@homeflare/alchemy 0.45.0 → 0.46.1

package/dist/proxmox/qemu-dns.d.ts

@@ -0,0 +1,2 @@
+export declare const dnsRefusals: (nameserver: unknown) => string[];
+//# sourceMappingURL=qemu-dns.d.ts.map

package/dist/proxmox/qemu-dns.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"qemu-dns.d.ts","sourceRoot":"","sources":["../../src/proxmox/qemu-dns.ts"],"names":[],"mappings":"AAuBA,eAAO,MAAM,WAAW,eAAgB,OAAO,KAAG,MAAM,EAQvD,CAAC"}

package/dist/proxmox/qemu-errors.d.ts

@@ -1,5 +1,6 @@
 /** A QEMU write or observation this provider will not turn into a create or a delete. */
 export declare class QemuRefusedError extends Error {
+    readonly _tag = "QemuRefusedError";
     constructor(message: string);
 }
 //# sourceMappingURL=qemu-errors.d.ts.map

package/dist/proxmox/qemu-errors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"qemu-errors.d.ts","sourceRoot":"","sources":["../../src/proxmox/qemu-errors.ts"],"names":[],"mappings":"AAAA,yFAAyF;AACzF,qBAAa,gBAAiB,SAAQ,KAAK;IACzC,YAAY,OAAO,EAAE,MAAM,EAG1B;CACF"}
+{"version":3,"file":"qemu-errors.d.ts","sourceRoot":"","sources":["../../src/proxmox/qemu-errors.ts"],"names":[],"mappings":"AAAA,yFAAyF;AACzF,qBAAa,gBAAiB,SAAQ,KAAK;IACzC,QAAQ,CAAC,IAAI,sBAAsB;IACnC,YAAY,OAAO,EAAE,MAAM,EAG1B;CACF"}

package/dist/proxmox/qemu-form.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"qemu-form.d.ts","sourceRoot":"","sources":["../../src/proxmox/qemu-form.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EACL,KAAK,OAAO,EAKb,MAAM,iBAAiB,CAAC;AAEzB;;;;GAIG;AACH,eAAO,MAAM,YAAY,UAAW,OAAO,KAAG,MAAM,EAG6C,CAAC;AAElG,2FAA2F;AAC3F,eAAO,MAAM,IAAI,UAAW,OAAO,KAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAO1D,CAAC;AAEF;;;;;;;GAOG;AACH,eAAO,MAAM,UAAU,UAAW,OAAO;;CAGvC,CAAC;AAEH,qGAAqG;AACrG,eAAO,MAAM,UAAU,aAAO,CAAC"}
+{"version":3,"file":"qemu-form.d.ts","sourceRoot":"","sources":["../../src/proxmox/qemu-form.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EACL,KAAK,OAAO,EAKb,MAAM,iBAAiB,CAAC;AAGzB;;;;GAIG;AACH,eAAO,MAAM,YAAY,UAAW,OAAO,KAAG,MAAM,EAKnD,CAAC;AAEF,2FAA2F;AAC3F,eAAO,MAAM,IAAI,UAAW,OAAO,KAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAO1D,CAAC;AAEF;;;;;;;GAOG;AACH,eAAO,MAAM,UAAU,UAAW,OAAO;;CAGvC,CAAC;AAEH,qGAAqG;AACrG,eAAO,MAAM,UAAU,aAAO,CAAC"}

package/dist/proxmox/qemu-judge.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"qemu-judge.d.ts","sourceRoot":"","sources":["../../src/proxmox/qemu-judge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,KAAK,OAAO,EAAsD,MAAM,iBAAiB,CAAC;AAInG,MAAM,MAAM,QAAQ,GAAG;IACrB,mFAAmF;IACnF,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC,oFAAoF;IACpF,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,iEAAiE;IACjE,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;CACnC,CAAC;AAEF,eAAO,MAAM,KAAK,UAAW,OAAO,UAAU,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAAG,QA8CtE,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,eAAe,SAAU,MAAM,OAAO,MAAM,GAAG,SAAS,KAAG,MAAM,GAAG,SAI1B,CAAC"}
+{"version":3,"file":"qemu-judge.d.ts","sourceRoot":"","sources":["../../src/proxmox/qemu-judge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,KAAK,OAAO,EAAsD,MAAM,iBAAiB,CAAC;AAKnG,MAAM,MAAM,QAAQ,GAAG;IACrB,mFAAmF;IACnF,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC,oFAAoF;IACpF,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,iEAAiE;IACjE,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;CACnC,CAAC;AAEF,eAAO,MAAM,KAAK,UAAW,OAAO,UAAU,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAAG,QA8CtE,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,eAAe,SAAU,MAAM,OAAO,MAAM,GAAG,SAAS,KAAG,MAAM,GAAG,SAI1B,CAAC"}

