@homeflare/alchemy 0.38.0 → 0.40.0

package/dist/proxmox/index.js

@@ -677,6 +677,16 @@ var PVE_NODES_QEMU_CONSTRAINTS = {
   }
 };
 
+// src/proxmox/generated/constraints/pve-nodes-storage.ts
+var PVE_NODES_STORAGE_CONSTRAINTS = {
+  "pve:POST /nodes/{node}/storage/{storage}/download-url": {
+    "checksum-algorithm": { enum: ["md5", "sha1", "sha224", "sha256", "sha384", "sha512"], type: "string" },
+    content: { enum: ["iso", "vztmpl", "import"], format: "pve-storage-content", required: true, type: "string" },
+    filename: { maxLength: 255, required: true, type: "string" },
+    url: { pattern: "^https?://.*\\n?$", patternSource: "https?://.*", required: true, type: "string" }
+  }
+};
+
 // src/proxmox/generated/constraints/pve-pools.ts
 var PVE_POOLS_CONSTRAINTS = {
   "pve:POST /pools": {
@@ -947,6 +957,7 @@ var PROXMOX_CONSTRAINTS = {
   ...PVE_NODES_LXC_CONSTRAINTS,
   ...PVE_NODES_NETWORK_CONSTRAINTS,
   ...PVE_NODES_QEMU_CONSTRAINTS,
+  ...PVE_NODES_STORAGE_CONSTRAINTS,
   ...PVE_POOLS_CONSTRAINTS,
   ...PVE_STORAGE_CONSTRAINTS,
   ...PBS_CONFIG_CONSTRAINTS
@@ -5961,16 +5972,66 @@ import { isResolved as isResolved26 } from "alchemy/Diff";
 import * as nodes17 from "@distilled.cloud/proxmox/nodes";
 import * as Effect84 from "effect/Effect";
 
+// src/proxmox/qemu-props.ts
+var NOT_CONFIG2 = new Set(["node", "target", "vmid"]);
+var INDEXED2 = {
+  ide: 4,
+  ipconfig: 32,
+  net: 32,
+  scsi: 31,
+  serial: 4
+};
+var indexedKey2 = (key) => {
+  const match = /^(ide|ipconfig|net|scsi|serial)(0|[1-9]\d*)$/.exec(key);
+  if (match === null)
+    return;
+  const family = match[1];
+  const index = Number(match[2]);
+  return index < INDEXED2[family] ? [family, index] : undefined;
+};
+var SCALAR_KEYS = new Set([
+  "agent",
+  "boot",
+  "cores",
+  "cpu",
+  "memory",
+  "name",
+  "onboot",
+  "scsihw",
+  "sockets"
+]);
+var isManagedKey2 = (key) => SCALAR_KEYS.has(key) || indexedKey2(key) !== undefined;
+var declaredValue2 = (props, key) => props[key];
+var declaredKeys2 = (props) => Object.keys(props).filter((key) => !NOT_CONFIG2.has(key) && declaredValue2(props, key) !== undefined).sort();
+var wireValue2 = (value) => value === true ? "1" : value === false ? "0" : String(value);
+var storedConfig2 = (live) => {
+  const out = {};
+  for (const [key, value] of Object.entries(live)) {
+    if (!isManagedKey2(key))
+      continue;
+    if (value === null || value === undefined || typeof value === "object")
+      continue;
+    out[key] = wireValue2(value);
+  }
+  return out;
+};
+
 // src/proxmox/qemu-form.ts
-var shape9 = (props) => ({
-  cores: String(props.cores ?? 1),
-  memory: String(props.memory ?? 512),
-  name: props.name ?? `vm${String(props.vmid)}`,
-  onboot: props.onboot === true ? "1" : "0",
-  sockets: String(props.sockets ?? 1),
-  ...props.net0 === undefined ? {} : { net0: props.net0 }
+var formRefusals = (props) => declaredKeys2(props).filter((key) => !isManagedKey2(key)).map((key) => `${key}: not a config key this resource manages (vmid ${String(props.vmid)}).`);
+var form = (props) => {
+  const out = {};
+  for (const key of declaredKeys2(props)) {
+    if (!isManagedKey2(key))
+      continue;
+    out[key] = wireValue2(declaredValue2(props, key));
+  }
+  return out;
+};
+var createForm9 = (props) => ({
+  ...form(props),
+  vmid: String(props.vmid)
 });
-var createForm9 = (props) => ({ ...shape9(props), vmid: String(props.vmid) });
+var updateForm6 = form;
 
 // src/proxmox/qemu-errors.ts
 class QemuRefusedError extends Error {
@@ -5980,6 +6041,161 @@ class QemuRefusedError extends Error {
   }
 }
 
