM,OAAO,SAAU,sBAAsB,SAAS,iBAAiB,YAkBK,CAAC;AAqCpF;;;;;;;;GAQG;AACH,eAAO,MAAM,UAAU,UAAW,iBAAiB,KAAG,OASpD,CAAC;AAEH;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,UAAU,UAAW,iBAAiB,KAAG,OAAyB,CAAC;AAEhF,eAAO,MAAM,MAAM,UAAW,iBAAiB,WAAqC,CAAC;AAErF;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,eAAO,MAAM,OAAO,UAAW,iBAAiB,mHAM7C,CAAC"}
+{"version":3,"file":"pbs-datastore-form.d.ts","sourceRoot":"","sources":["../../src/proxmox/pbs-datastore-form.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,KAAK,EAAE,SAAS,IAAI,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAClE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAG5D;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,MAAM,SAAS,GAAG,YAAY,CAAC;AAErC,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb;;;;OAIG;IACH,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,MAAM,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,4FAA4F;IAC5F,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,OAAO,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,kBAAkB,EAAE,MAAM,CAAC;IAC3B,sFAAsF;IACtF,OAAO,EAAE,MAAM,CAAC;IAChB,wBAAwB,EAAE,MAAM,CAAC;IACjC,yBAAyB,EAAE,MAAM,CAAC;CACnC;AAED;;;;;;GAMG;AACH,eAAO,MAAM,UAAU,SACf,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,SACtB,iBAAiB,KACvB,sBAoBD,CAAC;AAIH;;;;;;;;;GASG;AACH,eAAO,MAAM,OAAO,SAAU,sBAAsB,SAAS,iBAAiB,YAkBK,CAAC;AAqCpF;;;;;;;;GAQG;AACH,eAAO,MAAM,UAAU,UAAW,iBAAiB,KAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CASzE,CAAC;AAEH;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,UAAU,UAAW,iBAAiB,KAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAmB,CAAC;AAE/F,eAAO,MAAM,MAAM,UAAW,iBAAiB,WAAqC,CAAC"}

package/dist/proxmox/pbs-datastore-guard.d.ts

@@ -33,13 +33,15 @@ export declare const guardBackend: (live: PbsDatastoreAttributes, props: PbsData
 /**
  * Wait for PBS to finish, then answer the last thing it said.
  *
- * ⛔ IT EXISTS BECAUSE A PBS CREATE IS A FORKED WORKER AND THE CONFIG SECTION IS WRITTEN LAST.
+ * ⛔ THE ORIGINAL CREATE-WORKER ASSUMPTION BELOW WAS REASONED, NOT MEASURED.
  *   `POST /config/datastore` answers with a UPID while a `create-datastore` task builds the chunk
  *   store's 65536 directories; only when that finishes does the section reach `datastore.cfg`. An
  *   immediate read-back therefore sees a datastore that is not there yet, and the factory's "the
  *   write returned no error but the object is still absent" would fire on a create going perfectly.
  *   The DELETE forks a worker too. ⚠️ DOCUMENTED FROM THE PUBLISHED SCHEMA, NOT MEASURED — I hold
- *   no PBS token. If a create turns out to be synchronous, the first poll simply succeeds.
+ *   no PBS token. The pinned PBS 4.2.6-1 schema actually declares a NULL create response,
+ *   while DELETE declares a UPID. We preserve bounded readback for both; a synchronous create
+ *   succeeds at the first poll rather than depending on the old UPID assumption.
  * ★ IT TAKES THE READ AS AN EFFECT RATHER THAN A FUNCTION — the one simplification over
  *   ceph-pool-settle.ts: an Effect is a description, so re-running it re-reads and no dependency
  *   has to be threaded back in to avoid a cycle.
@@ -48,8 +50,9 @@ export declare const guardBackend: (live: PbsDatastoreAttributes, props: PbsData
  *   Anything still unsettled after two minutes is a fault to surface, not a wait to lengthen, and
  *   the caller's message points at the task log, which is where the real answer is. `Effect.sleep`
  *   yields between polls; nothing here parks a call on one long wait.
- * ⚠️ POLLING THE TASK STATUS INSTEAD WOULD BE WORSE, for ceph-pool-settle.ts's reason: every call
- *   mints a FRESH token, so the token asking about the task is not the one that started it.
+ * ⚠️ THE ORIGINAL TRANSPORT MINTED A TOKEN PER CALL, making task-owner polling unreliable.
+ *   The SDK runner now reuses leases, but create has no task id in its measured response schema.
+ *   This migration therefore preserves bounded readback rather than inventing a task handle.
  */
 export declare const settle: <A, E, R>(read: Effect.Effect<A, E, R>, done: (live: A) => boolean) => Effect.Effect<A, E, R>;
 //# sourceMappingURL=pbs-datastore-guard.d.ts.map

package/dist/proxmox/pbs-datastore-guard.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pbs-datastore-guard.d.ts","sourceRoot":"","sources":["../../src/proxmox/pbs-datastore-guard.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,KAAK,sBAAsB,EAAU,MAAM,yBAAyB,CAAC;AAC9E,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAmB5D;;;;GAIG;AACH,eAAO,MAAM,SAAS,SAAU,sBAAsB,SAAS,iBAAiB,sCAWzE,CAAC;AAER;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,YAAY,SAAU,sBAAsB,SAAS,iBAAiB,sCAY5E,CAAC;AAER;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,eAAO,MAAM,MAAM,GAAI,CAAC,EAAE,CAAC,EAAE,CAAC,QAAQ,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,OAAO,2BAQpF,CAAC"}
+{"version":3,"file":"pbs-datastore-guard.d.ts","sourceRoot":"","sources":["../../src/proxmox/pbs-datastore-guard.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,KAAK,sBAAsB,EAAU,MAAM,yBAAyB,CAAC;AAC9E,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAmB5D;;;;GAIG;AACH,eAAO,MAAM,SAAS,SAAU,sBAAsB,SAAS,iBAAiB,sCAWzE,CAAC;AAER;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,YAAY,SAAU,sBAAsB,SAAS,iBAAiB,sCAY5E,CAAC;AAER;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,eAAO,MAAM,MAAM,GAAI,CAAC,EAAE,CAAC,EAAE,CAAC,QAAQ,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,OAAO,2BAQpF,CAAC"}