package/dist/proxmox/qemu-lifecycle.d.ts

@@ -1,40 +1,45 @@
 import type { Input } from 'alchemy/Input';
 import * as nodes from '@distilled.cloud/proxmox/nodes';
 import * as Effect from 'effect/Effect';
-import { type VmAttributes, type VmProps } from './qemu-props.ts';
-export declare const readQemu: (props: VmProps) => Effect.Effect<VmAttributes | undefined, Error | import("effect/unstable/http/HttpClientError").HttpClientError | import("./credential-errors.ts").PveCredentialDenied, import("effect/unstable/http/HttpClient").HttpClient>;
+import type * as HttpClient from 'effect/unstable/http/HttpClient';
+import { QemuRefusedError } from './qemu-errors.ts';
+import type { VmAttributes, VmProps } from './qemu-props.ts';
+import { type QemuDiskResizeRefused } from './qemu-size.ts';
+type QemuLifecycleError = Effect.Error<ReturnType<typeof readQemu>> | nodes.PutNodeQemuResizeError | QemuRefusedError | QemuDiskResizeRefused;
+export declare const readQemu: (props: VmProps) => Effect.Effect<VmAttributes | undefined, Error | import("effect/unstable/http/HttpClientError").HttpClientError | import("./credential-errors.ts").PveCredentialDenied, HttpClient.HttpClient>;
 /** No purge, no skiplock, no destroy-unreferenced-disks. A missing config is already gone. */
-export declare const deleteQemu: (props: VmProps) => Effect.Effect<void | undefined, Error | import("./credential-errors.ts").PveCredentialDenied | nodes.ProxmoxOpError, import("effect/unstable/http/HttpClient").HttpClient>;
+export declare const deleteQemu: (props: VmProps) => Effect.Effect<void | undefined, Error | import("./credential-errors.ts").PveCredentialDenied | nodes.ProxmoxOpError, HttpClient.HttpClient>;
 export declare const qemuHandlers: {
     list: () => Effect.Effect<never[], never, never>;
     /**
      * ⛔ `Unowned` UNLESS STATE ALREADY VOUCHES FOR IT (C2). With no attributes this is Alchemy's
      *   adoption probe or the recovery read for an interrupted create (ownership/probe.ts); `settled`
-     *   is the same `judge` reconcile uses, so "proven ours" and "reconcile would write nothing" are
-     *   the same question asked once.
+     *   uses the same config comparison as reconcile. Disk growth is a post-create step, so its
+     *   drift cannot disown a VM after an interrupted/failed resize (measured 2026-10-05).
      */
     read: (args_0: {
         fqn: string;
         instanceId: string;
         olds: VmProps;
         output: VmAttributes | undefined;
-    }) => Effect.Effect<VmAttributes | undefined, Error | import("effect/unstable/http/HttpClientError").HttpClientError | import("./credential-errors.ts").PveCredentialDenied, import("effect/unstable/http/HttpClient").HttpClient>;
+    }) => Effect.Effect<VmAttributes | undefined, Error | import("effect/unstable/http/HttpClientError").HttpClientError | import("./credential-errors.ts").PveCredentialDenied, HttpClient.HttpClient>;
     diff: (args_0: {
         news: Input<VmProps>;
         olds: VmProps;
         output: VmAttributes | undefined;
     }) => Effect.Effect<{
-        readonly action: "noop" | "update";
-    } | undefined, Error | import("effect/unstable/http/HttpClientError").HttpClientError | import("./credential-errors.ts").PveCredentialDenied, import("effect/unstable/http/HttpClient").HttpClient>;
+        readonly action: 'noop' | 'update';
+    } | undefined, QemuLifecycleError, HttpClient.HttpClient>;
     reconcile: (args_0: {
         fqn: string;
         instanceId: string;
         news: VmProps;
         olds: VmProps | undefined;
         output: VmAttributes | undefined;
-    }) => Effect.Effect<VmAttributes, Error | import("effect/unstable/http/HttpClientError").HttpClientError | import("./credential-errors.ts").PveCredentialDenied, import("effect/unstable/http/HttpClient").HttpClient>;
+    }) => Effect.Effect<VmAttributes, QemuLifecycleError, HttpClient.HttpClient>;
     delete: ({ olds }: {
         olds: VmProps;
-    }) => Effect.Effect<void | undefined, Error | import("./credential-errors.ts").PveCredentialDenied | nodes.ProxmoxOpError, import("effect/unstable/http/HttpClient").HttpClient>;
+    }) => Effect.Effect<void | undefined, Error | import("./credential-errors.ts").PveCredentialDenied | nodes.ProxmoxOpError, HttpClient.HttpClient>;
 };
+export {};
 //# sourceMappingURL=qemu-lifecycle.d.ts.map

package/dist/proxmox/qemu-lifecycle.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"qemu-lifecycle.d.ts","sourceRoot":"","sources":["../../src/proxmox/qemu-lifecycle.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,KAAK,KAAK,MAAM,gCAAgC,CAAC;AACxD,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAOxC,OAAO,EACL,KAAK,YAAY,EACjB,KAAK,OAAO,EAMb,MAAM,iBAAiB,CAAC;AAwCzB,eAAO,MAAM,QAAQ,UAAW,OAAO,iOAapC,CAAC;AAEJ,8FAA8F;AAC9F,eAAO,MAAM,UAAU,UAAW,OAAO,+KAMyB,CAAC;AAmBnE,eAAO,MAAM,YAAY;IACvB,IAAI;IACJ;;;;;OAKG;IACH,IAAI;aAMG,MAAM;oBACC,MAAM;cACZ,OAAO;gBACL,YAAY,GAAG,SAAS;;IAQlC,IAAI;cAKI,KAAK,CAAC,OAAO,CAAC;cACd,OAAO;gBACL,YAAY,GAAG,SAAS;;;;IAwBlC,SAAS;aAOF,MAAM;oBACC,MAAM;cACZ,OAAO;cACP,OAAO,GAAG,SAAS;gBACjB,YAAY,GAAG,SAAS;;IAoDlC,MAAM,aAAa;QAAE,IAAI,EAAE,OAAO,CAAA;KAAE;CACrC,CAAC"}
+{"version":3,"file":"qemu-lifecycle.d.ts","sourceRoot":"","sources":["../../src/proxmox/qemu-lifecycle.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,KAAK,KAAK,MAAM,gCAAgC,CAAC;AACxD,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,KAAK,UAAU,MAAM,iCAAiC,CAAC;AAKnE,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAEpD,OAAO,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAI7D,OAAO,EAAE,KAAK,qBAAqB,EAAyC,MAAM,gBAAgB,CAAC;AAOnG,KAAK,kBAAkB,GACnB,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,QAAQ,CAAC,CAAC,GACzC,KAAK,CAAC,sBAAsB,GAC5B,gBAAgB,GAChB,qBAAqB,CAAC;AAE1B,eAAO,MAAM,QAAQ,UAAW,OAAO,kMAapC,CAAC;AAEJ,8FAA8F;AAC9F,eAAO,MAAM,UAAU,UAAW,OAAO,gJAMyB,CAAC;AAmBnE,eAAO,MAAM,YAAY;IACvB,IAAI;IACJ;;;;;OAKG;IACH,IAAI;aAMG,MAAM;oBACC,MAAM;cACZ,OAAO;gBACL,YAAY,GAAG,SAAS;;IAUlC,IAAI;cAKI,KAAK,CAAC,OAAO,CAAC;cACd,OAAO;gBACL,YAAY,GAAG,SAAS;;yBAEb,MAAM,GAAG,QAAQ;;IA4BtC,SAAS;aAOF,MAAM;oBACC,MAAM;cACZ,OAAO;cACP,OAAO,GAAG,SAAS;gBACjB,YAAY,GAAG,SAAS;;IAuDlC,MAAM,aAAa;QAAE,IAAI,EAAE,OAAO,CAAA;KAAE;CACrC,CAAC"}

package/dist/proxmox/qemu-props.d.ts

@@ -46,6 +46,16 @@ export interface VmProps extends WithTarget {
     boot?: string;
     /** e.g. `virtio-scsi-single`. */
     scsihw?: string;
+    /** Cloud-init DNS servers: PVE's `address-list` (IP addresses or DNS names). */
+    nameserver?: string;
+    /** Cloud-init DNS search domains, in PVE's wire spelling. */
+    searchdomain?: string;
+    /**
+     * Minimum disk sizes in GiB, e.g. `{ scsi0: 64 }`, grown after import completes.
+     * Existing larger disks are left alone. Lowering a previously declared target is refused.
+     * These are resize targets, never config fields; declare the corresponding disk slot too.
+     */
+    diskSizesGiB?: Partial<Record<`scsi${number}` | `ide${number}`, number>>;
     /**
      * `local-zfs:32` to create a new volume, or the live volume string as adopted —
      * `cephtb4:vm-101-disk-0,size=32G` (n is 0 to 30, pve-qemu-server's own `$MAX_SCSI_DISKS`).

