@homeflare/alchemy 0.45.0 → 0.46.0

package/dist/proxmox/index.js

@@ -674,6 +674,11 @@ var PVE_NODES_QEMU_CONSTRAINTS = {
     vmgenid: { default: "1 (autogenerated)", pattern: "^(?:[a-fA-F0-9]{8}(?:-[a-fA-F0-9]{4}){3}-[a-fA-F0-9]{12}|[01])\\n?$", patternSource: "(?:[a-fA-F0-9]{8}(?:-[a-fA-F0-9]{4}){3}-[a-fA-F0-9]{12}|[01])", type: "string" },
     vmstatestorage: { format: "pve-storage-id", type: "string" },
     watchdog: { format: "pve-qm-watchdog", type: "string" }
+  },
+  "pve:PUT /nodes/{node}/qemu/{vmid}/resize": {
+    digest: { maxLength: 40, type: "string" },
+    disk: { enum: ["ide0", "ide1", "ide2", "ide3", "scsi0", "scsi1", "scsi2", "scsi3", "scsi4", "scsi5", "scsi6", "scsi7", "scsi8", "scsi9", "scsi10", "scsi11", "scsi12", "scsi13", "scsi14", "scsi15", "scsi16", "scsi17", "scsi18", "scsi19", "scsi20", "scsi21", "scsi22", "scsi23", "scsi24", "scsi25", "scsi26", "scsi27", "scsi28", "scsi29", "scsi30", "virtio0", "virtio1", "virtio2", "virtio3", "virtio4", "virtio5", "virtio6", "virtio7", "virtio8", "virtio9", "virtio10", "virtio11", "virtio12", "virtio13", "virtio14", "virtio15", "sata0", "sata1", "sata2", "sata3", "sata4", "sata5", "efidisk0", "tpmstate0"], required: true, type: "string" },
+    size: { pattern: "^\\+?\\d+(\\.\\d+)?[KMGT]?\\n?$", patternSource: "\\+?\\d+(\\.\\d+)?[KMGT]?", required: true, type: "string" }
   }
 };
 
@@ -6047,15 +6052,15 @@ var declareProvisionBaseline = (id, target, names2 = {}, options = {}) => Effect
 // src/proxmox/qemu.ts
 import { Resource as Resource28 } from "alchemy";
 import * as Provider28 from "alchemy/Provider";
-import * as Effect86 from "effect/Effect";
+import * as Effect88 from "effect/Effect";
 
 // src/proxmox/qemu-lifecycle.ts
 import { isResolved as isResolved27 } from "alchemy/Diff";
-import * as nodes17 from "@distilled.cloud/proxmox/nodes";
-import * as Effect85 from "effect/Effect";
+import * as nodes18 from "@distilled.cloud/proxmox/nodes";
+import * as Effect87 from "effect/Effect";
 
 // src/proxmox/qemu-props.ts
-var NOT_CONFIG2 = new Set(["node", "target", "vmid"]);
+var NOT_CONFIG2 = new Set(["node", "target", "vmid", "diskSizesGiB"]);
 var INDEXED2 = {
   ide: 4,
   ipconfig: 32,
@@ -6078,8 +6083,10 @@ var SCALAR_KEYS = new Set([
   "cpu",
   "memory",
   "name",
+  "nameserver",
   "onboot",
   "scsihw",
+  "searchdomain",
   "sockets"
 ]);
 var isManagedKey2 = (key) => SCALAR_KEYS.has(key) || indexedKey2(key) !== undefined;
@@ -6098,8 +6105,28 @@ var storedConfig2 = (live) => {
   return out;
 };
 
+// src/proxmox/qemu-dns.ts
+import { isIP } from "node:net";
+var addressList2 = (value) => {
+  const values = value.includes("\x00") ? value.split("\x00") : value.replace(/[,;]/g, " ").trimStart().split(/\s+/);
+  while (values.at(-1) === "")
+    values.pop();
+  const label = "[a-zA-Z0-9](?:[a-zA-Z0-9-]*[a-zA-Z0-9])?";
+  const dns = new RegExp(`^(?:${label}\\.)*${label}(?![\\s\\S])`);
+  return values.every((value2) => isIP(value2) !== 0 && !value2.includes("%") || dns.test(value2));
+};
+var dnsRefusals = (nameserver) => {
+  if (nameserver === undefined)
+    return [];
+  const rule = constraintsFor("pve:PUT /nodes/{node}/qemu/{vmid}/config")["nameserver"];
+  return rule?.format === "address-list" && typeof nameserver === "string" && addressList2(nameserver) ? [] : ["nameserver: must satisfy the vendor address-list format"];
+};
+
 // src/proxmox/qemu-form.ts
-var formRefusals = (props) => declaredKeys2(props).filter((key) => !isManagedKey2(key)).map((key) => `${key}: not a config key this resource manages (vmid ${String(props.vmid)}).`);
+var formRefusals = (props) => [
+  ...declaredKeys2(props).filter((key) => !isManagedKey2(key)).map((key) => `${key}: not a config key this resource manages (vmid ${String(props.vmid)}).`),
+  ...dnsRefusals(props.nameserver)
+];
 var form = (props) => {
   const out = {};
   for (const key of declaredKeys2(props)) {
@@ -6117,6 +6144,7 @@ var updateForm7 = form;
 
 // src/proxmox/qemu-errors.ts
 class QemuRefusedError extends Error {
+  _tag = "QemuRefusedError";
   constructor(message) {
     super(message);
     this.name = "QemuRefusedError";
@@ -6180,7 +6208,7 @@ var judgeDisk = (key, declared2, live) => {
   }
   if (want.size !== undefined && have.size !== undefined && want.size !== have.size) {
     return {
-      refuse: `${key}: declared size ${want.size} differs from the live ${have.size}. This resource does ` + "not resize a disk -- grow it by hand (`qm resize`) and declare the size it then reports."
+      refuse: `${key}: declared size ${want.size} differs from the live ${have.size}. This resource does ` + "not resize a disk through config -- omit size= and declare a diskSizesGiB target instead."
     };
   }
   if (sameMap(want.options, have.options))
@@ -6234,11 +6262,72 @@ var netWrite2 = (declared2, live) => {
   return [...want].map(([k, v]) => v === "" ? k : `${k}=${v}`).join(",");
 };
 