+// src/proxmox/qemu-volume.ts
+var NEW_DISK2 = /^([^:\s]+):(\d+(?:\.\d+)?)$/;
+var NEW_CLOUDINIT = /^([^:\s]+):cloudinit$/;
+var parseDisk = (text3) => {
+  const bare = NEW_DISK2.exec(text3) ?? NEW_CLOUDINIT.exec(text3);
+  if (bare !== null) {
+    return {
+      kind: "fresh",
+      options: new Map,
+      size: undefined,
+      source: bare[1] ?? "",
+      volname: ""
+    };
+  }
+  const [first, ...rest] = text3.split(",");
+  const at = (first ?? "").indexOf(":");
+  const source = at === -1 ? first ?? "" : (first ?? "").slice(0, at);
+  const volname = at === -1 ? "" : (first ?? "").slice(at + 1);
+  const options = new Map(rest.map((part) => {
+    const eq = part.indexOf("=");
+    return eq === -1 ? [part, ""] : [part.slice(0, eq), part.slice(eq + 1)];
+  }));
+  const size = options.get("size");
+  options.delete("size");
+  if (volname === "0" && options.has("import-from")) {
+    options.delete("import-from");
+    return { kind: "fresh", options, size: undefined, source, volname: "" };
+  }
+  return { kind: "volume", options, size, source, volname };
+};
+var printOptions = (source, volname, options, size) => [
+  `${source}:${volname}`,
+  ...[...options].map(([k, v]) => `${k}=${v}`),
+  ...size === undefined ? [] : [`size=${size}`]
+].join(",");
+var judgeDisk = (key, declared2, live) => {
+  const want = parseDisk(declared2);
+  const have = parseDisk(live);
+  if (want.source !== have.source) {
+    return {
+      refuse: `${key}: the volume is on ${have.source}, declared on ${want.source}. Moving a disk ` + "between storages is not an update this resource makes -- move it by hand, then declare it."
+    };
+  }
+  if (want.kind === "fresh") {
+    if (want.options.size === 0)
+      return {};
+    if ([...want.options].every(([k, v]) => have.options.get(k) === v))
+      return {};
+    return { put: printOptions(have.source, have.volname, want.options, have.size) };
+  }
+  if (want.volname !== have.volname) {
+    return {
+      refuse: `${key}: declared volume ${want.volname} is not the live ${have.volname}. Writing it ` + "would detach the live volume to unusedN; attach or swap volumes by hand."
+    };
+  }
+  if (want.size !== undefined && have.size !== undefined && want.size !== have.size) {
+    return {
+      refuse: `${key}: declared size ${want.size} differs from the live ${have.size}. This resource does ` + "not resize a disk -- grow it by hand (`qm resize`) and declare the size it then reports."
+    };
+  }
+  if (sameMap(want.options, have.options))
+    return {};
+  return { put: printOptions(have.source, have.volname, want.options, have.size) };
+};
+
+// src/proxmox/qemu-net.ts
+var NIC_MODELS = [
+  "e1000",
+  "e1000e",
+  "i82551",
+  "i82557b",
+  "i82559er",
+  "i82562",
+  "i82801",
+  "ne2k_isa",
+  "ne2k_pci",
+  "pcnet",
+  "rtl8139",
+  "virtio",
+  "vmxnet3"
+];
+var netPairs = (value) => new Map(value.split(",").map((part) => part.trim()).filter((part) => part !== "").map((part) => {
+  const at = part.indexOf("=");
+  return at === -1 ? [part, ""] : [part.slice(0, at), part.slice(at + 1)];
+}));
+var modelKey = (map31) => NIC_MODELS.find((model) => map31.has(model));
+var netMaps2 = (declared2, live) => {
+  const want = netPairs(declared2);
+  const have = netPairs(live);
+  const wantModel = modelKey(want);
+  const haveModel = modelKey(have);
+  if (wantModel !== undefined && (want.get(wantModel) ?? "") === "" && haveModel !== undefined) {
+    want.set(wantModel, have.get(haveModel) ?? "");
+  }
+  return { have, want };
+};
+var sameNet = (declared2, live) => {
+  const { have, want } = netMaps2(declared2, live);
+  return have.size === want.size && [...want].every(([k, v]) => have.get(k) === v);
+};
+var netWrite2 = (declared2, live) => {
+  const want = netPairs(declared2);
+  const wantModel = modelKey(want);
+  const have = netPairs(live);
+  const haveModel = modelKey(have);
+  if (wantModel !== undefined && (want.get(wantModel) ?? "") === "" && haveModel !== undefined) {
+    want.set(wantModel, have.get(haveModel) ?? "");
+  }
+  return [...want].map(([k, v]) => v === "" ? k : `${k}=${v}`).join(",");
+};
+
+// src/proxmox/qemu-judge.ts
+var judge2 = (props, config7) => {
+  const put = {};
+  const refuse3 = [];
+  const drift = new Set;
+  for (const key of declaredKeys2(props)) {
+    const want = wireValue2(declaredValue2(props, key));
+    const have = config7[key];
+    const family = indexedKey2(key)?.[0];
+    if (family === "scsi" || family === "ide") {
+      if (have === undefined) {
+        drift.add(key);
+        put[key] = want;
+      } else {
+        const verdict = judgeDisk(key, want, have);
+        if (verdict.refuse !== undefined) {
+          drift.add(key);
+          refuse3.push(verdict.refuse);
+        } else if (verdict.put !== undefined) {
+          drift.add(key);
+          put[key] = verdict.put;
+        }
+      }
+      continue;
+    }
+    if (family === "net") {
+      if (have === undefined) {
+        drift.add(key);
+        put[key] = want;
+      } else if (!sameNet(want, have)) {
+        drift.add(key);
+        put[key] = netWrite2(want, have);
+      }
+      continue;
+    }
+    if (want !== (have ?? "")) {
+      drift.add(key);
+      put[key] = want;
+    }
+  }
+  return { drift: [...drift].sort(), put, refuse: refuse3 };
+};
+var identityRefusal = (vmid, was) => was === undefined || vmid === was ? undefined : `vmid: ${String(was)} -> ${String(vmid)} is a different VM. Declare it as a new resource; ` + "this one is retained when its declaration goes.";
+
 // src/proxmox/qemu-read.ts
 import * as cluster10 from "@distilled.cloud/proxmox/cluster";
 import * as nodes15 from "@distilled.cloud/proxmox/nodes";
@@ -6040,15 +6256,11 @@ var qemuTask = (props, operation, what, polls) => Effect83.gen(function* () {
 var CREATE_POLLS2 = 180;
 var DELETE_POLLS = 60;
 var attributesOf9 = (live, props) => ({
-  cores: int(live.cores, 1),
-  memory: int(live.memory, 512),
-  name: typeof live.name === "string" ? live.name : "",
+  config: storedConfig2(live),
   node: props.node,
-  onboot: live.onboot === 1 || live.onboot === true,
-  sockets: int(live.sockets, 1),
   vmid: props.vmid
 });
-var matches9 = (attributes2, props) => attributes2.name === (props.name ?? `vm${String(props.vmid)}`) && attributes2.memory === (props.memory ?? 512) && attributes2.cores === (props.cores ?? 1) && attributes2.sockets === (props.sockets ?? 1) && attributes2.onboot === (props.onboot === true);
+var matches9 = (attributes2, props) => declaredKeys2(props).filter(isManagedKey2).every((key) => attributes2.config[key] === wireValue2(declaredValue2(props, key)));
 var spec5 = {
   attributes: attributesOf9,
   collection: (props) => `nodes/${props.node}/qemu`,
@@ -6059,84 +6271,310 @@ var spec5 = {
   },
   matches: matches9,
   path: (props) => `nodes/${props.node}/qemu/${String(props.vmid)}/config`,
-  updateForm: shape9
+  updateForm: updateForm6
 };
 var { guardCreate: guardCreate10, guardUpdate: guardUpdate10 } = specGuards(spec5);
 var readQemu = (props) => readVm(props).pipe(Effect84.map((live) => live === undefined ? undefined : attributesOf9(live, props)));
 var deleteQemu = (props) => qemuTask(props, nodes17.deleteNodeQemu({ node: props.node, vmid: String(props.vmid) }), `destroy VM ${String(props.vmid)}`, DELETE_POLLS).pipe(Effect84.catchTag("QemuConfigNotFound", () => Effect84.void));
+var refuseUnmanaged = (props) => {
+  const refused2 = formRefusals(props);
+  return refused2.length === 0 ? Effect84.void : Effect84.fail(new QemuRefusedError(refused2.join(`
+`)));
+};
+var refuseChange = (change) => change.refuse.length === 0 ? Effect84.void : Effect84.fail(new QemuRefusedError(change.refuse.join(`
+`)));
 var qemuHandlers = {
   list: () => Effect84.succeed([]),
-  read: ({ olds }) => readQemu(olds),
+  read: Effect84.fn(function* ({
+    fqn,
+    instanceId,
+    olds,
+    output
+  }) {
+    const found = yield* readQemu(olds);
+    const settled2 = Effect84.sync(() => found !== undefined && judge2(olds, found.config).drift.length === 0);
+    return yield* ownedRead({ fqn, instanceId, output }, found, settled2);
+  }),
   diff: Effect84.fn(function* ({
     news,
+    olds,
     output
   }) {
     if (!isResolved26(news))
       return;
+    const identity2 = identityRefusal(news.vmid, output?.vmid ?? olds.vmid);
+    if (identity2 !== undefined)
+      return yield* Effect84.fail(new QemuRefusedError(identity2));
+    yield* refuseUnmanaged(news);
     yield* guardCreate10(news, output === undefined);
     yield* guardUpdate10(news);
     if (output === undefined)
       return;
     const live = yield* readQemu(news);
     if (live === undefined) {
+      yield* Effect84.logWarning(`Proxmox.Vm ${news.node}/${String(news.vmid)}: the cluster lists no VM with this vmid -- ` + "a deploy CREATES it again, with new, empty volumes.");
       yield* guardCreate10(news, true);
       return { action: "update" };
     }
-    return { action: spec5.matches(live, news) ? "noop" : "update" };
+    const change = judge2(news, live.config);
+    yield* refuseChange(change);
+    return { action: change.drift.length === 0 ? "noop" : "update" };
   }),
-  reconcile: Effect84.fn(function* ({ news }) {
+  reconcile: Effect84.fn(function* ({
+    fqn,
+    instanceId,
+    news,
+    olds,
+    output
+  }) {
+    const identity2 = identityRefusal(news.vmid, output?.vmid ?? olds?.vmid);
+    if (identity2 !== undefined)
+      return yield* Effect84.fail(new QemuRefusedError(identity2));
+    yield* refuseUnmanaged(news);
     const live = yield* readQemu(news);
     yield* guardCreate10(news, live === undefined);
     yield* guardUpdate10(news);
     if (live === undefined) {
       yield* qemuTask(news, nodes17.createNodeQemu({ ...createForm9(news), node: news.node }), `create VM ${String(news.vmid)}`, CREATE_POLLS2);
     } else {
-      const form = formToSend(spec5.matches, live, news, spec5.updateForm(news));
-      if (form !== undefined) {
-        yield* runPve(news.target, "provision", true, nodes17.putNodeQemuConfig({ ...form, node: news.node, vmid: String(news.vmid) }));
+      yield* refuseTakeover({ fqn, instanceId, output }, `Proxmox.Vm VM ${String(news.vmid)} on ${news.node}`);
+      const change = judge2(news, live.config);
+      yield* refuseChange(change);
+      if (Object.keys(change.put).length > 0) {
+        yield* runPve(news.target, "provision", true, nodes17.putNodeQemuConfig({ ...change.put, node: news.node, vmid: String(news.vmid) }));
       }
     }
     const after = yield* readQemu(news);
     if (after === undefined) {
       return yield* Effect84.fail(new QemuRefusedError(`${spec5.path(news)}: write returned success but the VM is still absent`));
     }
+    const left = judge2(news, after.config);
+    if (left.drift.length > 0) {
+      return yield* Effect84.fail(new QemuRefusedError(`${spec5.path(news)}: after the write, ${left.drift.join(", ")} still differ from the ` + "declaration. PVE may have normalised the value -- declare what it stores."));
+    }
     return after;
   }),
   delete: ({ olds }) => deleteQemu(olds)
 };
 