package/dist/proxmox/qemu-props.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"qemu-props.d.ts","sourceRoot":"","sources":["../../src/proxmox/qemu-props.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAEhD,kGAAkG;AAClG,MAAM,MAAM,OAAO,GAAG,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC;AAEtC,MAAM,WAAW,OAAQ,SAAQ,UAAU;IACzC,uFAAuF;IACvF,IAAI,EAAE,MAAM,CAAC;IACb,iEAAiE;IACjE,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW;IACX,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,sCAAsC;IACtC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,yFAAyF;IACzF,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,+BAA+B;IAC/B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,iCAAiC;IACjC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;OAGG;IACH,CAAC,IAAI,EAAE,OAAO,MAAM,EAAE,GAAG,MAAM,GAAG,SAAS,CAAC;IAC5C;;;OAGG;IACH,CAAC,GAAG,EAAE,MAAM,MAAM,EAAE,GAAG,MAAM,GAAG,SAAS,CAAC;IAC1C;;;;OAIG;IACH,CAAC,SAAS,EAAE,MAAM,MAAM,EAAE,GAAG,MAAM,GAAG,SAAS,CAAC;IAChD,mFAAmF;IACnF,CAAC,QAAQ,EAAE,WAAW,MAAM,EAAE,GAAG,MAAM,GAAG,SAAS,CAAC;IACpD,gFAAgF;IAChF,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,GAAG,SAAS,CAAC;IAChD,kCAAkC;IAClC,UAAU,CAAC,EAAE,KAAK,CAAC;IACnB,wCAAwC;IACxC,OAAO,CAAC,EAAE,KAAK,CAAC;CACjB;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,2FAA2F;IAC3F,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAChC;AAKD,8FAA8F;AAC9F,eAAO,MAAM,OAAO;aAClB,GAAG,EAAE,CAAC;aACN,QAAQ,EAAE,EAAE;aACZ,GAAG,EAAE,EAAE;aACP,IAAI,EAAE,EAAE;aACR,MAAM,EAAE,CAAC;CACD,CAAC;AACX,MAAM,MAAM,aAAa,GAAG,MAAM,OAAO,OAAO,CAAC;AAEjD,4FAA4F;AAC5F,eAAO,MAAM,UAAU,QAAS,MAAM,KAAG,SAAS,CAAC,aAAa,EAAE,MAAM,CAAC,GAAG,SAM3E,CAAC;AAeF;;;;;GAKG;AACH,eAAO,MAAM,YAAY,QAAS,MAAM,KAAG,OACY,CAAC;AAExD,6GAA6G;AAC7G,eAAO,MAAM,aAAa,UAAW,OAAO,OAAO,MAAM,KAAG,OACR,CAAC;AAErD,wFAAwF;AACxF,eAAO,MAAM,YAAY,UAAW,OAAO,KAAG,MAAM,EAGzC,CAAC;AAEZ,iGAAiG;AACjG,eAAO,MAAM,SAAS,UAAW,OAAO,KAAG,MACmB,CAAC;AAE/D;;;;;;GAMG;AACH,eAAO,MAAM,YAAY,SAAU,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAQjF,CAAC"}
+{"version":3,"file":"qemu-props.d.ts","sourceRoot":"","sources":["../../src/proxmox/qemu-props.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAEhD,kGAAkG;AAClG,MAAM,MAAM,OAAO,GAAG,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC;AAEtC,MAAM,WAAW,OAAQ,SAAQ,UAAU;IACzC,uFAAuF;IACvF,IAAI,EAAE,MAAM,CAAC;IACb,iEAAiE;IACjE,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW;IACX,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,sCAAsC;IACtC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,yFAAyF;IACzF,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,+BAA+B;IAC/B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,iCAAiC;IACjC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,gFAAgF;IAChF,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,6DAA6D;IAC7D,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;;OAIG;IACH,YAAY,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO,MAAM,EAAE,GAAG,MAAM,MAAM,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;IACzE;;;OAGG;IACH,CAAC,IAAI,EAAE,OAAO,MAAM,EAAE,GAAG,MAAM,GAAG,SAAS,CAAC;IAC5C;;;OAGG;IACH,CAAC,GAAG,EAAE,MAAM,MAAM,EAAE,GAAG,MAAM,GAAG,SAAS,CAAC;IAC1C;;;;OAIG;IACH,CAAC,SAAS,EAAE,MAAM,MAAM,EAAE,GAAG,MAAM,GAAG,SAAS,CAAC;IAChD,mFAAmF;IACnF,CAAC,QAAQ,EAAE,WAAW,MAAM,EAAE,GAAG,MAAM,GAAG,SAAS,CAAC;IACpD,gFAAgF;IAChF,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,GAAG,SAAS,CAAC;IAChD,kCAAkC;IAClC,UAAU,CAAC,EAAE,KAAK,CAAC;IACnB,wCAAwC;IACxC,OAAO,CAAC,EAAE,KAAK,CAAC;CACjB;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,2FAA2F;IAC3F,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAChC;AAKD,8FAA8F;AAC9F,eAAO,MAAM,OAAO;aAClB,GAAG,EAAE,CAAC;aACN,QAAQ,EAAE,EAAE;aACZ,GAAG,EAAE,EAAE;aACP,IAAI,EAAE,EAAE;aACR,MAAM,EAAE,CAAC;CACD,CAAC;AACX,MAAM,MAAM,aAAa,GAAG,MAAM,OAAO,OAAO,CAAC;AAEjD,4FAA4F;AAC5F,eAAO,MAAM,UAAU,QAAS,MAAM,KAAG,SAAS,CAAC,aAAa,EAAE,MAAM,CAAC,GAAG,SAM3E,CAAC;AAiBF;;;;;GAKG;AACH,eAAO,MAAM,YAAY,QAAS,MAAM,KAAG,OACY,CAAC;AAExD,6GAA6G;AAC7G,eAAO,MAAM,aAAa,UAAW,OAAO,OAAO,MAAM,KAAG,OACR,CAAC;AAErD,wFAAwF;AACxF,eAAO,MAAM,YAAY,UAAW,OAAO,KAAG,MAAM,EAGzC,CAAC;AAEZ,iGAAiG;AACjG,eAAO,MAAM,SAAS,UAAW,OAAO,KAAG,MACmB,CAAC;AAE/D;;;;;;GAMG;AACH,eAAO,MAAM,YAAY,SAAU,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAQjF,CAAC"}