+// src/proxmox/qemu-size.ts
+import * as Data4 from "effect/Data";
+import * as Effect83 from "effect/Effect";
+class QemuDiskResizeRefused extends Data4.TaggedError("QemuDiskResizeRefused") {
+}
+var diskBytes = (config7) => {
+  const size = config7 === undefined ? undefined : parseDisk(config7).size;
+  const match = size === undefined ? null : /^(\d+(?:\.\d+)?)([KMGT])?$/.exec(size);
+  if (match === null)
+    return;
+  const scale = { K: 1024, M: 1024 ** 2, G: 1024 ** 3, T: 1024 ** 4 };
+  const bytes2 = Number(match[1]) * (scale[match[2]] ?? 1);
+  return Number.isFinite(bytes2) && bytes2 > 0 ? bytes2 : undefined;
+};
+var validateDiskSizes = (props, olds) => Effect83.gen(function* () {
+  const sizes = props.diskSizesGiB;
+  if (sizes === undefined)
+    return;
+  if (sizes === null || typeof sizes !== "object" || Array.isArray(sizes)) {
+    return yield* Effect83.fail(new QemuDiskResizeRefused({
+      disk: "diskSizesGiB",
+      message: "diskSizesGiB must be a map of disk slots to GiB targets"
+    }));
+  }
+  for (const [disk, size] of Object.entries(sizes)) {
+    if (size === undefined)
+      continue;
+    const family = indexedKey2(disk)?.[0];
+    const value = declaredValue2(props, disk);
+    const previous = olds?.diskSizesGiB?.[disk];
+    let reason;
+    if (family !== "scsi" && family !== "ide" || typeof value !== "string") {
+      reason = "declare a supported scsi/ide disk slot before assigning a resize target";
+    } else if (!Number.isSafeInteger(size) || size <= 0 || !Number.isSafeInteger(size * 1024 ** 3)) {
+      reason = "the target must be a positive, safely representable integer GiB size";
+    } else if (value.split(",")[0]?.endsWith(":cloudinit") === true || parseDisk(value).options.get("media") === "cdrom") {
+      reason = "cloud-init and CD-ROM drives cannot be resized";
+    } else if (previous !== undefined && size < previous) {
+      reason = `refusing shrink from declared ${previous} GiB to ${size} GiB`;
+    }
+    if (reason !== undefined) {
+      return yield* Effect83.fail(new QemuDiskResizeRefused({ disk, message: `${disk}: ${reason}` }));
+    }
+  }
+});
+var diskSizeDrift = (props, config7) => Object.entries(props.diskSizesGiB ?? {}).filter(([disk, size]) => size !== undefined && (diskBytes(config7[disk]) ?? 0) < size * 1024 ** 3).map(([disk]) => `diskSizesGiB.${disk}`);
+var checkLiveDiskSizes = (props, config7, allowMissing = false) => Effect83.gen(function* () {
+  for (const [disk, size] of Object.entries(props.diskSizesGiB ?? {})) {
+    if (size === undefined)
+      continue;
+    if (allowMissing && config7[disk] === undefined)
+      continue;
+    if (diskBytes(config7[disk]) === undefined || parseDisk(config7[disk] ?? "").options.get("media") === "cdrom") {
+      return yield* Effect83.fail(new QemuDiskResizeRefused({
+        disk,
+        message: `${disk}: the live disk has no readable positive size or is a CD-ROM`
+      }));
+    }
+  }
+});
+
 // src/proxmox/qemu-judge.ts
 var judge2 = (props, config7) => {
   const put = {};
   const refuse3 = [];
-  const drift = new Set;
+  const drift = new Set(diskSizeDrift(props, config7));
   for (const key of declaredKeys2(props)) {
     const want = wireValue2(declaredValue2(props, key));
     const have = config7[key];
@@ -6281,42 +6370,42 @@ var identityRefusal = (vmid, was) => was === undefined || vmid === was ? undefin
 // src/proxmox/qemu-read.ts
 import * as cluster11 from "@distilled.cloud/proxmox/cluster";
 import * as nodes15 from "@distilled.cloud/proxmox/nodes";
-import * as Effect83 from "effect/Effect";
+import * as Effect84 from "effect/Effect";
 var guestTypes = ["lxc", "qemu"];
-var readVm = (props) => Effect83.gen(function* () {
+var readVm = (props) => Effect84.gen(function* () {
   const credential = yield* leased(props.target, "read");
-  const answer = yield* runPveWith(props.target, credential, false, nodes15.getNodeQemuConfig({ node: props.node, vmid: String(props.vmid) })).pipe(Effect83.map((data) => ({ data, error: undefined })), Effect83.catchTag("QemuConfigNotFound", (error) => Effect83.succeed({ data: undefined, error })));
+  const answer = yield* runPveWith(props.target, credential, false, nodes15.getNodeQemuConfig({ node: props.node, vmid: String(props.vmid) })).pipe(Effect84.map((data) => ({ data, error: undefined })), Effect84.catchTag("QemuConfigNotFound", (error) => Effect84.succeed({ data: undefined, error })));
   if (answer.error === undefined) {
     const live = answer.data;
     if (typeof live.digest !== "string" || live.digest === "") {
-      return yield* Effect83.fail(new QemuRefusedError(`VM ${String(props.vmid)}: config read did not return a digest-bearing config.`));
+      return yield* Effect84.fail(new QemuRefusedError(`VM ${String(props.vmid)}: config read did not return a digest-bearing config.`));
     }
     return live;
   }
   const rows = yield* runPveWith(props.target, credential, false, cluster11.listClusterResources({ type: "vm" }));
   if (!Array.isArray(rows) || rows.some((row) => !Number.isSafeInteger(Number(row?.vmid)) || Number(row?.vmid) <= 0 || typeof row?.node !== "string" || row.node === "" || !guestTypes.includes(row.type))) {
-    return yield* Effect83.fail(new QemuRefusedError("The cluster guest index did not identify its rows."));
+    return yield* Effect84.fail(new QemuRefusedError("The cluster guest index did not identify its rows."));
   }
   const found = rows.find((row) => Number(row.vmid) === props.vmid);
   if (found === undefined)
     return;
   if (found.node === props.node && found.type === "qemu")
-    return yield* Effect83.fail(answer.error);
-  return yield* Effect83.fail(new QemuRefusedError(`vmid ${String(props.vmid)} is a ${text(found.type, "guest")} on ` + `${text(found.node, "?")}, not a VM on ${props.node}. A migration is not an ` + "update and vmids are cluster-wide: declare the node it is on, or pick a free vmid."));
+    return yield* Effect84.fail(answer.error);
+  return yield* Effect84.fail(new QemuRefusedError(`vmid ${String(props.vmid)} is a ${text(found.type, "guest")} on ` + `${text(found.node, "?")}, not a VM on ${props.node}. A migration is not an ` + "update and vmids are cluster-wide: declare the node it is on, or pick a free vmid."));
 });
 
 // src/proxmox/qemu-task.ts
 import * as nodes16 from "@distilled.cloud/proxmox/nodes";
-import * as Effect84 from "effect/Effect";
-var qemuTask = (props, operation, what, polls) => Effect84.gen(function* () {
+import * as Effect85 from "effect/Effect";
+var qemuTask = (props, operation, what, polls) => Effect85.gen(function* () {
   const credential = yield* mint(props.target, "provision");
   const upid = text(yield* runPveWith(props.target, credential, true, operation));
   if (upid === "") {
-    return yield* Effect84.fail(new QemuRefusedError(`${what}: PVE returned no task id, so the write cannot be confirmed and is not claimed.`));
+    return yield* Effect85.fail(new QemuRefusedError(`${what}: PVE returned no task id, so the write cannot be confirmed and is not claimed.`));
   }
   let exit = "still running when this provider stopped waiting";
   for (let attempt = 0;attempt < polls; attempt++) {
-    const status = yield* runPveWith(props.target, credential, false, nodes16.getNodeTaskStatus({ node: props.node, upid })).pipe(Effect84.orElseSucceed(() => {
+    const status = yield* runPveWith(props.target, credential, false, nodes16.getNodeTaskStatus({ node: props.node, upid })).pipe(Effect85.orElseSucceed(() => {
       return;
     }));
     if (status === undefined || status.status === undefined) {
@@ -6327,16 +6416,14 @@ var qemuTask = (props, operation, what, polls) => Effect84.gen(function* () {
       exit = text(status.exitstatus, "stopped with no exitstatus");
       break;
     }
-    yield* Effect84.sleep("1 second");
+    yield* Effect85.sleep("1 second");
   }
   if (exit !== "OK") {
-    return yield* Effect84.fail(new QemuRefusedError(`${what}: task ${upid} ended "${exit}". Read the task log before running the deploy again.`));
+    return yield* Effect85.fail(new QemuRefusedError(`${what}: task ${upid} ended "${exit}". Read the task log before running the deploy again.`));
   }
 });
 