 // src/proxmox/qemu.ts
-var ProxmoxVm = Resource28("Proxmox.Vm");
+var ProxmoxVm = Resource28("Proxmox.Vm", { defaultRemovalPolicy: "retain" });
 var ProxmoxVmProvider = () => Provider28.effect(ProxmoxVm, Effect85.succeed(ProxmoxVm.Provider.of(qemuHandlers)));
-// src/proxmox/replication-job.ts
+// src/proxmox/storage-download.ts
 import { Resource as Resource29 } from "alchemy";
 import * as Provider29 from "alchemy/Provider";
+import * as Effect88 from "effect/Effect";
+
+// src/proxmox/storage-download-lifecycle.ts
+import { isResolved as isResolved27 } from "alchemy/Diff";
+import * as nodes19 from "@distilled.cloud/proxmox/nodes";
 import * as Effect87 from "effect/Effect";
 
+// src/proxmox/storage-download-identity.ts
+var PINNED = [
+  "checksum",
+  "checksumAlgorithm",
+  "compression",
+  "url",
+  "verifyCertificates"
+];
+var judgeIdentity = (news, olds) => {
+  if (olds === undefined)
+    return { kind: "same" };
+  if (news.filename !== olds.filename || news.storage !== olds.storage) {
+    return { kind: "replace" };
+  }
+  const changed = PINNED.filter((key) => news[key] !== olds[key]);
+  if (changed.length === 0)
+    return { kind: "same" };
+  return {
+    kind: "pin-changed",
+    refuse: `${news.filename}: ${changed.join(", ")} changed but filename did not. filename is the ` + "identity -- PVE does not record what a volume was downloaded from, so this declaration " + "cannot be verified or rewritten in place. Change filename to force a new download."
+  };
+};
+
+// src/proxmox/storage-download-errors.ts
+class StorageDownloadRefusedError extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "StorageDownloadRefusedError";
+  }
+}
+
+// src/proxmox/storage-download-task.ts
+import * as nodes18 from "@distilled.cloud/proxmox/nodes";
+import * as Effect86 from "effect/Effect";
+var storageDownloadTask = (where, operation, what, polls) => Effect86.gen(function* () {
+  const credential = yield* mint(where.target, "provision");
+  const upid = text(yield* runPveWith(where.target, credential, true, operation));
+  if (upid === "") {
+    return yield* Effect86.fail(new StorageDownloadRefusedError(`${what}: PVE returned no task id, so the write cannot be confirmed and is not claimed.`));
+  }
+  let exit = "still running when this provider stopped waiting";
+  for (let attempt = 0;attempt < polls; attempt++) {
+    const status = yield* runPveWith(where.target, credential, false, nodes18.getNodeTaskStatus({ node: where.node, upid })).pipe(Effect86.orElseSucceed(() => {
+      return;
+    }));
+    if (status === undefined || status.status === undefined) {
+      exit = "the task could not be read";
+      break;
+    }
+    if (status.status === "stopped") {
+      exit = text(status.exitstatus, "stopped with no exitstatus");
+      break;
+    }
+    yield* Effect86.sleep("1 second");
+  }
+  if (exit !== "OK") {
+    return yield* Effect86.fail(new StorageDownloadRefusedError(`${what}: task ${upid} ended "${exit}". Read the task log before running the deploy again.`));
+  }
+});
+
+// src/proxmox/storage-download-lifecycle.ts
+var CREATE_POLLS3 = 600;
+var DELETE_POLLS2 = 60;
+var DOWNLOAD_ENDPOINT = "pve:POST /nodes/{node}/storage/{storage}/download-url";
+var downloadForm = (props) => ({
+  checksum: props.checksum,
+  "checksum-algorithm": props.checksumAlgorithm,
+  ...props.compression === undefined ? {} : { compression: props.compression },
+  content: "import",
+  filename: props.filename,
+  node: props.node,
+  storage: props.storage,
+  url: props.url,
+  ...props.verifyCertificates === undefined ? {} : { "verify-certificates": props.verifyCertificates ? "1" : "0" }
+});
+var createRefusals2 = (props) => {
+  const refuse3 = [];
+  if (props.checksum.trim() === "") {
+    refuse3.push(`${props.filename}: checksum is required — an unpinned download is not a declaration.`);
+  }
+  return refuse3.concat(formViolations(DOWNLOAD_ENDPOINT, downloadForm(props), true).map((why) => `${props.filename}: ${why}`));
+};
+var readDownload = (props) => Effect87.gen(function* () {
+  const rows = yield* runPve(props.target, "read", false, nodes19.listNodeStorageContent({
+    content: "import",
+    node: props.node,
+    storage: props.storage
+  }));
+  if (!Array.isArray(rows)) {
+    return yield* Effect87.fail(new StorageDownloadRefusedError(`${props.storage}: the content list did not come back as a list.`));
+  }
+  const found = rows.find((row) => row.volid.endsWith(`/${props.filename}`));
+  if (found === undefined)
+    return;
+  return {
+    filename: props.filename,
+    format: text(found.format, "raw"),
+    node: props.node,
+    size: int(found.size, 0),
+    storage: props.storage,
+    volid: text(found.volid, "")
+  };
+});
+var destroyDownload = (props) => Effect87.gen(function* () {
+  const live = yield* readDownload(props);
+  if (live === undefined)
+    return;
+  yield* storageDownloadTask(props, nodes19.deleteNodeStorageContent({
+    node: props.node,
+    storage: props.storage,
+    volume: live.volid
+  }), `delete ${live.volid}`, DELETE_POLLS2);
+});
+var storageDownloadHandlers = {
+  list: () => Effect87.succeed([]),
+  read: Effect87.fn(function* ({
+    fqn,
+    instanceId,
+    olds,
+    output
+  }) {
+    const found = yield* readDownload(olds);
+    return yield* ownedRead({ fqn, instanceId, output }, found, Effect87.succeed(true));
+  }),
+  diff: Effect87.fn(function* ({
+    news,
+    olds,
+    output
+  }) {
+    if (!isResolved27(news))
+      return;
+    const refused2 = createRefusals2(news);
+    if (refused2.length > 0) {
+      return yield* Effect87.fail(new StorageDownloadRefusedError(refused2.join(`
+`)));
+    }
+    if (output === undefined)
+      return;
+    const identity2 = judgeIdentity(news, olds);
+    if (identity2.kind === "replace")
+      return { action: "replace" };
+    const live = yield* readDownload(news);
+    if (identity2.kind === "pin-changed" && live !== undefined) {
+      return yield* Effect87.fail(new StorageDownloadRefusedError(identity2.refuse));
+    }
+    return { action: live === undefined ? "update" : "noop" };
+  }),
+  reconcile: Effect87.fn(function* ({
+    fqn,
+    instanceId,
+    news,
+    output
+  }) {
+    const refused2 = createRefusals2(news);
+    if (refused2.length > 0) {
+      return yield* Effect87.fail(new StorageDownloadRefusedError(refused2.join(`
+`)));
+    }
+    const live = yield* readDownload(news);
+    if (live === undefined) {
+      yield* storageDownloadTask(news, nodes19.downloadNodesStorageUrl(downloadForm(news)), `download ${news.filename} onto ${news.storage}`, CREATE_POLLS3);
+    } else {
+      yield* refuseTakeover({ fqn, instanceId, output }, `Proxmox.StorageDownload ${news.filename} on ${news.storage}`);
+    }
+    const after = yield* readDownload(news);
+    if (after === undefined) {
+      return yield* Effect87.fail(new StorageDownloadRefusedError(`${news.filename}: the write returned no error but ${news.storage} still has no ` + "matching content — PVE may have normalised the filename; read it back by hand."));
+    }
+    return after;
+  }),
+  delete: ({ olds }) => destroyDownload(olds)
+};
+
+// src/proxmox/storage-download.ts
+var ProxmoxStorageDownload = Resource29("Proxmox.StorageDownload");
+var ProxmoxStorageDownloadProvider = () => Provider29.effect(ProxmoxStorageDownload, Effect88.succeed(ProxmoxStorageDownload.Provider.of(storageDownloadHandlers)));
+// src/proxmox/replication-job.ts
+import { Resource as Resource30 } from "alchemy";
+import * as Provider30 from "alchemy/Provider";
+import * as Effect90 from "effect/Effect";
+
 // src/proxmox/replication-job-lifecycle.ts
-import { isResolved as isResolved27 } from "alchemy/Diff";
+import { isResolved as isResolved28 } from "alchemy/Diff";
 import * as cluster11 from "@distilled.cloud/proxmox/cluster";
 import { ProxmoxParseError as ProxmoxParseError6 } from "@distilled.cloud/proxmox/Errors";
-import * as Effect86 from "effect/Effect";
+import * as Effect89 from "effect/Effect";
 import * as Schema6 from "effect/Schema";
 