package/dist/proxmox/qemu-resize.d.ts

@@ -0,0 +1,10 @@
+import * as Effect from 'effect/Effect';
+import { type VmProps } from './qemu-props.ts';
+/**
+ * ⛔ Observe the unlocked, allocated disk before each resize, including recovery after import.
+ * Absolute targets make retries safe; `+60G` would grow again after interrupted state writes.
+ * This resource never starts a guest. Its caller can power on only after reconcile returns.
+ * SDK failures retain their generated tags; provider refusals are QemuDiskResizeRefused.
+ */
+export declare const resizeDisks: (props: VmProps) => Effect.Effect<undefined, Error | import("effect/unstable/http/HttpClientError").HttpClientError | import("./credential-errors.ts").PveCredentialDenied, import("effect/unstable/http/HttpClient").HttpClient>;
+//# sourceMappingURL=qemu-resize.d.ts.map

package/dist/proxmox/qemu-resize.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"qemu-resize.d.ts","sourceRoot":"","sources":["../../src/proxmox/qemu-resize.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,KAAK,OAAO,EAAgB,MAAM,iBAAiB,CAAC;AAqC7D;;;;;GAKG;AACH,eAAO,MAAM,WAAW,UAAW,OAAO,kNAuCtC,CAAC"}

package/dist/proxmox/qemu-size.d.ts

@@ -0,0 +1,20 @@
+import * as Effect from 'effect/Effect';
+import { type VmProps } from './qemu-props.ts';
+declare const QemuDiskResizeRefused_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "QemuDiskResizeRefused";
+} & Readonly<A>;
+export declare class QemuDiskResizeRefused extends QemuDiskResizeRefused_base<{
+    readonly disk: string;
+    readonly message: string;
+}> {
+}
+/** PVE config reports binary sizes, including fractional G and integer M/K for imported images. */
+export declare const diskBytes: (config: string | undefined) => number | undefined;
+/** Validate the whole declaration before any write, including a later attempted target decrease. */
+export declare const validateDiskSizes: (props: VmProps, olds?: VmProps) => Effect.Effect<undefined, QemuDiskResizeRefused, never>;
+/** Capacity drift drives reconcile; recovery ownership ignores it because resize follows create. */
+export declare const diskSizeDrift: (props: VmProps, config: Record<string, string>) => string[];
+/** Missing slots may be imported by the upcoming config write; unreadable existing sizes fail closed. */
+export declare const checkLiveDiskSizes: (props: VmProps, config: Record<string, string>, allowMissing?: boolean) => Effect.Effect<undefined, QemuDiskResizeRefused, never>;
+export {};
+//# sourceMappingURL=qemu-size.d.ts.map

package/dist/proxmox/qemu-size.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"qemu-size.d.ts","sourceRoot":"","sources":["../../src/proxmox/qemu-size.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,KAAK,OAAO,EAA6B,MAAM,iBAAiB,CAAC;;;;AAG1E,qBAAa,qBAAsB,SAAQ,2BAA0C;IACnF,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B,CAAC;CAAG;AAEL,mGAAmG;AACnG,eAAO,MAAM,SAAS,WAAY,MAAM,GAAG,SAAS,KAAG,MAAM,GAAG,SAO/D,CAAC;AAEF,oGAAoG;AACpG,eAAO,MAAM,iBAAiB,UAAW,OAAO,SAAS,OAAO,2DAwC5D,CAAC;AAEL,oGAAoG;AACpG,eAAO,MAAM,aAAa,UAAW,OAAO,UAAU,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAAG,MAAM,EAKzC,CAAC;AAE7C,yGAAyG;AACzG,eAAO,MAAM,kBAAkB,UACtB,OAAO,UACN,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,mFAmB5B,CAAC"}

package/dist/proxmox/qemu-spec.d.ts

@@ -0,0 +1,25 @@
+/** QEMU config forms and vendor guards, separated from lifecycle to keep both reviewable. */
+import { createForm } from './qemu-form.ts';
+import { type VmAttributes, type VmProps } from './qemu-props.ts';
+export declare const attributesOf: (live: Record<string, unknown>, props: VmProps) => VmAttributes;
+/**
+ * ⚠️ KEPT ONLY TO SATISFY `PveSpec`'S REQUIRED FIELD — `qemu-judge.ts`'s `judge` is what diff and
+ *   reconcile actually decide by, since a plain string compare is exactly the bug C1 found (it
+ *   never matches the "new disk" or MAC-less spellings a declaration may use).
+ */
+declare const matches: (attributes: VmAttributes, props: VmProps) => boolean;
+export declare const spec: {
+    attributes: typeof attributesOf;
+    collection: (props: VmProps) => string;
+    createForm: typeof createForm;
+    endpoint: {
+        create: string;
+        update: string;
+    };
+    matches: typeof matches;
+    path: (props: VmProps) => string;
+    updateForm: typeof import("./qemu-form.ts").form;
+};
+export declare const guardCreate: (props: VmProps, presence: boolean) => import("effect/Effect").Effect<void>, guardUpdate: (props: VmProps) => import("effect/Effect").Effect<void>;
+export {};
+//# sourceMappingURL=qemu-spec.d.ts.map

package/dist/proxmox/qemu-spec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"qemu-spec.d.ts","sourceRoot":"","sources":["../../src/proxmox/qemu-spec.ts"],"names":[],"mappings":"AAAA,6FAA6F;AAC7F,OAAO,EAAE,UAAU,EAAc,MAAM,gBAAgB,CAAC;AACxD,OAAO,EACL,KAAK,YAAY,EACjB,KAAK,OAAO,EAMb,MAAM,iBAAiB,CAAC;AAIzB,eAAO,MAAM,YAAY,SAAU,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,SAAS,OAAO,KAAG,YAI3E,CAAC;AAEH;;;;GAIG;AACH,QAAA,MAAM,OAAO,eAAgB,YAAY,SAAS,OAAO,YAG2B,CAAC;AAErF,eAAO,MAAM,IAAI;;wBAEK,OAAO;;;QAGzB,MAAM;QACN,MAAM;;;kBAGM,OAAO;;CAEmB,CAAC;AAE3C,eAAO,MAAQ,WAAW,+EAAE,WAAW,0DAAqB,CAAC"}