-// src/proxmox/qemu-lifecycle.ts
-var CREATE_POLLS2 = 180;
-var DELETE_POLLS = 60;
+// src/proxmox/qemu-spec.ts
 var attributesOf10 = (live, props) => ({
   config: storedConfig2(live),
   node: props.node,
@@ -6356,28 +6443,88 @@ var spec5 = {
   updateForm: updateForm7
 };
 var { guardCreate: guardCreate10, guardUpdate: guardUpdate10 } = specGuards(spec5);
-var readQemu = (props) => readVm(props).pipe(Effect85.map((live) => live === undefined ? undefined : attributesOf10(live, props)));
-var deleteQemu = (props) => qemuTask(props, nodes17.deleteNodeQemu({ node: props.node, vmid: String(props.vmid) }), `destroy VM ${String(props.vmid)}`, DELETE_POLLS).pipe(Effect85.catchTag("QemuConfigNotFound", () => Effect85.void));
+
+// src/proxmox/qemu-resize.ts
+import * as nodes17 from "@distilled.cloud/proxmox/nodes";
+import * as Effect86 from "effect/Effect";
+var RESIZE_POLLS = 60;
+var unlockedConfig = (props, disk) => Effect86.gen(function* () {
+  for (let attempt = 0;; attempt++) {
+    const live = yield* readVm(props);
+    if (live === undefined)
+      return yield* Effect86.fail(new QemuDiskResizeRefused({ disk, message: "VM disappeared before resize" }));
+    if (live.lock === undefined)
+      return {
+        config: storedConfig2(live),
+        polls: RESIZE_POLLS - attempt
+      };
+    if (attempt === RESIZE_POLLS - 1)
+      return yield* Effect86.fail(new QemuDiskResizeRefused({
+        disk,
+        message: `${disk}: VM ${props.vmid} remains locked (${live.lock}) after ${RESIZE_POLLS} observations; refusing resize`
+      }));
+    yield* Effect86.sleep("1 second");
+  }
+});
+var resizeDisks = (props) => Effect86.gen(function* () {
+  const targets = Object.entries(props.diskSizesGiB ?? {}).filter((entry) => entry[1] !== undefined);
+  const first = targets[0];
+  if (first === undefined)
+    return;
+  const live = yield* readVm(props);
+  if (live === undefined)
+    return yield* Effect86.fail(new QemuDiskResizeRefused({
+      disk: first[0],
+      message: "VM disappeared before resize"
+    }));
+  const observed = storedConfig2(live);
+  yield* checkLiveDiskSizes(props, observed);
+  for (const [disk, size] of targets) {
+    if ((diskBytes(observed[disk]) ?? 0) >= size * 1024 ** 3)
+      continue;
+    const { config: config7, polls } = yield* unlockedConfig(props, disk);
+    yield* checkLiveDiskSizes(props, config7);
+    if ((diskBytes(config7[disk]) ?? 0) >= size * 1024 ** 3)
+      continue;
+    const form2 = { disk, size: `${size}G` };
+    const refused2 = formViolations("pve:PUT /nodes/{node}/qemu/{vmid}/resize", form2, true);
+    if (refused2.length > 0) {
+      return yield* Effect86.fail(new QemuDiskResizeRefused({ disk, message: refused2.join(`
+`) }));
+    }
+    yield* qemuTask(props, nodes17.putNodeQemuResize({
+      node: props.node,
+      vmid: String(props.vmid),
+      ...form2
+    }), `resize VM ${props.vmid} ${disk} to ${size} GiB`, polls);
+  }
+});
+
+// src/proxmox/qemu-lifecycle.ts
+var CREATE_POLLS2 = 180;
+var DELETE_POLLS = 60;
+var readQemu = (props) => readVm(props).pipe(Effect87.map((live) => live === undefined ? undefined : attributesOf10(live, props)));
+var deleteQemu = (props) => qemuTask(props, nodes18.deleteNodeQemu({ node: props.node, vmid: String(props.vmid) }), `destroy VM ${String(props.vmid)}`, DELETE_POLLS).pipe(Effect87.catchTag("QemuConfigNotFound", () => Effect87.void));
 var refuseUnmanaged = (props) => {
   const refused2 = formRefusals(props);
-  return refused2.length === 0 ? Effect85.void : Effect85.fail(new QemuRefusedError(refused2.join(`
+  return refused2.length === 0 ? Effect87.void : Effect87.fail(new QemuRefusedError(refused2.join(`
 `)));
 };
-var refuseChange = (change) => change.refuse.length === 0 ? Effect85.void : Effect85.fail(new QemuRefusedError(change.refuse.join(`
+var refuseChange = (change) => change.refuse.length === 0 ? Effect87.void : Effect87.fail(new QemuRefusedError(change.refuse.join(`
 `)));
 var qemuHandlers = {
-  list: () => Effect85.succeed([]),
-  read: Effect85.fn(function* ({
+  list: () => Effect87.succeed([]),
+  read: Effect87.fn(function* ({
     fqn,
     instanceId,
     olds,
     output
   }) {
     const found = yield* readQemu(olds);
-    const settled2 = Effect85.sync(() => found !== undefined && judge2(olds, found.config).drift.length === 0);
+    const settled2 = Effect87.sync(() => found !== undefined && judge2(olds, found.config).drift.every((key) => key.startsWith("diskSizesGiB.")));
     return yield* ownedRead({ fqn, instanceId, output }, found, settled2);
   }),
-  diff: Effect85.fn(function* ({
+  diff: Effect87.fn(function* ({
     news,
     olds,
     output
@@ -6386,23 +6533,25 @@ var qemuHandlers = {
       return;
     const identity2 = identityRefusal(news.vmid, output?.vmid ?? olds.vmid);
     if (identity2 !== undefined)
-      return yield* Effect85.fail(new QemuRefusedError(identity2));
+      return yield* Effect87.fail(new QemuRefusedError(identity2));
     yield* refuseUnmanaged(news);
+    yield* validateDiskSizes(news, olds);
     yield* guardCreate10(news, output === undefined);
     yield* guardUpdate10(news);
     if (output === undefined)
       return;
     const live = yield* readQemu(news);
     if (live === undefined) {
-      yield* Effect85.logWarning(`Proxmox.Vm ${news.node}/${String(news.vmid)}: the cluster lists no VM with this vmid -- ` + "a deploy CREATES it again, with new, empty volumes.");
+      yield* Effect87.logWarning(`Proxmox.Vm ${news.node}/${String(news.vmid)}: the cluster lists no VM with this vmid -- ` + "a deploy CREATES it again, with new, empty volumes.");
       yield* guardCreate10(news, true);
       return { action: "update" };
     }
+    yield* checkLiveDiskSizes(news, live.config, true);
     const change = judge2(news, live.config);
     yield* refuseChange(change);
     return { action: change.drift.length === 0 ? "noop" : "update" };
   }),
-  reconcile: Effect85.fn(function* ({
+  reconcile: Effect87.fn(function* ({
     fqn,
     instanceId,
     news,
@@ -6411,28 +6560,31 @@ var qemuHandlers = {
   }) {
     const identity2 = identityRefusal(news.vmid, output?.vmid ?? olds?.vmid);
     if (identity2 !== undefined)
-      return yield* Effect85.fail(new QemuRefusedError(identity2));
+      return yield* Effect87.fail(new QemuRefusedError(identity2));
     yield* refuseUnmanaged(news);
+    yield* validateDiskSizes(news, olds);
     const live = yield* readQemu(news);
     yield* guardCreate10(news, live === undefined);
     yield* guardUpdate10(news);
     if (live === undefined) {
-      yield* qemuTask(news, nodes17.createNodeQemu({ ...createForm9(news), node: news.node }), `create VM ${String(news.vmid)}`, CREATE_POLLS2);
+      yield* qemuTask(news, nodes18.createNodeQemu({ ...createForm9(news), node: news.node }), `create VM ${String(news.vmid)}`, CREATE_POLLS2);
     } else {
       yield* refuseTakeover({ fqn, instanceId, output }, `Proxmox.Vm VM ${String(news.vmid)} on ${news.node}`);
+      yield* checkLiveDiskSizes(news, live.config, true);
       const change = judge2(news, live.config);
       yield* refuseChange(change);
       if (Object.keys(change.put).length > 0) {
-        yield* runPve(news.target, "provision", true, nodes17.putNodeQemuConfig({ ...change.put, node: news.node, vmid: String(news.vmid) }));
+        yield* runPve(news.target, "provision", true, nodes18.putNodeQemuConfig({ ...change.put, node: news.node, vmid: String(news.vmid) }));
       }
     }
+    yield* resizeDisks(news);
     const after = yield* readQemu(news);
     if (after === undefined) {
-      return yield* Effect85.fail(new QemuRefusedError(`${spec5.path(news)}: write returned success but the VM is still absent`));
+      return yield* Effect87.fail(new QemuRefusedError(`${spec5.path(news)}: write returned success but the VM is still absent`));
     }
     const left = judge2(news, after.config);
     if (left.drift.length > 0) {
-      return yield* Effect85.fail(new QemuRefusedError(`${spec5.path(news)}: after the write, ${left.drift.join(", ")} still differ from the ` + "declaration. PVE may have normalised the value -- declare what it stores."));
+      return yield* Effect87.fail(new QemuRefusedError(`${spec5.path(news)}: after the write, ${left.drift.join(", ")} still differ from the ` + "declaration. PVE may have normalised the value -- declare what it stores."));
     }
     return after;
   }),
@@ -6441,16 +6593,16 @@ var qemuHandlers = {
 