 // src/proxmox/replication-job-form.ts
 var DEFAULT_SCHEDULE = "*/15";
 var jobId = (props) => `${String(props.guest)}-${String(props.jobnum)}`;
-var shape10 = (props) => ({
+var shape9 = (props) => ({
   comment: props.comment ?? "",
   disable: props.disable === true ? "1" : "0",
   schedule: props.schedule ?? DEFAULT_SCHEDULE,
   ...props.rate === undefined ? {} : { rate: String(props.rate) }
 });
 var createBody5 = (props) => ({
-  ...shape10(props),
+  ...shape9(props),
   id: jobId(props),
   target: props.targetNode,
   type: "local"
 });
 var updateBody4 = (props) => ({
-  ...shape10(props),
+  ...shape9(props),
   delete: "remove_job"
 });
 
@@ -6178,21 +6616,21 @@ var malformed = () => new ProxmoxParseError6({
   body: undefined,
   cause: "Replication job response does not match the requested vendor identity"
 });
-var readReplicationJob = (props) => runPve(props.target, "read", false, cluster11.getClusterReplication({ id: jobId(props) })).pipe(Effect86.flatMap((live) => Schema6.decodeUnknownEffect(Schema6.toType(cluster11.GetClusterReplicationResponse))({
+var readReplicationJob = (props) => runPve(props.target, "read", false, cluster11.getClusterReplication({ id: jobId(props) })).pipe(Effect89.flatMap((live) => Schema6.decodeUnknownEffect(Schema6.toType(cluster11.GetClusterReplicationResponse))({
   ...live,
   guest: int(live.guest, Number.NaN),
   jobnum: int(live.jobnum, Number.NaN),
   rate: undefined
-}).pipe(Effect86.mapError(malformed), Effect86.as(live))), Effect86.flatMap((live) => live.id === jobId(props) && int(live.guest, Number.NaN) === props.guest && int(live.jobnum, Number.NaN) === props.jobnum ? Effect86.succeed(replicationJobSpec.attributes({ ...live }, props)) : Effect86.fail(malformed())), Effect86.catchTag("ReplicationJobNotFound", () => Effect86.succeed(undefined)));
-var deleteReplicationJob = (props) => runPve(props.target, "provision", true, cluster11.deleteClusterReplication({ id: jobId(props) })).pipe(Effect86.catchTag("ReplicationJobNotFound", () => Effect86.void));
+}).pipe(Effect89.mapError(malformed), Effect89.as(live))), Effect89.flatMap((live) => live.id === jobId(props) && int(live.guest, Number.NaN) === props.guest && int(live.jobnum, Number.NaN) === props.jobnum ? Effect89.succeed(replicationJobSpec.attributes({ ...live }, props)) : Effect89.fail(malformed())), Effect89.catchTag("ReplicationJobNotFound", () => Effect89.succeed(undefined)));
+var deleteReplicationJob = (props) => runPve(props.target, "provision", true, cluster11.deleteClusterReplication({ id: jobId(props) })).pipe(Effect89.catchTag("ReplicationJobNotFound", () => Effect89.void));
 var replicationJobHandlers = {
-  list: () => Effect86.succeed([]),
+  list: () => Effect89.succeed([]),
   read: ({ olds }) => readReplicationJob(olds),
-  diff: Effect86.fn(function* ({
+  diff: Effect89.fn(function* ({
     news,
     output
   }) {
-    if (!isResolved27(news))
+    if (!isResolved28(news))
       return;
     yield* guardCreate11(news, output === undefined);
     yield* guardUpdate11(news);
@@ -6205,36 +6643,36 @@ var replicationJobHandlers = {
     }
     return { action: replicationJobSpec.matches(live, news) ? "noop" : "update" };
   }),
-  reconcile: Effect86.fn(function* ({ news }) {
+  reconcile: Effect89.fn(function* ({ news }) {
     const live = yield* readReplicationJob(news);
     yield* guardCreate11(news, live === undefined);
     yield* guardUpdate11(news);
     if (live === undefined) {
       yield* runPve(news.target, "provision", true, cluster11.createClusterReplication(replicationJobSpec.createForm(news)));
     } else {
-      const form = formToSend(replicationJobSpec.matches, live, news, replicationJobSpec.updateForm(news));
-      if (form !== undefined)
-        yield* runPve(news.target, "provision", true, cluster11.putClusterReplication({ ...form, id: jobId(news) }));
+      const form2 = formToSend(replicationJobSpec.matches, live, news, replicationJobSpec.updateForm(news));
+      if (form2 !== undefined)
+        yield* runPve(news.target, "provision", true, cluster11.putClusterReplication({ ...form2, id: jobId(news) }));
     }
     const after = yield* readReplicationJob(news);
     if (after === undefined)
-      return yield* Effect86.fail(new Error(`${replicationJobSpec.path(news)}: write returned success but the resource is still absent`));
+      return yield* Effect89.fail(new Error(`${replicationJobSpec.path(news)}: write returned success but the resource is still absent`));
     return after;
   }),
   delete: ({ olds }) => deleteReplicationJob(olds)
 };
 