package/dist/verify/fake-engine.d.ts

@@ -53,7 +53,7 @@ export type DriftRow = {
     readonly action: string;
 };
 export interface FakeEngine {
-    /** Plan and apply `body`, as `alchemy deploy --adopt` would; resolves to the planned actions. */
+    /** Plan and apply `body` with the configured adoption policy; resolves to planned actions. */
     readonly deploy: (body: Body) => Promise<Record<string, string>>;
     /** Verify `body` against what the earlier deploys recorded. */
     readonly verify: (body: Body, options?: VerifyOptions) => Promise<AdoptReport>;
@@ -78,7 +78,9 @@ export interface FakeEngine {
  * hands in its real provider over a fake transport (proxmox/ceph-pool-adopt.test.ts).
  * ⚠️ THE CASTS ARE AT THE ENGINE'S TYPED BOUNDARY — openbao/fake-stack.ts has the reasoning.
  */
-export declare const engineOver: <ROut, E, RIn>(layer: Layer.Layer<ROut, E, RIn>) => FakeEngine;
+export declare const engineOver: <ROut, E, RIn>(layer: Layer.Layer<ROut, E, RIn>, options?: {
+    readonly adopt?: boolean;
+}) => FakeEngine;
 /** The fake family over `cloud`. */
 export declare const fakeEngine: (cloud: Cloud) => FakeEngine;
 //# sourceMappingURL=fake-engine.d.ts.map

package/dist/verify/fake-engine.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"fake-engine.d.ts","sourceRoot":"","sources":["../../src/verify/fake-engine.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,KAAK,OAAO,MAAM,SAAS,CAAC;AAKnC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,EAAE,KAAK,WAAW,EAAE,KAAK,aAAa,EAAiB,MAAM,aAAa,CAAC;AAElF,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AACD,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,KAAM,SAAQ,OAAO,CAAC,QAAQ,CAAC,YAAY,EAAE,UAAU,EAAE,eAAe,CAAC;CAAG;AAC7F,eAAO,MAAM,KAAK,8BAAwC,CAAC;AAE3D,4EAA4E;AAC5E,MAAM,WAAW,KAAM,SAAQ,OAAO,CAAC,QAAQ,CAAC,YAAY,EAAE,UAAU,EAAE,eAAe,CAAC;CAAG;AAC7F,eAAO,MAAM,KAAK,8BAAwC,CAAC;AAE3D;;;;GAIG;AACH,MAAM,WAAW,QAAS,SAAQ,OAAO,CAAC,QAAQ,CAAC,eAAe,EAAE,UAAU,EAAE,eAAe,CAAC;CAAG;AACnG,eAAO,MAAM,QAAQ,iCAA8C,CAAC;AAEpE,gGAAgG;AAChG,MAAM,WAAW,KAAK;IACpB,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnC,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAC9B,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC;CAC1B;AAED,eAAO,MAAM,OAAO,UAAU,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAAQ,KAI1D,CAAC;AAEH,8CAA8C;AAC9C,eAAO,MAAM,QAAQ,UAAW,KAAK,KAAG,MAAM,EAC2C,CAAC;AAyB1F,4FAA4F;AAC5F,eAAO,MAAM,cAAc,UAAW,KAAK,8GAmCxC,CAAC;AAEJ,oFAAoF;AACpF,MAAM,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;AAK5D,gGAAgG;AAChG,MAAM,MAAM,QAAQ,GAAG;IAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEnD,MAAM,WAAW,UAAU;IACzB,iGAAiG;IACjG,QAAQ,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,IAAI,KAAK,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACjE,+DAA+D;IAC/D,QAAQ,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,EAAE,aAAa,KAAK,OAAO,CAAC,WAAW,CAAC,CAAC;IAC/E;;;;;;;;OAQG;IACH,QAAQ,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,KAAK,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;IAClE;;;OAGG;IACH,QAAQ,CAAC,MAAM,EAAE,MAAM,MAAM,CAAC;CAC/B;AAED;;;;GAIG;AACH,eAAO,MAAM,UAAU,GAAI,IAAI,EAAE,CAAC,EAAE,GAAG,SAAS,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,KAAG,UAmD3E,CAAC;AAEF,oCAAoC;AACpC,eAAO,MAAM,UAAU,UAAW,KAAK,KAAG,UAA+C,CAAC"}
+{"version":3,"file":"fake-engine.d.ts","sourceRoot":"","sources":["../../src/verify/fake-engine.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,KAAK,OAAO,MAAM,SAAS,CAAC;AAKnC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,EAAE,KAAK,WAAW,EAAE,KAAK,aAAa,EAAiB,MAAM,aAAa,CAAC;AAElF,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AACD,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,KAAM,SAAQ,OAAO,CAAC,QAAQ,CAAC,YAAY,EAAE,UAAU,EAAE,eAAe,CAAC;CAAG;AAC7F,eAAO,MAAM,KAAK,8BAAwC,CAAC;AAE3D,4EAA4E;AAC5E,MAAM,WAAW,KAAM,SAAQ,OAAO,CAAC,QAAQ,CAAC,YAAY,EAAE,UAAU,EAAE,eAAe,CAAC;CAAG;AAC7F,eAAO,MAAM,KAAK,8BAAwC,CAAC;AAE3D;;;;GAIG;AACH,MAAM,WAAW,QAAS,SAAQ,OAAO,CAAC,QAAQ,CAAC,eAAe,EAAE,UAAU,EAAE,eAAe,CAAC;CAAG;AACnG,eAAO,MAAM,QAAQ,iCAA8C,CAAC;AAEpE,gGAAgG;AAChG,MAAM,WAAW,KAAK;IACpB,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnC,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAC9B,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC;CAC1B;AAED,eAAO,MAAM,OAAO,UAAU,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAAQ,KAI1D,CAAC;AAEH,8CAA8C;AAC9C,eAAO,MAAM,QAAQ,UAAW,KAAK,KAAG,MAAM,EAC2C,CAAC;AAyB1F,4FAA4F;AAC5F,eAAO,MAAM,cAAc,UAAW,KAAK,8GAmCxC,CAAC;AAEJ,oFAAoF;AACpF,MAAM,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;AAK5D,gGAAgG;AAChG,MAAM,MAAM,QAAQ,GAAG;IAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEnD,MAAM,WAAW,UAAU;IACzB,8FAA8F;IAC9F,QAAQ,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,IAAI,KAAK,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACjE,+DAA+D;IAC/D,QAAQ,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,EAAE,aAAa,KAAK,OAAO,CAAC,WAAW,CAAC,CAAC;IAC/E;;;;;;;;OAQG;IACH,QAAQ,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,KAAK,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;IAClE;;;OAGG;IACH,QAAQ,CAAC,MAAM,EAAE,MAAM,MAAM,CAAC;CAC/B;AAED;;;;GAIG;AACH,eAAO,MAAM,UAAU,GAAI,IAAI,EAAE,CAAC,EAAE,GAAG,SAC9B,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,YACvB;IAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,KACpC,UAmDF,CAAC;AAEF,oCAAoC;AACpC,eAAO,MAAM,UAAU,UAAW,KAAK,KAAG,UAA+C,CAAC"}