 // src/proxmox/qemu.ts
 var ProxmoxVm = Resource28("Proxmox.Vm", { defaultRemovalPolicy: "retain" });
-var ProxmoxVmProvider = () => Provider28.effect(ProxmoxVm, Effect86.succeed(ProxmoxVm.Provider.of(qemuHandlers)));
+var ProxmoxVmProvider = () => Provider28.effect(ProxmoxVm, Effect88.succeed(ProxmoxVm.Provider.of(qemuHandlers)));
 // src/proxmox/storage-download.ts
 import { Resource as Resource29 } from "alchemy";
 import * as Provider29 from "alchemy/Provider";
-import * as Effect89 from "effect/Effect";
+import * as Effect91 from "effect/Effect";
 
 // src/proxmox/storage-download-lifecycle.ts
 import { isResolved as isResolved28 } from "alchemy/Diff";
-import * as nodes19 from "@distilled.cloud/proxmox/nodes";
-import * as Effect88 from "effect/Effect";
+import * as nodes20 from "@distilled.cloud/proxmox/nodes";
+import * as Effect90 from "effect/Effect";
 
 // src/proxmox/storage-download-identity.ts
 var PINNED = [
@@ -6484,17 +6636,17 @@ class StorageDownloadRefusedError extends Error {
 }
 
 // src/proxmox/storage-download-task.ts
-import * as nodes18 from "@distilled.cloud/proxmox/nodes";
-import * as Effect87 from "effect/Effect";
-var storageDownloadTask = (where, operation, what, polls) => Effect87.gen(function* () {
+import * as nodes19 from "@distilled.cloud/proxmox/nodes";
+import * as Effect89 from "effect/Effect";
+var storageDownloadTask = (where, operation, what, polls) => Effect89.gen(function* () {
   const credential = yield* mint(where.target, "provision");
   const upid = text(yield* runPveWith(where.target, credential, true, operation));
   if (upid === "") {
-    return yield* Effect87.fail(new StorageDownloadRefusedError(`${what}: PVE returned no task id, so the write cannot be confirmed and is not claimed.`));
+    return yield* Effect89.fail(new StorageDownloadRefusedError(`${what}: PVE returned no task id, so the write cannot be confirmed and is not claimed.`));
   }
   let exit = "still running when this provider stopped waiting";
   for (let attempt = 0;attempt < polls; attempt++) {
-    const status = yield* runPveWith(where.target, credential, false, nodes18.getNodeTaskStatus({ node: where.node, upid })).pipe(Effect87.orElseSucceed(() => {
+    const status = yield* runPveWith(where.target, credential, false, nodes19.getNodeTaskStatus({ node: where.node, upid })).pipe(Effect89.orElseSucceed(() => {
       return;
     }));
     if (status === undefined || status.status === undefined) {
@@ -6505,10 +6657,10 @@ var storageDownloadTask = (where, operation, what, polls) => Effect87.gen(functi
       exit = text(status.exitstatus, "stopped with no exitstatus");
       break;
     }
-    yield* Effect87.sleep("1 second");
+    yield* Effect89.sleep("1 second");
   }
   if (exit !== "OK") {
-    return yield* Effect87.fail(new StorageDownloadRefusedError(`${what}: task ${upid} ended "${exit}". Read the task log before running the deploy again.`));
+    return yield* Effect89.fail(new StorageDownloadRefusedError(`${what}: task ${upid} ended "${exit}". Read the task log before running the deploy again.`));
   }
 });
 
@@ -6534,14 +6686,14 @@ var createRefusals2 = (props) => {
   }
   return refuse3.concat(formViolations(DOWNLOAD_ENDPOINT, downloadForm(props), true).map((why) => `${props.filename}: ${why}`));
 };
-var readDownload = (props) => Effect88.gen(function* () {
-  const rows = yield* runPve(props.target, "read", false, nodes19.listNodeStorageContent({
+var readDownload = (props) => Effect90.gen(function* () {
+  const rows = yield* runPve(props.target, "read", false, nodes20.listNodeStorageContent({
     content: "import",
     node: props.node,
     storage: props.storage
   }));
   if (!Array.isArray(rows)) {
-    return yield* Effect88.fail(new StorageDownloadRefusedError(`${props.storage}: the content list did not come back as a list.`));
+    return yield* Effect90.fail(new StorageDownloadRefusedError(`${props.storage}: the content list did not come back as a list.`));
   }
   const found = rows.find((row) => row.volid.endsWith(`/${props.filename}`));
   if (found === undefined)
@@ -6555,28 +6707,28 @@ var readDownload = (props) => Effect88.gen(function* () {
     volid: text(found.volid, "")
   };
 });
-var destroyDownload = (props) => Effect88.gen(function* () {
+var destroyDownload = (props) => Effect90.gen(function* () {
   const live = yield* readDownload(props);
   if (live === undefined)
     return;
-  yield* storageDownloadTask(props, nodes19.deleteNodeStorageContent({
+  yield* storageDownloadTask(props, nodes20.deleteNodeStorageContent({
     node: props.node,
     storage: props.storage,
     volume: live.volid
   }), `delete ${live.volid}`, DELETE_POLLS2);
 });
 var storageDownloadHandlers = {
-  list: () => Effect88.succeed([]),
-  read: Effect88.fn(function* ({
+  list: () => Effect90.succeed([]),
+  read: Effect90.fn(function* ({
     fqn,
     instanceId,
     olds,
     output
   }) {
     const found = yield* readDownload(olds);
-    return yield* ownedRead({ fqn, instanceId, output }, found, Effect88.succeed(true));
+    return yield* ownedRead({ fqn, instanceId, output }, found, Effect90.succeed(true));
   }),
-  diff: Effect88.fn(function* ({
+  diff: Effect90.fn(function* ({
     news,
     olds,
     output
@@ -6585,7 +6737,7 @@ var storageDownloadHandlers = {
       return;
     const refused2 = createRefusals2(news);
     if (refused2.length > 0) {
-      return yield* Effect88.fail(new StorageDownloadRefusedError(refused2.join(`
+      return yield* Effect90.fail(new StorageDownloadRefusedError(refused2.join(`
 `)));
     }
     if (output === undefined)
@@ -6595,11 +6747,11 @@ var storageDownloadHandlers = {
       return { action: "replace" };
     const live = yield* readDownload(news);
     if (identity2.kind === "pin-changed" && live !== undefined) {
-      return yield* Effect88.fail(new StorageDownloadRefusedError(identity2.refuse));
+      return yield* Effect90.fail(new StorageDownloadRefusedError(identity2.refuse));
     }
     return { action: live === undefined ? "update" : "noop" };
   }),
-  reconcile: Effect88.fn(function* ({
+  reconcile: Effect90.fn(function* ({
     fqn,
     instanceId,
     news,
@@ -6607,18 +6759,18 @@ var storageDownloadHandlers = {
   }) {
     const refused2 = createRefusals2(news);
     if (refused2.length > 0) {
-      return yield* Effect88.fail(new StorageDownloadRefusedError(refused2.join(`
+      return yield* Effect90.fail(new StorageDownloadRefusedError(refused2.join(`
 `)));
     }
     const live = yield* readDownload(news);
     if (live === undefined) {
-      yield* storageDownloadTask(news, nodes19.downloadNodesStorageUrl(downloadForm(news)), `download ${news.filename} onto ${news.storage}`, CREATE_POLLS3);
+      yield* storageDownloadTask(news, nodes20.downloadNodesStorageUrl(downloadForm(news)), `download ${news.filename} onto ${news.storage}`, CREATE_POLLS3);
     } else {
       yield* refuseTakeover({ fqn, instanceId, output }, `Proxmox.StorageDownload ${news.filename} on ${news.storage}`);
     }
     const after = yield* readDownload(news);
     if (after === undefined) {
-      return yield* Effect88.fail(new StorageDownloadRefusedError(`${news.filename}: the write returned no error but ${news.storage} still has no ` + "matching content — PVE may have normalised the filename; read it back by hand."));
+      return yield* Effect90.fail(new StorageDownloadRefusedError(`${news.filename}: the write returned no error but ${news.storage} still has no ` + "matching content — PVE may have normalised the filename; read it back by hand."));
     }
     return after;
   }),
@@ -6627,17 +6779,17 @@ var storageDownloadHandlers = {
 