 // src/proxmox/replication-job.ts
-var ProxmoxReplicationJob = Resource29("Proxmox.ReplicationJob");
-var ProxmoxReplicationJobProvider = () => Provider29.effect(ProxmoxReplicationJob, Effect87.succeed(ProxmoxReplicationJob.Provider.of(replicationJobHandlers)));
+var ProxmoxReplicationJob = Resource30("Proxmox.ReplicationJob");
+var ProxmoxReplicationJobProvider = () => Provider30.effect(ProxmoxReplicationJob, Effect90.succeed(ProxmoxReplicationJob.Provider.of(replicationJobHandlers)));
 // src/proxmox/sdn-apply.ts
-import { Resource as Resource30 } from "alchemy";
-import { isResolved as isResolved28 } from "alchemy/Diff";
-import * as Provider30 from "alchemy/Provider";
-import * as Effect89 from "effect/Effect";
+import { Resource as Resource31 } from "alchemy";
+import { isResolved as isResolved29 } from "alchemy/Diff";
+import * as Provider31 from "alchemy/Provider";
+import * as Effect92 from "effect/Effect";
 
 // src/proxmox/sdn-apply-read.ts
-import * as Effect88 from "effect/Effect";
+import * as Effect91 from "effect/Effect";
 var MARKED = [
   "cluster/sdn/zones",
   "cluster/sdn/vnets",
@@ -6243,7 +6681,7 @@ var MARKED = [
   "cluster/sdn/route-maps"
 ];
 var subsystemAbsent = (error) => error instanceof PveError && error.status === 501;
-var markedPending = (target) => Effect88.all(MARKED.map((collection) => pve(target, "read", "GET", `${collection}?pending=1`).pipe(Effect88.map((rows) => (rows ?? []).filter((row) => row.state !== undefined).length), Effect88.catchIf(subsystemAbsent, () => Effect88.succeed(0)))), { concurrency: "unbounded" }).pipe(Effect88.map((counts) => counts.reduce((total, count2) => total + count2, 0)));
+var markedPending = (target) => Effect91.all(MARKED.map((collection) => pve(target, "read", "GET", `${collection}?pending=1`).pipe(Effect91.map((rows) => (rows ?? []).filter((row) => row.state !== undefined).length), Effect91.catchIf(subsystemAbsent, () => Effect91.succeed(0)))), { concurrency: "unbounded" }).pipe(Effect91.map((counts) => counts.reduce((total, count2) => total + count2, 0)));
 var fabricStaged = (staged, running) => {
   if (staged === undefined && running === undefined)
     return 0;
@@ -6251,9 +6689,9 @@ var fabricStaged = (staged, running) => {
     return "inconsistent";
   return staged === running ? 0 : 1;
 };
-var fabricPending = (target) => Effect88.all(["pending", "running"].map((view) => pve(target, "read", "GET", `cluster/sdn/fabrics/all?${view}=1`).pipe(Effect88.map(canonical3), Effect88.catchIf(subsystemAbsent, () => Effect88.succeed(undefined)))), { concurrency: "unbounded" }).pipe(Effect88.flatMap(([staged, running]) => {
+var fabricPending = (target) => Effect91.all(["pending", "running"].map((view) => pve(target, "read", "GET", `cluster/sdn/fabrics/all?${view}=1`).pipe(Effect91.map(canonical3), Effect91.catchIf(subsystemAbsent, () => Effect91.succeed(undefined)))), { concurrency: "unbounded" }).pipe(Effect91.flatMap(([staged, running]) => {
   const verdict = fabricStaged(staged, running);
-  return verdict === "inconsistent" ? Effect88.die(new Error("cluster/sdn/fabrics/all answered 501 for one of ?pending=1 and ?running=1 and not " + "the other. Refusing to read that as a staged fabric change.")) : Effect88.succeed(verdict);
+  return verdict === "inconsistent" ? Effect91.die(new Error("cluster/sdn/fabrics/all answered 501 for one of ?pending=1 and ?running=1 and not " + "the other. Refusing to read that as a staged fabric change.")) : Effect91.succeed(verdict);
 }));
 var canonical3 = (value) => JSON.stringify(sortDeep(value));
 var sortDeep = (value) => {
@@ -6266,23 +6704,23 @@ var sortDeep = (value) => {
   }
   return value;
 };
-var sdnPendingCount = (target) => Effect88.all([markedPending(target), fabricPending(target)], { concurrency: "unbounded" }).pipe(Effect88.map(([marked, fabric]) => marked + fabric));
+var sdnPendingCount = (target) => Effect91.all([markedPending(target), fabricPending(target)], { concurrency: "unbounded" }).pipe(Effect91.map(([marked, fabric]) => marked + fabric));
 
 // src/proxmox/sdn-apply.ts
-var ProxmoxSdnApply = Resource30("Proxmox.SdnApply");
-var read5 = (props) => sdnPendingCount(props.target).pipe(Effect89.map((pending) => ({ pending })));
-var ProxmoxSdnApplyProvider = () => Provider30.effect(ProxmoxSdnApply, Effect89.succeed(ProxmoxSdnApply.Provider.of({
-  list: () => Effect89.succeed([]),
-  read: Effect89.fn(function* ({ olds }) {
+var ProxmoxSdnApply = Resource31("Proxmox.SdnApply");
+var read5 = (props) => sdnPendingCount(props.target).pipe(Effect92.map((pending) => ({ pending })));
+var ProxmoxSdnApplyProvider = () => Provider31.effect(ProxmoxSdnApply, Effect92.succeed(ProxmoxSdnApply.Provider.of({
+  list: () => Effect92.succeed([]),
+  read: Effect92.fn(function* ({ olds }) {
     return yield* read5(olds);
   }),
-  diff: Effect89.fn(function* ({ news }) {
-    if (!isResolved28(news))
+  diff: Effect92.fn(function* ({ news }) {
+    if (!isResolved29(news))
       return;
     const { pending } = yield* read5(news);
     return pending === 0 ? { action: "noop" } : { action: "update" };
   }),
-  reconcile: Effect89.fn(function* ({ news }) {
+  reconcile: Effect92.fn(function* ({ news }) {
     const staged = yield* read5(news);
     if (staged.pending === 0)
       return staged;
@@ -6290,16 +6728,16 @@ var ProxmoxSdnApplyProvider = () => Provider30.effect(ProxmoxSdnApply, Effect89.
     yield* pve(news.target, "provision", "PUT", "cluster/sdn");
     const after = yield* read5(news);
     if (after.pending !== 0) {
-      return yield* Effect89.die(new Error(`PUT /cluster/sdn returned no error but ${String(after.pending)} SDN object(s) ` + "are still staged. The running config does not match the declared one -- check " + "`pvesh get /cluster/sdn/zones --pending 1` for the objects PVE refused."));
+      return yield* Effect92.die(new Error(`PUT /cluster/sdn returned no error but ${String(after.pending)} SDN object(s) ` + "are still staged. The running config does not match the declared one -- check " + "`pvesh get /cluster/sdn/zones --pending 1` for the objects PVE refused."));
     }
     return after;
   }),
-  delete: () => Effect89.void
+  delete: () => Effect92.void
 })));
 // src/proxmox/sdn-subnet.ts
-import { Resource as Resource31 } from "alchemy";
-import * as Provider31 from "alchemy/Provider";
-import * as Effect90 from "effect/Effect";
+import { Resource as Resource32 } from "alchemy";
+import * as Provider32 from "alchemy/Provider";
+import * as Effect93 from "effect/Effect";
 