package/docs/postgres-schema.md

@@ -97,7 +97,28 @@ empty, or when `cascade: true` is declared.
   as the same typed tag. `2BP01` is class `2B`, so both transports wrap it as `UnknownError`
   with the raw code on `reason.cause.code` — the classifier reads that code, not the tag.
 - With `cascade: true` the drop is `DROP SCHEMA IF EXISTS … CASCADE` and removes the schema's
-  objects too. The `IF EXISTS` makes delete idempotent.
+  objects too — and, because Postgres cascades through `pg_depend`, anything in ANOTHER schema
+  that depends on them (a view, a foreign key, a trigger another stack owns). So before a
+  cascade drop the atomic block counts those dependents and refuses with
+  `PostgresSchemaCascadeCrossSchemaRefused`, naming the COUNT only (never another owner's
+  object names). A dependent whose catalog class is not recognised counts as foreign: the check
+  fails closed. The `IF EXISTS` makes delete idempotent.
+- Known limit: `cascade: true` over a schema that holds a sequence (every serial or identity
+  column owns one) is refused with `PostgresSchemaCascadeSequencesRefused` (`HF004`, count only).
+  A sequence cannot be locked, so a concurrent view over it could escape the dependency proof;
+  drop the schema's contents first, then declare `cascade: false`.
+- The proof and the drop are ONE statement. The re-read, the emptiness (or dependents) check and
+  the `DROP` run in a single `DO` block, so on the runner transport it is one `psql`. The block
+  takes `pg_advisory_xact_lock(<schema oid>)`, re-verifies the persisted `oid` + `owner` inside
+  the transaction, and only then drops; a schema replaced after the read is
+  `PostgresSchemaDeleteForeignRefused`. The lock is cooperative (it serialises two runs of this
+  provider, not an arbitrary `CREATE TABLE`); a creator that slips in after the check is still
+  caught by the server's own `2BP01` on a plain drop.
+- Every session pins `search_path = pg_catalog, pg_temp` (`search-path.ts`) and every SQL
+  builder writes `pg_catalog.<name>`, so a role that can create objects in a schema on its
+  path cannot forge `pg_namespace` and fake the delete proof. Runner path: the script is
+  prefixed with the `SET`; socket path: the one reserved connection an operation uses is pinned
+  first (`search-path.test.ts` greps the builders for an unqualified catalog name).
 - A `cascade` change is a real change: it answers `update` (compared against the previous
   declaration's persisted props), so the flipped value reaches state and the eventual drop
   uses it — a schema first declared `cascade: true` stops dropping with CASCADE once the

package/docs/proxmox-qemu-resize.md

@@ -0,0 +1,62 @@
+# Cloud-init DNS and imported disk growth
+
+```ts
+Proxmox.Vm('talos', {
+  target,
+  node: 'n2',
+  vmid: 10000,
+  scsi0: 'cephtb4:0,import-from=cephfs-tb4:import/talos.raw',
+  diskSizesGiB: { scsi0: 64 },
+  ide2: 'cephtb4:cloudinit',
+  ipconfig0: 'ip=10.20.16.20/24,gw=10.20.16.254',
+  nameserver: '10.20.16.254',
+  searchdomain: 'example.internal',
+});
+```
+
+`diskSizesGiB` declares minimum capacity in positive integer GiB. Declare the disk
+slot alongside its target. Equal or larger live disks need no resize; lowering a
+previously declared target is refused with `QemuDiskResizeRefused`, which callers
+can handle with `Effect.catchTag`. Removing a target leaves capacity unmanaged.
+Unsupported slots, CD-ROM/cloud-init drives and unreadable live sizes are refused.
+
+The provider waits for import, reads the allocated disk, sends an absolute target
+through the generated `putNodeQemuResize` operation, waits for its task, and verifies
+the resulting capacity. An interrupted create resumes without `--adopt` when its
+config matches, even if disk growth remains unfinished. Each resize checks the raw
+VM lock first; lock waits and resize task polling share a 60-observation budget per
+disk. A persistent lock raises `QemuDiskResizeRefused` without a resize write.
+Absolute targets let retries finish growth without adding capacity twice.
+`size=` in a volume config string is still observed metadata: omit it when
+using a resize target. An unrelated update never resends the import source.
+
+This resource never starts a VM. Complete its reconciliation before the separate
+power-on step. Resizing an existing guest does not grow its partitions/filesystems.
+
+DNS keys use the same declared-key comparison as `ipconfig0`: omitted keys remain
+unmanaged. `nameserver` enforces the generated `address-list` constraint; PVE permits
+IP addresses or DNS names, separated by whitespace, commas or semicolons. The provider
+preserves the supplied spelling. `searchdomain` has no extra schema constraint.
+
+Schema provenance: `codegen/manifest.json`, pve-manager **9.2.11/f6997e698c7933ea**,
+SHA-256 `9def8f13611184ee1c7d0399713130dfc4a065701d0d91a69b9c03df929344e9`.
+QEMU resize already exists in both generated surfaces: distilled's `nodes.ts` and
+the legacy generator's packed `nodes-node-qemu-vmid-mtunnel.ts`. A filename search
+for `qemu-vmid-resize.ts` misses the latter; neither output needs hand editing.
+Both caches were recovered byte-for-byte from public vendor sources, then
+`bun codegen/constraints.ts` generated the resize guard. The existing type generator
+already supports the operation. No generated file was edited by hand.
+
+Recovery used the vendor Makefile's concatenation order: `api-viewer/apidata.js`
+and `api-viewer/PVEAPI.js` from proxmox/pve-docs
+`4e7ff22c70eb35c63e65b0ba65c98980cb4d7bf5`, then `src/api-viewer/APIViewer.js`
+from proxmox/proxmox-widget-toolkit `9204a77880eb31aff6ffc8bcf65ca48539685ab1`.
+The result is exactly 4,337,847 bytes and the manifest SHA-256 above. PBS's 1,508,860
+bytes were recovered from the public `proxmox-backup-docs_4.2.3-1_all.deb`, matching
+the manifest's full SHA-256 (the recorded server version is 4.2.6-1, running 4.2.3).
+No host was contacted. Tests cover generated constraints/types and fake SDK transport.
+
+The named format's semantics come from
+[PVE::JSONSchema](https://github.com/proxmox/pve-common/blob/defd246f31f327463f901a2daaf8dc52efcc5a97/src/PVE/JSONSchema.pm)
+and `PVE::ParseUtils` at the same commit, inspected 2026-10-05. This is vendor-source
+and fake-transport evidence; no live PVE call or Talos boot was performed.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@homeflare/alchemy",
-  "version": "0.45.0",
+  "version": "0.46.1",
   "description": "Custom Alchemy providers for Cloudflare, Proxmox, OpenBao, Forgejo, Talos, launchd and Caddy, and a verifier that proves adoptions are no-ops.",
   "homepage": "https://github.com/taslabs-net/homeflare-kit/tree/main/packages/alchemy#readme",
   "bugs": "https://github.com/taslabs-net/homeflare-kit/issues",

package/src/postgres/connection.ts

@@ -20,6 +20,7 @@ import * as Layer from 'effect/Layer';
 import type { SqlError } from 'effect/unstable/sql/SqlError';
 import type { PgExecutor } from './database-sql.ts';
 import { type PsqlRunner, makePsqlExecutor } from './psql-executor.ts';
+import { pinnedSocketExecutor } from './search-path.ts';
 