 // src/proxmox/storage-download.ts
 var ProxmoxStorageDownload = Resource29("Proxmox.StorageDownload");
-var ProxmoxStorageDownloadProvider = () => Provider29.effect(ProxmoxStorageDownload, Effect89.succeed(ProxmoxStorageDownload.Provider.of(storageDownloadHandlers)));
+var ProxmoxStorageDownloadProvider = () => Provider29.effect(ProxmoxStorageDownload, Effect91.succeed(ProxmoxStorageDownload.Provider.of(storageDownloadHandlers)));
 // src/proxmox/replication-job.ts
 import { Resource as Resource30 } from "alchemy";
 import * as Provider30 from "alchemy/Provider";
-import * as Effect91 from "effect/Effect";
+import * as Effect93 from "effect/Effect";
 
 // src/proxmox/replication-job-lifecycle.ts
 import { isResolved as isResolved29 } from "alchemy/Diff";
 import * as cluster12 from "@distilled.cloud/proxmox/cluster";
 import { ProxmoxParseError as ProxmoxParseError6 } from "@distilled.cloud/proxmox/Errors";
-import * as Effect90 from "effect/Effect";
+import * as Effect92 from "effect/Effect";
 import * as Schema6 from "effect/Schema";
 
 // src/proxmox/replication-job-form.ts
@@ -6698,17 +6850,17 @@ var malformed = () => new ProxmoxParseError6({
   body: undefined,
   cause: "Replication job response does not match the requested vendor identity"
 });
-var readReplicationJob = (props) => runPve(props.target, "read", false, cluster12.getClusterReplication({ id: jobId(props) })).pipe(Effect90.flatMap((live) => Schema6.decodeUnknownEffect(Schema6.toType(cluster12.GetClusterReplicationResponse))({
+var readReplicationJob = (props) => runPve(props.target, "read", false, cluster12.getClusterReplication({ id: jobId(props) })).pipe(Effect92.flatMap((live) => Schema6.decodeUnknownEffect(Schema6.toType(cluster12.GetClusterReplicationResponse))({
   ...live,
   guest: int(live.guest, Number.NaN),
   jobnum: int(live.jobnum, Number.NaN),
   rate: undefined
-}).pipe(Effect90.mapError(malformed), Effect90.as(live))), Effect90.flatMap((live) => live.id === jobId(props) && int(live.guest, Number.NaN) === props.guest && int(live.jobnum, Number.NaN) === props.jobnum ? Effect90.succeed(replicationJobSpec.attributes({ ...live }, props)) : Effect90.fail(malformed())), Effect90.catchTag("ReplicationJobNotFound", () => Effect90.succeed(undefined)));
-var deleteReplicationJob = (props) => runPve(props.target, "provision", true, cluster12.deleteClusterReplication({ id: jobId(props) })).pipe(Effect90.catchTag("ReplicationJobNotFound", () => Effect90.void));
+}).pipe(Effect92.mapError(malformed), Effect92.as(live))), Effect92.flatMap((live) => live.id === jobId(props) && int(live.guest, Number.NaN) === props.guest && int(live.jobnum, Number.NaN) === props.jobnum ? Effect92.succeed(replicationJobSpec.attributes({ ...live }, props)) : Effect92.fail(malformed())), Effect92.catchTag("ReplicationJobNotFound", () => Effect92.succeed(undefined)));
+var deleteReplicationJob = (props) => runPve(props.target, "provision", true, cluster12.deleteClusterReplication({ id: jobId(props) })).pipe(Effect92.catchTag("ReplicationJobNotFound", () => Effect92.void));
 var replicationJobHandlers = {
-  list: () => Effect90.succeed([]),
+  list: () => Effect92.succeed([]),
   read: ({ olds }) => readReplicationJob(olds),
-  diff: Effect90.fn(function* ({
+  diff: Effect92.fn(function* ({
     news,
     output
   }) {
@@ -6725,7 +6877,7 @@ var replicationJobHandlers = {
     }
     return { action: replicationJobSpec.matches(live, news) ? "noop" : "update" };
   }),
-  reconcile: Effect90.fn(function* ({ news }) {
+  reconcile: Effect92.fn(function* ({ news }) {
     const live = yield* readReplicationJob(news);
     yield* guardCreate11(news, live === undefined);
     yield* guardUpdate11(news);
@@ -6738,7 +6890,7 @@ var replicationJobHandlers = {
     }
     const after = yield* readReplicationJob(news);
     if (after === undefined)
-      return yield* Effect90.fail(new Error(`${replicationJobSpec.path(news)}: write returned success but the resource is still absent`));
+      return yield* Effect92.fail(new Error(`${replicationJobSpec.path(news)}: write returned success but the resource is still absent`));
     return after;
   }),
   delete: ({ olds }) => deleteReplicationJob(olds)
@@ -6746,15 +6898,15 @@ var replicationJobHandlers = {
 
 // src/proxmox/replication-job.ts
 var ProxmoxReplicationJob = Resource30("Proxmox.ReplicationJob");
-var ProxmoxReplicationJobProvider = () => Provider30.effect(ProxmoxReplicationJob, Effect91.succeed(ProxmoxReplicationJob.Provider.of(replicationJobHandlers)));
+var ProxmoxReplicationJobProvider = () => Provider30.effect(ProxmoxReplicationJob, Effect93.succeed(ProxmoxReplicationJob.Provider.of(replicationJobHandlers)));
 // src/proxmox/sdn-apply.ts
 import { Resource as Resource31 } from "alchemy";
 import { isResolved as isResolved30 } from "alchemy/Diff";
 import * as Provider31 from "alchemy/Provider";
-import * as Effect93 from "effect/Effect";
+import * as Effect95 from "effect/Effect";
 