 // src/proxmox/sdn-subnet-form.ts
 var subnetId = (props) => `${props.zone}-${props.cidr.replace("/", "-")}`;
@@ -6323,13 +6761,13 @@ var createForm10 = (props) => ({
   subnet: props.cidr,
   type: "subnet"
 });
-var updateForm6 = (props) => {
+var updateForm7 = (props) => {
   const clear = Object.entries(optional3(props)).filter(([, value]) => value === undefined).map(([key]) => key);
   return withClears(body5(props), clear);
 };
 
 // src/proxmox/sdn-subnet.ts
-var ProxmoxSdnSubnet = Resource31("Proxmox.SdnSubnet");
+var ProxmoxSdnSubnet = Resource32("Proxmox.SdnSubnet");
 var handlers13 = pveHandlers({
   attributes: (live, props) => {
     const liveVnet = text(live["vnet"]);
@@ -6357,16 +6795,16 @@ var handlers13 = pveHandlers({
   },
   matches: (attributes2, props) => attributes2.gateway === (props.gateway ?? "") && attributes2.snat === (props.snat === true) && attributes2.dnszoneprefix === (props.dnszoneprefix ?? "") && attributes2.dhcpDnsServer === (props.dhcpDnsServer ?? "") && attributes2.dhcpRange === declaredRanges(props.dhcpRange),
   path: (props) => `cluster/sdn/vnets/${props.vnet}/subnets/${subnetId(props)}`,
-  updateForm: updateForm6
+  updateForm: updateForm7
 });
-var ProxmoxSdnSubnetProvider = () => Provider31.effect(ProxmoxSdnSubnet, Effect90.succeed(ProxmoxSdnSubnet.Provider.of(handlers13)));
+var ProxmoxSdnSubnetProvider = () => Provider32.effect(ProxmoxSdnSubnet, Effect93.succeed(ProxmoxSdnSubnet.Provider.of(handlers13)));
 // src/proxmox/sdn-vnet.ts
-import { Resource as Resource32 } from "alchemy";
-import * as Provider32 from "alchemy/Provider";
-import * as Effect91 from "effect/Effect";
-var ProxmoxSdnVnet = Resource32("Proxmox.SdnVnet");
+import { Resource as Resource33 } from "alchemy";
+import * as Provider33 from "alchemy/Provider";
+import * as Effect94 from "effect/Effect";
+var ProxmoxSdnVnet = Resource33("Proxmox.SdnVnet");
 var tagOf = (value) => typeof value === "number" ? value : undefined;
-var shape11 = (props) => {
+var shape10 = (props) => {
   const alias = props.alias ?? "";
   return {
     "isolate-ports": props.isolatePorts === true ? "1" : "0",
@@ -6376,12 +6814,12 @@ var shape11 = (props) => {
     ...props.tag === undefined ? {} : { tag: String(props.tag) }
   };
 };
-var updateForm7 = (props) => {
+var updateForm8 = (props) => {
   const unset2 = [
     ...(props.alias ?? "") === "" ? ["alias"] : [],
     ...props.tag === undefined ? ["tag"] : []
   ];
-  return withClears(shape11(props), unset2);
+  return withClears(shape10(props), unset2);
 };
 var handlers14 = pveHandlers({
   readRole: "provision",
@@ -6395,18 +6833,18 @@ var handlers14 = pveHandlers({
     zone: typeof live["zone"] === "string" ? live["zone"] : ""
   }),
   collection: () => "cluster/sdn/vnets",
-  createForm: (props) => ({ ...shape11(props), vnet: props.vnet }),
+  createForm: (props) => ({ ...shape10(props), vnet: props.vnet }),
   endpoint: { create: "pve:POST /cluster/sdn/vnets", update: "pve:PUT /cluster/sdn/vnets/{vnet}" },
   matches: (attributes2, props) => attributes2.zone === props.zone && attributes2.alias === (props.alias ?? "") && attributes2.tag === props.tag && attributes2.vlanaware === (props.vlanaware === true) && attributes2.isolatePorts === (props.isolatePorts === true),
   path: (props) => `cluster/sdn/vnets/${props.vnet}`,
-  updateForm: updateForm7
+  updateForm: updateForm8
 });
-var ProxmoxSdnVnetProvider = () => Provider32.effect(ProxmoxSdnVnet, Effect91.succeed(ProxmoxSdnVnet.Provider.of(handlers14)));
+var ProxmoxSdnVnetProvider = () => Provider33.effect(ProxmoxSdnVnet, Effect94.succeed(ProxmoxSdnVnet.Provider.of(handlers14)));
 // src/proxmox/sdn-zone.ts
-import { Resource as Resource33 } from "alchemy";
-import * as Provider33 from "alchemy/Provider";
-import * as Effect92 from "effect/Effect";
-var ProxmoxSdnZone = Resource33("Proxmox.SdnZone");
+import { Resource as Resource34 } from "alchemy";
+import * as Provider34 from "alchemy/Provider";
+import * as Effect95 from "effect/Effect";
+var ProxmoxSdnZone = Resource34("Proxmox.SdnZone");
 var sameIpam = (live, declared2) => (live === "" ? "pve" : live) === (declared2 === undefined || declared2 === "" ? "pve" : declared2);
 var body6 = (props) => ({
   ...props.bridge === undefined ? {} : { bridge: props.bridge },
@@ -6458,20 +6896,20 @@ var handlers15 = pveHandlers({
     return withClears(fields2, clear);
   }
 });
-var ProxmoxSdnZoneProvider = () => Provider33.effect(ProxmoxSdnZone, Effect92.succeed(ProxmoxSdnZone.Provider.of(handlers15)));
+var ProxmoxSdnZoneProvider = () => Provider34.effect(ProxmoxSdnZone, Effect95.succeed(ProxmoxSdnZone.Provider.of(handlers15)));
 // src/proxmox/storage.ts
-import { Resource as Resource34 } from "alchemy";
-import { isResolved as isResolved29 } from "alchemy/Diff";
-import * as Provider34 from "alchemy/Provider";
+import { Resource as Resource35 } from "alchemy";
+import { isResolved as isResolved30 } from "alchemy/Diff";
+import * as Provider35 from "alchemy/Provider";
 import * as storage2 from "@distilled.cloud/proxmox/storage";
-import * as Effect94 from "effect/Effect";
+import * as Effect97 from "effect/Effect";
 
 // src/proxmox/storage-form.ts
 var STORAGE_CREATE = "pve:POST /storage";
 var STORAGE_UPDATE = "pve:PUT /storage/{storage}";
 var field6 = (name, value) => value === undefined ? {} : { [name]: value };
 var locatorForm = (locator) => ({ ...locator });
-var underscored = (form) => Object.fromEntries(Object.entries(form).map(([key, value]) => [key.replaceAll("-", "_"), value]));
+var underscored = (form2) => Object.fromEntries(Object.entries(form2).map(([key, value]) => [key.replaceAll("-", "_"), value]));
 var mutable2 = (props) => ({
   ...field6("comment", props.comment),
   ...field6("content", props.content),
@@ -6487,16 +6925,16 @@ var createForm11 = (props) => ({
   storage: props.storage,
   type: props.type
 });
-var updateForm8 = (props) => ({
+var updateForm9 = (props) => ({
   ...mutable2(props),
   storage: props.storage
 });
 var toDistilledCreate4 = (props) => underscored(createForm11(props));
-var toDistilledUpdate3 = (props) => underscored(updateForm8(props));
+var toDistilledUpdate3 = (props) => underscored(updateForm9(props));
 