 /** What a stack passes to reach one cluster. `host` may be a socket directory (one beginning
  * with `/` expands to `${host}/.s.PGSQL.${port}` — measured in
@@ -109,21 +110,16 @@ export const withPg = <A, E>(
       });
     }
     const pool = yield* PostgresPool;
+    // ⛔ ONE RESERVED, PINNED CONNECTION FOR THE WHOLE OPERATION (`search-path.ts`): the pin is a
+    // session setting, so a pool checkout per statement would run most statements unpinned — and
+    // would autocommit CREATE before GRANT. `Effect.scoped` releases the reservation; the pool
+    // layer below closes the pool after.
     return yield* Effect.provide(
-      Effect.flatMap(PgClient.PgClient, (pg) =>
-        build(
-          {
-            unsafe: (sql, params) => pg.unsafe(sql, params),
-            // One reserved connection (`SqlClient.withTransaction`). A pool checkout per
-            // statement would autocommit CREATE before GRANT.
-            transaction: (statements) =>
-              pg.withTransaction(
-                Effect.gen(function* () {
-                  for (const sql of statements) yield* pg.unsafe(sql).pipe(Effect.asVoid);
-                }),
-              ),
-          },
-          { database: target.database },
+      Effect.scoped(
+        Effect.flatMap(PgClient.PgClient, (pg) =>
+          Effect.flatMap(pinnedSocketExecutor(pg), (executor) =>
+            build(executor, { database: target.database }),
+          ),
         ),
       ),
       pool(target),

package/src/postgres/database-bigint-serialization.test.ts

@@ -76,10 +76,10 @@ const wireAccuratePg = (seed?: {
   return {
     unsafe: <A extends object>(text: string, params: ReadonlyArray<unknown> = []) =>
       Effect.suspend(() => {
-        if (text.startsWith('SELECT 1 AS present FROM pg_roles')) {
+        if (text.startsWith('SELECT 1 AS present FROM pg_catalog.pg_roles')) {
           return Effect.succeed([{ present: 1 }] as unknown as ReadonlyArray<A>);
         }
-        if (text.includes('FROM pg_database')) {
+        if (text.includes('FROM pg_catalog.pg_database')) {
           if (created === undefined) return Effect.succeed([] as unknown as ReadonlyArray<A>);
           const row = wireAccurateRow(text, created.oid, created.connectionLimit);
           return Effect.succeed([row] as unknown as ReadonlyArray<A>);

package/src/postgres/database-sql.ts

@@ -103,7 +103,7 @@ export const isDuplicateDatabaseRace = (error: SqlError): boolean => {
   );
 };
 
-const ROLE_EXISTS_SQL = 'SELECT 1 AS present FROM pg_roles WHERE rolname = $1';
+const ROLE_EXISTS_SQL = 'SELECT 1 AS present FROM pg_catalog.pg_roles WHERE rolname = $1';
 
 /** `OWNER` is checked against `pg_roles` before any `CREATE`, so a missing role is
  * `PostgresDatabaseOwnerMissing` at reconcile time rather than the server's own
@@ -114,7 +114,7 @@ export const roleExists = (pg: PgExecutor, role: string): Effect.Effect<boolean,
     (rows) => rows.length > 0,
   );
 
-const DATABASE_EXISTS_SQL = 'SELECT 1 AS present FROM pg_database WHERE datname = $1';
+const DATABASE_EXISTS_SQL = 'SELECT 1 AS present FROM pg_catalog.pg_database WHERE datname = $1';
 
 /**
  * Does one database of the cluster exist? `Postgres.Schema` runs this over the FAMILY
@@ -152,8 +152,8 @@ export const databaseExists = (pg: PgExecutor, name: string): Effect.Effect<bool
 const SELECT_DATABASE_SQL = `SELECT
     d.oid AS oid,
     d.datname AS name,
-    pg_get_userbyid(d.datdba) AS owner,
-    pg_encoding_to_char(d.encoding) AS encoding,
+    pg_catalog.pg_get_userbyid(d.datdba) AS owner,
+    pg_catalog.pg_encoding_to_char(d.encoding) AS encoding,
     CASE d.datlocprovider
       WHEN 'b' THEN 'builtin' WHEN 'i' THEN 'icu' WHEN 'c' THEN 'libc'
       ELSE 'libc'
@@ -164,8 +164,8 @@ const SELECT_DATABASE_SQL = `SELECT
     d.datconnlimit AS "connectionLimit",
     d.datistemplate AS "isTemplate",
     t.spcname AS tablespace
-  FROM pg_database d
-  JOIN pg_tablespace t ON t.oid = d.dattablespace
+  FROM pg_catalog.pg_database d
+  JOIN pg_catalog.pg_tablespace t ON t.oid = d.dattablespace
   WHERE d.datname = $1`;
 
 /** The read: one bound `SELECT` on `pg_database`, joined to the two functions that turn its raw

package/src/postgres/fake-grants-read.ts

@@ -96,17 +96,17 @@ export const answerRead = <A extends object>(
 ): Effect.Effect<ReadonlyArray<A>, SqlError> | undefined => {
   const { acl, schemas, roles, databases, tables } = model;
 
-  if (text.startsWith('SELECT 1 AS present FROM pg_roles')) {
+  if (text.startsWith('SELECT 1 AS present FROM pg_catalog.pg_roles')) {
     return Effect.succeed(
       (roles.has(params[0] as string) ? [{ present: 1 }] : []) as unknown as ReadonlyArray<A>,
     );
   }
-  if (text.startsWith('SELECT 1 AS present FROM pg_namespace')) {
+  if (text.startsWith('SELECT 1 AS present FROM pg_catalog.pg_namespace')) {
     return Effect.succeed(
       (schemas.has(params[0] as string) ? [{ present: 1 }] : []) as unknown as ReadonlyArray<A>,
     );
   }
-  if (text.startsWith('SELECT 1 AS present FROM pg_database')) {
+  if (text.startsWith('SELECT 1 AS present FROM pg_catalog.pg_database')) {
     return Effect.succeed(
       (databases.has(params[0] as string) ? [{ present: 1 }] : []) as unknown as ReadonlyArray<A>,
     );

package/src/postgres/fake-role-sql.ts

@@ -97,7 +97,7 @@ export const applyRoleStatement = <A extends object>(
   text: string,
   params: ReadonlyArray<unknown>,
 ): Effect.Effect<ReadonlyArray<A>, SqlError> | undefined => {
-  if (text.includes('FROM pg_auth_members')) {
+  if (text.includes('FROM pg_catalog.pg_auth_members')) {
     const member = params[0] as string;
     const rows = [...state.memberships]
       .filter((key) => key.split('\0')[0] === member)
@@ -119,7 +119,7 @@ export const applyRoleStatement = <A extends object>(
     return Effect.succeed(rows as unknown as ReadonlyArray<A>);
   }
 