 // src/proxmox/sdn-apply-read.ts
-import * as Effect92 from "effect/Effect";
+import * as Effect94 from "effect/Effect";
 var MARKED = [
   "cluster/sdn/zones",
   "cluster/sdn/vnets",
@@ -6763,7 +6915,7 @@ var MARKED = [
   "cluster/sdn/route-maps"
 ];
 var subsystemAbsent = (error) => error instanceof PveError && error.status === 501;
-var markedPending = (target) => Effect92.all(MARKED.map((collection) => pve(target, "read", "GET", `${collection}?pending=1`).pipe(Effect92.map((rows) => (rows ?? []).filter((row) => row.state !== undefined).length), Effect92.catchIf(subsystemAbsent, () => Effect92.succeed(0)))), { concurrency: "unbounded" }).pipe(Effect92.map((counts) => counts.reduce((total, count2) => total + count2, 0)));
+var markedPending = (target) => Effect94.all(MARKED.map((collection) => pve(target, "read", "GET", `${collection}?pending=1`).pipe(Effect94.map((rows) => (rows ?? []).filter((row) => row.state !== undefined).length), Effect94.catchIf(subsystemAbsent, () => Effect94.succeed(0)))), { concurrency: "unbounded" }).pipe(Effect94.map((counts) => counts.reduce((total, count2) => total + count2, 0)));
 var fabricStaged = (staged, running) => {
   if (staged === undefined && running === undefined)
     return 0;
@@ -6771,9 +6923,9 @@ var fabricStaged = (staged, running) => {
     return "inconsistent";
   return staged === running ? 0 : 1;
 };
-var fabricPending = (target) => Effect92.all(["pending", "running"].map((view) => pve(target, "read", "GET", `cluster/sdn/fabrics/all?${view}=1`).pipe(Effect92.map(canonical3), Effect92.catchIf(subsystemAbsent, () => Effect92.succeed(undefined)))), { concurrency: "unbounded" }).pipe(Effect92.flatMap(([staged, running]) => {
+var fabricPending = (target) => Effect94.all(["pending", "running"].map((view) => pve(target, "read", "GET", `cluster/sdn/fabrics/all?${view}=1`).pipe(Effect94.map(canonical3), Effect94.catchIf(subsystemAbsent, () => Effect94.succeed(undefined)))), { concurrency: "unbounded" }).pipe(Effect94.flatMap(([staged, running]) => {
   const verdict = fabricStaged(staged, running);
-  return verdict === "inconsistent" ? Effect92.die(new Error("cluster/sdn/fabrics/all answered 501 for one of ?pending=1 and ?running=1 and not " + "the other. Refusing to read that as a staged fabric change.")) : Effect92.succeed(verdict);
+  return verdict === "inconsistent" ? Effect94.die(new Error("cluster/sdn/fabrics/all answered 501 for one of ?pending=1 and ?running=1 and not " + "the other. Refusing to read that as a staged fabric change.")) : Effect94.succeed(verdict);
 }));
 var canonical3 = (value) => JSON.stringify(sortDeep(value));
 var sortDeep = (value) => {
@@ -6786,23 +6938,23 @@ var sortDeep = (value) => {
   }
   return value;
 };
-var sdnPendingCount = (target) => Effect92.all([markedPending(target), fabricPending(target)], { concurrency: "unbounded" }).pipe(Effect92.map(([marked, fabric]) => marked + fabric));
+var sdnPendingCount = (target) => Effect94.all([markedPending(target), fabricPending(target)], { concurrency: "unbounded" }).pipe(Effect94.map(([marked, fabric]) => marked + fabric));
 
 // src/proxmox/sdn-apply.ts
 var ProxmoxSdnApply = Resource31("Proxmox.SdnApply");
-var read5 = (props) => sdnPendingCount(props.target).pipe(Effect93.map((pending) => ({ pending })));
-var ProxmoxSdnApplyProvider = () => Provider31.effect(ProxmoxSdnApply, Effect93.succeed(ProxmoxSdnApply.Provider.of({
-  list: () => Effect93.succeed([]),
-  read: Effect93.fn(function* ({ olds }) {
+var read5 = (props) => sdnPendingCount(props.target).pipe(Effect95.map((pending) => ({ pending })));
+var ProxmoxSdnApplyProvider = () => Provider31.effect(ProxmoxSdnApply, Effect95.succeed(ProxmoxSdnApply.Provider.of({
+  list: () => Effect95.succeed([]),
+  read: Effect95.fn(function* ({ olds }) {
     return yield* read5(olds);
   }),
-  diff: Effect93.fn(function* ({ news }) {
+  diff: Effect95.fn(function* ({ news }) {
     if (!isResolved30(news))
       return;
     const { pending } = yield* read5(news);
     return pending === 0 ? { action: "noop" } : { action: "update" };
   }),
-  reconcile: Effect93.fn(function* ({ news }) {
+  reconcile: Effect95.fn(function* ({ news }) {
     const staged = yield* read5(news);
     if (staged.pending === 0)
       return staged;
@@ -6810,16 +6962,16 @@ var ProxmoxSdnApplyProvider = () => Provider31.effect(ProxmoxSdnApply, Effect93.
     yield* pve(news.target, "provision", "PUT", "cluster/sdn");
     const after = yield* read5(news);
     if (after.pending !== 0) {
-      return yield* Effect93.die(new Error(`PUT /cluster/sdn returned no error but ${String(after.pending)} SDN object(s) ` + "are still staged. The running config does not match the declared one -- check " + "`pvesh get /cluster/sdn/zones --pending 1` for the objects PVE refused."));
+      return yield* Effect95.die(new Error(`PUT /cluster/sdn returned no error but ${String(after.pending)} SDN object(s) ` + "are still staged. The running config does not match the declared one -- check " + "`pvesh get /cluster/sdn/zones --pending 1` for the objects PVE refused."));
     }
     return after;
   }),
-  delete: () => Effect93.void
+  delete: () => Effect95.void
 })));
 // src/proxmox/sdn-subnet.ts
 import { Resource as Resource32 } from "alchemy";
 import * as Provider32 from "alchemy/Provider";
-import * as Effect94 from "effect/Effect";
+import * as Effect96 from "effect/Effect";
 
 // src/proxmox/sdn-subnet-form.ts
 var subnetId = (props) => `${props.zone}-${props.cidr.replace("/", "-")}`;
@@ -6879,11 +7031,11 @@ var handlers12 = pveHandlers({
   path: (props) => `cluster/sdn/vnets/${props.vnet}/subnets/${subnetId(props)}`,
   updateForm: updateForm8
 });
-var ProxmoxSdnSubnetProvider = () => Provider32.effect(ProxmoxSdnSubnet, Effect94.succeed(ProxmoxSdnSubnet.Provider.of(handlers12)));
+var ProxmoxSdnSubnetProvider = () => Provider32.effect(ProxmoxSdnSubnet, Effect96.succeed(ProxmoxSdnSubnet.Provider.of(handlers12)));
 // src/proxmox/sdn-vnet.ts
 import { Resource as Resource33 } from "alchemy";
 import * as Provider33 from "alchemy/Provider";
-import * as Effect95 from "effect/Effect";
+import * as Effect97 from "effect/Effect";
 var ProxmoxSdnVnet = Resource33("Proxmox.SdnVnet");
 var tagOf = (value) => typeof value === "number" ? value : undefined;
 var shape10 = (props) => {
@@ -6921,11 +7073,11 @@ var handlers13 = pveHandlers({
   path: (props) => `cluster/sdn/vnets/${props.vnet}`,
   updateForm: updateForm9
 });
-var ProxmoxSdnVnetProvider = () => Provider33.effect(ProxmoxSdnVnet, Effect95.succeed(ProxmoxSdnVnet.Provider.of(handlers13)));
+var ProxmoxSdnVnetProvider = () => Provider33.effect(ProxmoxSdnVnet, Effect97.succeed(ProxmoxSdnVnet.Provider.of(handlers13)));
 // src/proxmox/sdn-zone.ts
 import { Resource as Resource34 } from "alchemy";
 import * as Provider34 from "alchemy/Provider";
-import * as Effect96 from "effect/Effect";
+import * as Effect98 from "effect/Effect";
 var ProxmoxSdnZone = Resource34("Proxmox.SdnZone");
 var sameIpam = (live, declared2) => (live === "" ? "pve" : live) === (declared2 === undefined || declared2 === "" ? "pve" : declared2);
 var body6 = (props) => ({
@@ -6978,13 +7130,13 @@ var handlers14 = pveHandlers({
     return withClears(fields2, clear);
   }
 });
-var ProxmoxSdnZoneProvider = () => Provider34.effect(ProxmoxSdnZone, Effect96.succeed(ProxmoxSdnZone.Provider.of(handlers14)));
+var ProxmoxSdnZoneProvider = () => Provider34.effect(ProxmoxSdnZone, Effect98.succeed(ProxmoxSdnZone.Provider.of(handlers14)));
 // src/proxmox/storage.ts
 import { Resource as Resource35 } from "alchemy";
 import { isResolved as isResolved31 } from "alchemy/Diff";
 import * as Provider35 from "alchemy/Provider";
 import * as storage2 from "@distilled.cloud/proxmox/storage";
-import * as Effect98 from "effect/Effect";
+import * as Effect100 from "effect/Effect";
 