 // src/proxmox/storage-wire.ts
 import * as storage from "@distilled.cloud/proxmox/storage";
-import * as Effect93 from "effect/Effect";
+import * as Effect96 from "effect/Effect";
 var str2 = (value, fallback = "") => typeof value === "string" ? value : fallback;
 var tokens = (value) => value.split(",").map((part) => part.trim()).filter((part) => part !== "").sort().join(",");
 var sameList2 = (declared2, live) => declared2 === undefined || tokens(declared2) === tokens(live);
@@ -6515,25 +6953,25 @@ var attributesOf10 = (live, props) => {
     type: str2(data["type"], props.type)
   };
 };
-var readStorageOrFail = (props) => readOrUnreadable(runPve(props.target, "provision", false, storage.getStorage({ storage: props.storage }))).pipe(Effect93.map((live) => live === UNREADABLE ? UNREADABLE : attributesOf10(live, props)));
-var readStorage = (props) => readStorageOrFail(props).pipe(Effect93.catchTag("StorageNotFound", () => Effect93.succeed(undefined)));
+var readStorageOrFail = (props) => readOrUnreadable(runPve(props.target, "provision", false, storage.getStorage({ storage: props.storage }))).pipe(Effect96.map((live) => live === UNREADABLE ? UNREADABLE : attributesOf10(live, props)));
+var readStorage = (props) => readStorageOrFail(props).pipe(Effect96.catchTag("StorageNotFound", () => Effect96.succeed(undefined)));
 var dropUnreadable7 = (live) => live === UNREADABLE ? undefined : live;
 var matches10 = (attributes2, props) => sameList2(props.content, attributes2.content) && sameList2(props.nodes, attributes2.nodes) && sameList2(props["prune-backups"], attributes2["prune-backups"]) && same7(props.disable, attributes2.disable) && same7(props.shared, attributes2.shared) && same7(props.preallocation, attributes2.preallocation) && same7(props.comment, attributes2.comment);
 
 // src/proxmox/storage.ts
-var ProxmoxStorage = Resource34("Proxmox.Storage", {
+var ProxmoxStorage = Resource35("Proxmox.Storage", {
   defaultRemovalPolicy: "retain"
 });
-var ProxmoxStorageProvider = () => Provider34.effect(ProxmoxStorage, Effect94.succeed(ProxmoxStorage.Provider.of({
-  list: () => Effect94.succeed([]),
-  read: Effect94.fn(function* ({ olds, output }) {
+var ProxmoxStorageProvider = () => Provider35.effect(ProxmoxStorage, Effect97.succeed(ProxmoxStorage.Provider.of({
+  list: () => Effect97.succeed([]),
+  read: Effect97.fn(function* ({ olds, output }) {
     return dropUnreadable7(yield* output === undefined ? readStorage(olds) : readStorageOrFail(olds));
   }),
-  diff: Effect94.fn(function* ({ news, output }) {
-    if (!isResolved29(news))
+  diff: Effect97.fn(function* ({ news, output }) {
+    if (!isResolved30(news))
       return;
     yield* guardWrite2(STORAGE_CREATE, createForm11(news), output === undefined);
-    yield* guardWrite2(STORAGE_UPDATE, updateForm8(news), false);
+    yield* guardWrite2(STORAGE_UPDATE, updateForm9(news), false);
     if (output === undefined)
       return;
     const live = yield* readStorageOrFail(news);
@@ -6547,10 +6985,10 @@ var ProxmoxStorageProvider = () => Provider34.effect(ProxmoxStorage, Effect94.su
     }
     return matches10(live, news) ? { action: "noop" } : { action: "update" };
   }),
-  reconcile: Effect94.fn(function* ({ news }) {
+  reconcile: Effect97.fn(function* ({ news }) {
     const before = dropUnreadable7(yield* readStorage(news));
     yield* guardWrite2(STORAGE_CREATE, createForm11(news), before === undefined);
-    yield* guardWrite2(STORAGE_UPDATE, updateForm8(news), false);
+    yield* guardWrite2(STORAGE_UPDATE, updateForm9(news), false);
     if (before === undefined) {
       yield* runPve(news.target, "provision", true, storage2.createStorage(toDistilledCreate4(news)));
     } else if (!matches10(before, news)) {
@@ -6558,23 +6996,23 @@ var ProxmoxStorageProvider = () => Provider34.effect(ProxmoxStorage, Effect94.su
     }
     const after = dropUnreadable7(yield* readStorage(news));
     if (after === undefined) {
-      return yield* Effect94.die(new Error(`storage/${news.storage}: the write returned no error but the storage is still ` + 'absent. PVE wraps every answer in {"data":...} and can report success on a ' + "call that did nothing -- read back rather than trusting the status code."));
+      return yield* Effect97.die(new Error(`storage/${news.storage}: the write returned no error but the storage is still ` + 'absent. PVE wraps every answer in {"data":...} and can report success on a ' + "call that did nothing -- read back rather than trusting the status code."));
     }
     return after;
   }),
-  delete: Effect94.fn(function* ({ olds }) {
+  delete: Effect97.fn(function* ({ olds }) {
     yield* runPve(olds.target, "provision", true, storage2.deleteStorage({ storage: olds.storage }));
   })
 })));
 // src/proxmox/zfs-pool.ts
-import { Resource as Resource35 } from "alchemy";
-import { isResolved as isResolved30 } from "alchemy/Diff";
-import * as Provider35 from "alchemy/Provider";
-import * as Effect97 from "effect/Effect";
+import { Resource as Resource36 } from "alchemy";
+import { isResolved as isResolved31 } from "alchemy/Diff";
+import * as Provider36 from "alchemy/Provider";
+import * as Effect100 from "effect/Effect";
 
 // src/proxmox/zfs-pool-wire.ts
-import * as nodes18 from "@distilled.cloud/proxmox/nodes";
-import * as Effect95 from "effect/Effect";
+import * as nodes20 from "@distilled.cloud/proxmox/nodes";
+import * as Effect98 from "effect/Effect";
 var leafDevices = (children) => Array.isArray(children) ? children.flatMap((entry) => {
   const vdev = entry;
   const nested = leafDevices(vdev.children);
@@ -6587,19 +7025,19 @@ var attributesOf11 = (live, props) => ({
   node: props.node,
   state: text(live.state, "unknown")
 });
-var readPoolOrFail = (props) => readOrUnreadable(runPve(props.target, "read", false, nodes18.getNodeDiskZfs({ name: props.name, node: props.node }))).pipe(Effect95.map((live) => {
+var readPoolOrFail = (props) => readOrUnreadable(runPve(props.target, "read", false, nodes20.getNodeDiskZfs({ name: props.name, node: props.node }))).pipe(Effect98.map((live) => {
   if (live === UNREADABLE)
     return UNREADABLE;
   return text(live.name) === "" ? undefined : attributesOf11(live, props);
 }));
-var readPool2 = (props) => readPoolOrFail(props).pipe(Effect95.orElseSucceed(() => {
+var readPool2 = (props) => readPoolOrFail(props).pipe(Effect98.orElseSucceed(() => {
   return;
 }));
 var dropUnreadable8 = (live) => live === UNREADABLE ? undefined : live;
 