-  if (text.includes('FROM pg_roles r')) {
+  if (text.includes('FROM pg_catalog.pg_roles r')) {
     const name = params[0] as string;
     const row = state.roleRows.get(name);
     // pg_roles answers no password value (S25): even a seeded seal is not read back — state

package/src/postgres/fake-schema-drop.ts

@@ -0,0 +1,75 @@
+/**
+ * The fake's reading of the atomic `DO` drop `schema-drop-sql.ts` emits.
+ *
+ * ⛔ IT PARSES ITS OWN OUTPUT (the rule `fake-sql.ts` documents): the four `DECLARE` literals are
+ *   read back out of the generated text and the block's decisions are replayed against the
+ *   in-memory catalog in the same order the SQL makes them — absent → return, identity, empty or
+ *   cross-schema dependents, drop. A changed block shape fails the parse loudly.
+ */
+import * as Effect from 'effect/Effect';
+import { SqlError, UnknownError } from 'effect/unstable/sql/SqlError';
+import { parseLiteral } from './fake-sql-quote.ts';
+import { parseDropSchema } from './fake-sql-parse.ts';
+import type { FakeSchemaState } from './fake-schema-sql.ts';
+import {
+  CASCADE_SEQUENCES,
+  CROSS_SCHEMA_DEPENDENTS,
+  IDENTITY_CHANGED,
+  NOT_EMPTY,
+} from './schema-drop-sql.ts';
+
+const refusal = (code: string, message: string): SqlError =>
+  new SqlError({
+    reason: new UnknownError({
+      cause: Object.assign(new Error(message), { code }),
+      message,
+      operation: 'DO',
+    }),
+  });
+
+/** `E'…'` literal at the end of a generated line, decoded. */
+const literalAfter = (body: string, label: string): string => {
+  const match = new RegExp(`${label} [a-z]+ := (E'(?:[^']|'')*');`).exec(body);
+  if (match === null) throw new Error(`fake-sql: could not parse DO block ${label}: ${body}`);
+  return parseLiteral(match[1] as string);
+};
+
+export const applyAtomicDrop = (
+  state: FakeSchemaState,
+  text: string,
+): Effect.Effect<ReadonlyArray<never>, SqlError> => {
+  const body = parseLiteral(text.slice('DO '.length));
+  const name = literalAfter(body, 'v_name');
+  const owner = literalAfter(body, 'v_owner');
+  const oid = Number(/v_oid oid := (\d+);/.exec(body)?.[1]);
+  const cascade = /v_cascade boolean := (true|false);/.exec(body)?.[1] === 'true';
+  const drop = /EXECUTE (E'(?:[^']|'')*');/.exec(body)?.[1];
+  if (drop === undefined || Number.isNaN(oid)) {
+    throw new Error(`fake-sql: could not parse DO block: ${body}`);
+  }
+  if (parseDropSchema(parseLiteral(drop)).name !== name) {
+    throw new Error('fake-sql: DO block drops a different schema than it proves');
+  }
+  const row = state.schemas.get(name);
+  if (row === undefined) return Effect.succeed([]);
+  if (row.oid !== oid || row.owner !== owner) {
+    return Effect.fail(refusal(IDENTITY_CHANGED, 'schema identity changed'));
+  }
+  if (!cascade) {
+    if (state.relationsIn.has(name)) return Effect.fail(refusal(NOT_EMPTY, 'schema not empty'));
+  } else {
+    const sequences = state.sequencesIn.get(name) ?? 0;
+    if (sequences > 0) {
+      return Effect.fail(refusal(CASCADE_SEQUENCES, `cascade sequences: ${String(sequences)}`));
+    }
+    const outside = state.dependentsOutside.get(name) ?? 0;
+    if (outside > 0) {
+      return Effect.fail(
+        refusal(CROSS_SCHEMA_DEPENDENTS, `cross-schema dependents: ${String(outside)}`),
+      );
+    }
+    state.relationsIn.delete(name);
+  }
+  state.schemas.delete(name);
+  return Effect.succeed([]);
+};

package/src/postgres/fake-schema-sql.ts

@@ -10,6 +10,7 @@
  */
 import * as Effect from 'effect/Effect';
 import { SqlError, SqlSyntaxError, UnknownError } from 'effect/unstable/sql/SqlError';
+import { applyAtomicDrop } from './fake-schema-drop.ts';
 import { parseCommentSchema, parseCreateSchema, parseDropSchema } from './fake-sql-parse.ts';
 import type { PostgresSchemaAttributes } from './schema-attrs.ts';
 
@@ -18,6 +19,11 @@ export interface FakeSchemaState {
   readonly schemas: Map<string, PostgresSchemaAttributes>;
   /** Names of schemas this fake pretends hold at least one relation. */
   readonly relationsIn: Set<string>;
+  /** Per schema name: how many objects in OTHER schemas depend on it (what the atomic drop's
+   * `pg_depend` count answers). Absent means none. */
+  readonly dependentsOutside: Map<string, number>;
+  /** Per schema name: how many sequences it holds (a cascade drop refuses any: `HF004`). */
+  readonly sequencesIn: Map<string, number>;
   /** What `current_database()` answers, and the stamp on every read row. */
   readonly database: string;
   /** What `current_user` answers, and the owner of a `CREATE SCHEMA` without `AUTHORIZATION`. */
@@ -44,6 +50,9 @@ export const applySchemaStatement = <A extends object>(
   text: string,
   params: ReadonlyArray<unknown>,
 ): Effect.Effect<ReadonlyArray<A>, SqlError> | undefined => {
+  // The atomic drop's text contains every marker below; matched first, by its own prefix.
+  if (text.startsWith('DO ')) return applyAtomicDrop(state, text);
+
   if (text.startsWith('SELECT current_database()')) {
     return Effect.succeed([{ database: state.database }] as unknown as ReadonlyArray<A>);
   }
@@ -57,7 +66,7 @@ export const applySchemaStatement = <A extends object>(
     return Effect.succeed([{ empty: !state.relationsIn.has(name) }] as unknown as ReadonlyArray<A>);
   }
 
-  if (text.includes('FROM pg_namespace')) {
+  if (text.includes('FROM pg_catalog.pg_namespace')) {
     const name = params[0] as string;
     const row = state.schemas.get(name);
     return Effect.succeed(