 // src/proxmox/storage-plugin-options.ts
 var SHARED_ACCEPTED_TYPES = new Set(["dir", "lvm", "btrfs", "esxi"]);
@@ -6992,7 +7144,7 @@ var sharedAccepted = (type) => SHARED_ACCEPTED_TYPES.has(type);
 
 // src/proxmox/storage-wire.ts
 import * as storage from "@distilled.cloud/proxmox/storage";
-import * as Effect97 from "effect/Effect";
+import * as Effect99 from "effect/Effect";
 var str2 = (value, fallback = "") => typeof value === "string" ? value : fallback;
 var tokens = (value) => value.split(",").map((part) => part.trim()).filter((part) => part !== "").sort().join(",");
 var sameList2 = (declared2, live) => declared2 === undefined || tokens(declared2) === tokens(live);
@@ -7011,8 +7163,8 @@ var attributesOf11 = (live, props) => {
     type: str2(data["type"], props.type)
   };
 };
-var readStorageOrFail = (props) => readOrUnreadable(runPve(props.target, "provision", false, storage.getStorage({ storage: props.storage }))).pipe(Effect97.map((live) => live === UNREADABLE ? UNREADABLE : attributesOf11(live, props)));
-var readStorage = (props) => readStorageOrFail(props).pipe(Effect97.catchTag("StorageNotFound", () => Effect97.succeed(undefined)));
+var readStorageOrFail = (props) => readOrUnreadable(runPve(props.target, "provision", false, storage.getStorage({ storage: props.storage }))).pipe(Effect99.map((live) => live === UNREADABLE ? UNREADABLE : attributesOf11(live, props)));
+var readStorage = (props) => readStorageOrFail(props).pipe(Effect99.catchTag("StorageNotFound", () => Effect99.succeed(undefined)));
 var dropUnreadable7 = (live) => live === UNREADABLE ? undefined : live;
 var changedProps = (live, props) => ({
   ...sameList2(props.content, live.content) ? {} : { content: props.content },
@@ -7023,7 +7175,7 @@ var changedProps = (live, props) => ({
   ...same7(props.preallocation, live.preallocation) ? {} : { preallocation: props.preallocation },
   ...same7(props.comment, live.comment) ? {} : { comment: props.comment }
 });
-var matches11 = (attributes2, props) => !sharedAccepted(props.type) && !same7(props.shared, attributes2.shared) ? Effect97.die(new Error(`storage/${props.storage}: declared shared: ${String(props.shared)}, but PVE reports ` + `${String(attributes2.shared)} and '${props.type}' storages never accept a 'shared' ` + "write (storage-plugin-options.ts) -- remove the declared shared or set it to match " + "what PVE already reports; this value can never be applied.")) : Effect97.succeed(Object.keys(changedProps(attributes2, props)).length === 0);
+var matches11 = (attributes2, props) => !sharedAccepted(props.type) && !same7(props.shared, attributes2.shared) ? Effect99.die(new Error(`storage/${props.storage}: declared shared: ${String(props.shared)}, but PVE reports ` + `${String(attributes2.shared)} and '${props.type}' storages never accept a 'shared' ` + "write (storage-plugin-options.ts) -- remove the declared shared or set it to match " + "what PVE already reports; this value can never be applied.")) : Effect99.succeed(Object.keys(changedProps(attributes2, props)).length === 0);
 
 // src/proxmox/storage-form.ts
 var STORAGE_CREATE = "pve:POST /storage";
@@ -7057,12 +7209,12 @@ var toDistilledUpdate3 = (form2) => underscored(form2);
 var ProxmoxStorage = Resource35("Proxmox.Storage", {
   defaultRemovalPolicy: "retain"
 });
-var ProxmoxStorageProvider = () => Provider35.effect(ProxmoxStorage, Effect98.succeed(ProxmoxStorage.Provider.of({
-  list: () => Effect98.succeed([]),
-  read: Effect98.fn(function* ({ olds, output }) {
+var ProxmoxStorageProvider = () => Provider35.effect(ProxmoxStorage, Effect100.succeed(ProxmoxStorage.Provider.of({
+  list: () => Effect100.succeed([]),
+  read: Effect100.fn(function* ({ olds, output }) {
     return dropUnreadable7(yield* output === undefined ? readStorage(olds) : readStorageOrFail(olds));
   }),
-  diff: Effect98.fn(function* ({ news, output }) {
+  diff: Effect100.fn(function* ({ news, output }) {
     if (!isResolved31(news))
       return;
     yield* guardWrite2(STORAGE_CREATE, createForm11(news), output === undefined);
@@ -7080,7 +7232,7 @@ var ProxmoxStorageProvider = () => Provider35.effect(ProxmoxStorage, Effect98.su
     }
     return (yield* matches11(live, news)) ? { action: "noop" } : { action: "update" };
   }),
-  reconcile: Effect98.fn(function* ({ news }) {
+  reconcile: Effect100.fn(function* ({ news }) {
     const before = dropUnreadable7(yield* readStorage(news));
     yield* guardWrite2(STORAGE_CREATE, createForm11(news), before === undefined);
     const update2 = updateForm10(news, before);
@@ -7092,11 +7244,11 @@ var ProxmoxStorageProvider = () => Provider35.effect(ProxmoxStorage, Effect98.su
     }
     const after = dropUnreadable7(yield* readStorage(news));
     if (after === undefined) {
-      return yield* Effect98.die(new Error(`storage/${news.storage}: the write returned no error but the storage is still ` + 'absent. PVE wraps every answer in {"data":...} and can report success on a ' + "call that did nothing -- read back rather than trusting the status code."));
+      return yield* Effect100.die(new Error(`storage/${news.storage}: the write returned no error but the storage is still ` + 'absent. PVE wraps every answer in {"data":...} and can report success on a ' + "call that did nothing -- read back rather than trusting the status code."));
     }
     return after;
   }),
-  delete: Effect98.fn(function* ({ olds }) {
+  delete: Effect100.fn(function* ({ olds }) {
     yield* runPve(olds.target, "provision", true, storage2.deleteStorage({ storage: olds.storage }));
   })
 })));
@@ -7104,11 +7256,11 @@ var ProxmoxStorageProvider = () => Provider35.effect(ProxmoxStorage, Effect98.su
 import { Resource as Resource36 } from "alchemy";
 import { isResolved as isResolved32 } from "alchemy/Diff";
 import * as Provider36 from "alchemy/Provider";
-import * as Effect101 from "effect/Effect";
+import * as Effect103 from "effect/Effect";
 