 // src/proxmox/zfs-pool-form.ts
-import * as Effect96 from "effect/Effect";
-import * as nodes19 from "@distilled.cloud/proxmox/nodes";
+import * as Effect99 from "effect/Effect";
+import * as nodes21 from "@distilled.cloud/proxmox/nodes";
 var ZFS_POOL_CREATE = "pve:POST /nodes/{node}/disks/zfs";
 var zfsPoolCreateEndpoint = (props) => props.devices === undefined || props.raidlevel === undefined ? undefined : ZFS_POOL_CREATE;
 var createForm12 = (props) => ({
@@ -6611,49 +7049,49 @@ var createForm12 = (props) => ({
   ...props["draid-config"] === undefined ? {} : { "draid-config": props["draid-config"] }
 });
 var toDistilledCreate5 = (props) => {
-  const form = createForm12(props);
+  const form2 = createForm12(props);
   return {
-    ...form,
-    draid_config: form["draid-config"],
+    ...form2,
+    draid_config: form2["draid-config"],
     node: props.node
   };
 };
 var SETTLE_ATTEMPTS = 30;
-var createPool2 = (props, read6) => Effect96.gen(function* () {
+var createPool2 = (props, read6) => Effect99.gen(function* () {
   const existing = yield* read6(props);
   if (existing !== undefined)
     return existing;
   if (props.devices === undefined || props.raidlevel === undefined) {
-    return yield* Effect96.die(new Error(`${props.node}/${props.name}: this is an adopt-only declaration (no \`devices\` or ` + "`raidlevel`) and the pool is not there to adopt. An adopt-only Proxmox.ZfsPool never " + "creates -- declare both fields for a pool this resource should build, or point this " + "declaration at a pool that already exists on this node."));
+    return yield* Effect99.die(new Error(`${props.node}/${props.name}: this is an adopt-only declaration (no \`devices\` or ` + "`raidlevel`) and the pool is not there to adopt. An adopt-only Proxmox.ZfsPool never " + "creates -- declare both fields for a pool this resource should build, or point this " + "declaration at a pool that already exists on this node."));
   }
   yield* guardForm(zfsPoolCreateEndpoint(props), asForm2(createForm12(props)), true);
-  const upid = yield* runPve(props.target, "provision", true, nodes19.createNodeDiskZfs(toDistilledCreate5(props)));
-  const settle3 = (attempts) => Effect96.gen(function* () {
+  const upid = yield* runPve(props.target, "provision", true, nodes21.createNodeDiskZfs(toDistilledCreate5(props)));
+  const settle3 = (attempts) => Effect99.gen(function* () {
     const live = yield* read6(props);
     if (live !== undefined || attempts <= 0)
       return live;
-    yield* Effect96.sleep("2 seconds");
+    yield* Effect99.sleep("2 seconds");
     return yield* settle3(attempts - 1);
   });
   const after = yield* settle3(SETTLE_ATTEMPTS);
   if (after === undefined) {
-    return yield* Effect96.die(new Error(`nodes/${props.node}/disks/zfs/${props.name}: POST returned ${text(upid, "(no UPID)")} ` + "but the pool has not appeared. That POST only forks a `zfscreate` worker, so the task " + `holds the real error -- read it with \`pvesh get /nodes/${props.node}/tasks/<upid>/log\`. ` + "NOTHING WAS RETRIED AND NOTHING WAS CLEANED UP: if the worker reached `zpool create`, " + "the declared devices have already been written to. DO NOT RE-RUN THIS DEPLOY BEFORE " + 'READING THAT LOG: `read` cannot tell "the worker is still running" from "the pool is ' + 'genuinely gone", so a re-run this soon can POST a SECOND `zpool create` at the SAME ' + "devices while the first one is still mid-write -- confirm the task finished (one way " + "or the other) before trying again."));
+    return yield* Effect99.die(new Error(`nodes/${props.node}/disks/zfs/${props.name}: POST returned ${text(upid, "(no UPID)")} ` + "but the pool has not appeared. That POST only forks a `zfscreate` worker, so the task " + `holds the real error -- read it with \`pvesh get /nodes/${props.node}/tasks/<upid>/log\`. ` + "NOTHING WAS RETRIED AND NOTHING WAS CLEANED UP: if the worker reached `zpool create`, " + "the declared devices have already been written to. DO NOT RE-RUN THIS DEPLOY BEFORE " + 'READING THAT LOG: `read` cannot tell "the worker is still running" from "the pool is ' + 'genuinely gone", so a re-run this soon can POST a SECOND `zpool create` at the SAME ' + "devices while the first one is still mid-write -- confirm the task finished (one way " + "or the other) before trying again."));
   }
   return after;
 });
-var destroyPool = (props) => runPve(props.target, "provision", true, nodes19.deleteNodeDiskZfs({ name: props.name, node: props.node }));
+var destroyPool = (props) => runPve(props.target, "provision", true, nodes21.deleteNodeDiskZfs({ name: props.name, node: props.node }));
 
 // src/proxmox/zfs-pool.ts
-var ProxmoxZfsPool = Resource35("Proxmox.ZfsPool", {
+var ProxmoxZfsPool = Resource36("Proxmox.ZfsPool", {
   defaultRemovalPolicy: "retain"
 });
-var ProxmoxZfsPoolProvider = () => Provider35.effect(ProxmoxZfsPool, Effect97.succeed(ProxmoxZfsPool.Provider.of({
-  list: () => Effect97.succeed([]),
-  read: Effect97.fn(function* ({ olds, output }) {
+var ProxmoxZfsPoolProvider = () => Provider36.effect(ProxmoxZfsPool, Effect100.succeed(ProxmoxZfsPool.Provider.of({
+  list: () => Effect100.succeed([]),
+  read: Effect100.fn(function* ({ olds, output }) {
     return dropUnreadable8(yield* output === undefined ? readPool2(olds) : readPoolOrFail(olds));
   }),
-  diff: Effect97.fn(function* ({ news, output }) {
-    if (!isResolved30(news))
+  diff: Effect100.fn(function* ({ news, output }) {
+    if (!isResolved31(news))
       return;
     yield* guardForm(zfsPoolCreateEndpoint(news), asForm2(createForm12(news)), output === undefined);
     if (output === undefined)
@@ -6669,10 +7107,10 @@ var ProxmoxZfsPoolProvider = () => Provider35.effect(ProxmoxZfsPool, Effect97.su
     }
     return { action: "noop" };
   }),
-  reconcile: Effect97.fn(function* ({ news }) {
-    return yield* createPool2(news, (props) => readPool2(props).pipe(Effect97.map(dropUnreadable8)));
+  reconcile: Effect100.fn(function* ({ news }) {
+    return yield* createPool2(news, (props) => readPool2(props).pipe(Effect100.map(dropUnreadable8)));
   }),
-  delete: Effect97.fn(function* ({ olds }) {
+  delete: Effect100.fn(function* ({ olds }) {
     yield* destroyPool(olds);
   })
 })));
@@ -6737,9 +7175,12 @@ export {
   ProxmoxSdnZone,
   ProxmoxSdnZoneProvider,
   ProxmoxStorage,
+  ProxmoxStorageDownload,
+  ProxmoxStorageDownloadProvider,
   ProxmoxStorageProvider,
   ProxmoxUser,
   ProxmoxUserProvider,
+  ProxmoxVm,
   ProxmoxVmProvider,
   ProxmoxZfsPool,
   ProxmoxZfsPoolProvider,
@@ -6752,5 +7193,5 @@ export {
   violations
 };
 
-//# debugId=B5C51EB76E4323A364756E2164756E21
+//# debugId=CF5040306473FBD564756E2164756E21
 //# sourceMappingURL=index.js.map