 // src/proxmox/zfs-pool-wire.ts
-import * as nodes20 from "@distilled.cloud/proxmox/nodes";
-import * as Effect99 from "effect/Effect";
+import * as nodes21 from "@distilled.cloud/proxmox/nodes";
+import * as Effect101 from "effect/Effect";
 var leafDevices = (children) => Array.isArray(children) ? children.flatMap((entry) => {
   const vdev = entry;
   const nested = leafDevices(vdev.children);
@@ -7121,19 +7273,19 @@ var attributesOf12 = (live, props) => ({
   node: props.node,
   state: text(live.state, "unknown")
 });
-var readPoolOrFail = (props) => readOrUnreadable(runPve(props.target, "read", false, nodes20.getNodeDiskZfs({ name: props.name, node: props.node }))).pipe(Effect99.map((live) => {
+var readPoolOrFail = (props) => readOrUnreadable(runPve(props.target, "read", false, nodes21.getNodeDiskZfs({ name: props.name, node: props.node }))).pipe(Effect101.map((live) => {
   if (live === UNREADABLE)
     return UNREADABLE;
   return text(live.name) === "" ? undefined : attributesOf12(live, props);
 }));
-var readPool2 = (props) => readPoolOrFail(props).pipe(Effect99.orElseSucceed(() => {
+var readPool2 = (props) => readPoolOrFail(props).pipe(Effect101.orElseSucceed(() => {
   return;
 }));
 var dropUnreadable8 = (live) => live === UNREADABLE ? undefined : live;
 
 // src/proxmox/zfs-pool-form.ts
-import * as Effect100 from "effect/Effect";
-import * as nodes21 from "@distilled.cloud/proxmox/nodes";
+import * as Effect102 from "effect/Effect";
+import * as nodes22 from "@distilled.cloud/proxmox/nodes";
 var ZFS_POOL_CREATE = "pve:POST /nodes/{node}/disks/zfs";
 var zfsPoolCreateEndpoint = (props) => props.devices === undefined || props.raidlevel === undefined ? undefined : ZFS_POOL_CREATE;
 var createForm12 = (props) => ({
@@ -7153,40 +7305,40 @@ var toDistilledCreate5 = (props) => {
   };
 };
 var SETTLE_ATTEMPTS = 30;
-var createPool2 = (props, read6) => Effect100.gen(function* () {
+var createPool2 = (props, read6) => Effect102.gen(function* () {
   const existing = yield* read6(props);
   if (existing !== undefined)
     return existing;
   if (props.devices === undefined || props.raidlevel === undefined) {
-    return yield* Effect100.die(new Error(`${props.node}/${props.name}: this is an adopt-only declaration (no \`devices\` or ` + "`raidlevel`) and the pool is not there to adopt. An adopt-only Proxmox.ZfsPool never " + "creates -- declare both fields for a pool this resource should build, or point this " + "declaration at a pool that already exists on this node."));
+    return yield* Effect102.die(new Error(`${props.node}/${props.name}: this is an adopt-only declaration (no \`devices\` or ` + "`raidlevel`) and the pool is not there to adopt. An adopt-only Proxmox.ZfsPool never " + "creates -- declare both fields for a pool this resource should build, or point this " + "declaration at a pool that already exists on this node."));
   }
   yield* guardForm(zfsPoolCreateEndpoint(props), asForm2(createForm12(props)), true);
-  const upid = yield* runPve(props.target, "provision", true, nodes21.createNodeDiskZfs(toDistilledCreate5(props)));
-  const settle3 = (attempts) => Effect100.gen(function* () {
+  const upid = yield* runPve(props.target, "provision", true, nodes22.createNodeDiskZfs(toDistilledCreate5(props)));
+  const settle3 = (attempts) => Effect102.gen(function* () {
     const live = yield* read6(props);
     if (live !== undefined || attempts <= 0)
       return live;
-    yield* Effect100.sleep("2 seconds");
+    yield* Effect102.sleep("2 seconds");
     return yield* settle3(attempts - 1);
   });
   const after = yield* settle3(SETTLE_ATTEMPTS);
   if (after === undefined) {
-    return yield* Effect100.die(new Error(`nodes/${props.node}/disks/zfs/${props.name}: POST returned ${text(upid, "(no UPID)")} ` + "but the pool has not appeared. That POST only forks a `zfscreate` worker, so the task " + `holds the real error -- read it with \`pvesh get /nodes/${props.node}/tasks/<upid>/log\`. ` + "NOTHING WAS RETRIED AND NOTHING WAS CLEANED UP: if the worker reached `zpool create`, " + "the declared devices have already been written to. DO NOT RE-RUN THIS DEPLOY BEFORE " + 'READING THAT LOG: `read` cannot tell "the worker is still running" from "the pool is ' + 'genuinely gone", so a re-run this soon can POST a SECOND `zpool create` at the SAME ' + "devices while the first one is still mid-write -- confirm the task finished (one way " + "or the other) before trying again."));
+    return yield* Effect102.die(new Error(`nodes/${props.node}/disks/zfs/${props.name}: POST returned ${text(upid, "(no UPID)")} ` + "but the pool has not appeared. That POST only forks a `zfscreate` worker, so the task " + `holds the real error -- read it with \`pvesh get /nodes/${props.node}/tasks/<upid>/log\`. ` + "NOTHING WAS RETRIED AND NOTHING WAS CLEANED UP: if the worker reached `zpool create`, " + "the declared devices have already been written to. DO NOT RE-RUN THIS DEPLOY BEFORE " + 'READING THAT LOG: `read` cannot tell "the worker is still running" from "the pool is ' + 'genuinely gone", so a re-run this soon can POST a SECOND `zpool create` at the SAME ' + "devices while the first one is still mid-write -- confirm the task finished (one way " + "or the other) before trying again."));
   }
   return after;
 });
-var destroyPool = (props) => runPve(props.target, "provision", true, nodes21.deleteNodeDiskZfs({ name: props.name, node: props.node }));
+var destroyPool = (props) => runPve(props.target, "provision", true, nodes22.deleteNodeDiskZfs({ name: props.name, node: props.node }));
 
 // src/proxmox/zfs-pool.ts
 var ProxmoxZfsPool = Resource36("Proxmox.ZfsPool", {
   defaultRemovalPolicy: "retain"
 });
-var ProxmoxZfsPoolProvider = () => Provider36.effect(ProxmoxZfsPool, Effect101.succeed(ProxmoxZfsPool.Provider.of({
-  list: () => Effect101.succeed([]),
-  read: Effect101.fn(function* ({ olds, output }) {
+var ProxmoxZfsPoolProvider = () => Provider36.effect(ProxmoxZfsPool, Effect103.succeed(ProxmoxZfsPool.Provider.of({
+  list: () => Effect103.succeed([]),
+  read: Effect103.fn(function* ({ olds, output }) {
     return dropUnreadable8(yield* output === undefined ? readPool2(olds) : readPoolOrFail(olds));
   }),
-  diff: Effect101.fn(function* ({ news, output }) {
+  diff: Effect103.fn(function* ({ news, output }) {
     if (!isResolved32(news))
       return;
     yield* guardForm(zfsPoolCreateEndpoint(news), asForm2(createForm12(news)), output === undefined);
@@ -7203,10 +7355,10 @@ var ProxmoxZfsPoolProvider = () => Provider36.effect(ProxmoxZfsPool, Effect101.s
     }
     return { action: "noop" };
   }),
-  reconcile: Effect101.fn(function* ({ news }) {
-    return yield* createPool2(news, (props) => readPool2(props).pipe(Effect101.map(dropUnreadable8)));
+  reconcile: Effect103.fn(function* ({ news }) {
+    return yield* createPool2(news, (props) => readPool2(props).pipe(Effect103.map(dropUnreadable8)));
   }),
-  delete: Effect101.fn(function* ({ olds }) {
+  delete: Effect103.fn(function* ({ olds }) {
     yield* destroyPool(olds);
   })
 })));
@@ -7280,6 +7432,7 @@ export {
   ProxmoxVmProvider,
   ProxmoxZfsPool,
   ProxmoxZfsPoolProvider,
+  QemuDiskResizeRefused,
   alertmanagerAlertBody,
   constraintsFor,
   declareProvisionBaseline,
@@ -7289,5 +7442,5 @@ export {
   violations
 };
 
-//# debugId=E0B844E10EA9EF3D64756E2164756E21
+//# debugId=D9ECAE97C44C44E264756E2164756E21
 //# sourceMappingURL=index.js.map