@homeflare/distilled-proxmox 0.3.0 → 0.3.2

package/src/protocol-form.ts

@@ -0,0 +1,49 @@
+/**
+ * PVE's form arrays use repeated keys, never Stripe's indexed fields.
+ *
+ * PVE 9.2.11 notification schemas declare arrays (mailto, header, target,
+ * match-field, delete). The vendor UI submits repeated keys; its Perl
+ * URL-encoded decoder joins them with NUL before schema validation. The
+ * existing kit notification-target-form.ts records that decoder/UI evidence
+ * (2026-09-14); no production multi-header write was made for this fix.
+ *
+ * Keep core's credentials, labels, schema key mapping, and query encoding.
+ * Only top-level scalar list entries in a form body change: header[0]=a
+ * becomes header=a. A property-string item's commas remain inside the item.
+ * A scalar comma list, an embedded NUL, or a GET/DELETE query is unchanged.
+ */
+import * as API from "@distilled.cloud/core/api";
+import * as Effect from "effect/Effect";
+import * as Layer from "effect/Layer";
+import * as HttpClientRequest from "effect/unstable/http/HttpClientRequest";
+
+const repeatedFormKeys = (request: HttpClientRequest.HttpClientRequest) => {
+  if (
+    request.body._tag !== "Uint8Array" ||
+    request.body.contentType !== "application/x-www-form-urlencoded"
+  )
+    return request;
+  const fields = new URLSearchParams(
+    new TextDecoder().decode(request.body.body),
+  );
+  const repeated: [string, string][] = [];
+  for (const [key, value] of fields) {
+    repeated.push([key.replace(/^([^\[\]]+)\[\d+\]$/, "$1"), value]);
+  }
+  return HttpClientRequest.bodyUrlParams(request, repeated);
+};
+
+export const withPveFormArrays = (
+  base: Layer.Layer<API.Protocol>,
+): Layer.Layer<API.Protocol> =>
+  Layer.effect(
+    API.Protocol,
+    Effect.gen(function* () {
+      const protocol = yield* API.Protocol;
+      return API.Protocol.of({
+        ...protocol,
+        encode: (args) =>
+          protocol.encode(args).pipe(Effect.map(repeatedFormKeys)),
+      });
+    }),
+  ).pipe(Layer.provide(base));

package/src/protocol.ts

@@ -81,6 +81,7 @@ import {
   type RestErrorEnvelope,
 } from "@distilled.cloud/core/protocol-rest";
 import { Credentials, type Config } from "./credentials.ts";
+import { withPveFormArrays } from "./protocol-form.ts";
 import {
   ParameterVerificationFailed,
   UnknownProxmoxError,
@@ -112,6 +113,32 @@ export type ProxmoxOpContext = Credentials | HttpClient.HttpClient;
 const errorEnvelope = (body: unknown): RestErrorEnvelope | undefined => {
   if (body === null || typeof body !== "object") return undefined;
   const b = body as Record<string, unknown>;
+  // PVE missing backup/interface/alias exceptions carry the useful message in one
+  // field (Backup.pm:406,458; Network.pm:852; Firewall/Aliases.pm:203). Expose
+  // ONLY those exact sole-field details to the operation's typed matcher.
+  // Multiple errors, other fields, and unrelated validation stay unchanged.
+  const errors = b.errors;
+  if (
+    (b.message === "Parameter verification failed." ||
+      b.message === "Parameter verification failed.\n") &&
+    errors !== null &&
+    typeof errors === "object" &&
+    !Array.isArray(errors) &&
+    Object.keys(errors).length === 1
+  ) {
+    if (
+      "id" in errors &&
+      typeof errors.id === "string" &&
+      /^No such job '[^']+'$/.test(errors.id)
+    )
+      return { message: errors.id };
+    if ("name" in errors && errors.name === "no such alias") {
+      return { message: errors.name };
+    }
+    if ("iface" in errors && errors.iface === "interface does not exist") {
+      return { message: errors.iface };
+    }
+  }
   return { message: typeof b.message === "string" ? b.message : undefined };
 };
 
@@ -128,7 +155,7 @@ const PROXMOX_STATUS_MAP: Record<number, new (args: any) => unknown> = {
 };
 delete (PROXMOX_STATUS_MAP as Record<number, unknown>)[400];
 
-export const ProxmoxProtocol: Layer.Layer<API.Protocol> =
+export const ProxmoxProtocol: Layer.Layer<API.Protocol> = withPveFormArrays(
   makeRestProtocol<Config>({
     // Resolved on the CALLING fiber per request (the layer is memoized per
     // process); the Credentials service holds an effect, so a token rotated
@@ -203,4 +230,5 @@ export const ProxmoxProtocol: Layer.Layer<API.Protocol> =
       }
       return new UnknownProxmoxError({ status, message, body });
     },
-  });
+  }),
+);

package/src/replication-firewall-errors.test.ts

@@ -0,0 +1,126 @@
+/** Exact vendor exceptions at the real protocol boundary; source provenance is in patches. */
+import { expect, test } from "bun:test";
+import * as Effect from "effect/Effect";
+import * as HttpClient from "effect/unstable/http/HttpClient";
+import * as HttpClientResponse from "effect/unstable/http/HttpClientResponse";
+import { credentials } from "./credentials.ts";
+import type { ProxmoxOpContext } from "./protocol.ts";
+import * as Retry from "./retry.ts";
+import * as cluster from "./services/cluster.ts";
+
+const call = <A, E>(
+  op: Effect.Effect<A, E, ProxmoxOpContext>,
+  status: number,
+  body: unknown,
+) =>
+  Effect.runPromise(
+    op.pipe(
+      Retry.none,
+      Effect.provide(
+        credentials({
+          baseUrl: "https://pve.test:8006",
+          tokenId: "test@pve!test",
+          secret: "fake",
+        }),
+      ),
+      Effect.provideService(
+        HttpClient.HttpClient,
+        HttpClient.make((request) =>
+          Effect.succeed(
+            HttpClientResponse.fromWeb(
+              request,
+              Response.json(body, { status }),
+            ),
+          ),
+        ),
+      ),
+      Effect.flip,
+    ),
+  );
+
+for (const [op, message] of [
+  [
+    cluster.getClusterReplication({ id: "900-0" }),
+    "no such replication job '900-0'\n",
+  ],
+  [cluster.putClusterReplication({ id: "900-0" }), "no such job '900-0'\n"],
+  [cluster.deleteClusterReplication({ id: "900-0" }), "no such job '900-0'\n"],
+] as const) {
+  test(`replication ${message.trim()} is typed only on its vendor status`, async () => {
+    expect(await call(op, 500, { data: null, message })).toMatchObject({
+      _tag: "ReplicationJobNotFound",
+    });
+    expect(await call(op, 403, { data: null, message })).toMatchObject({
+      _tag: "Forbidden",
+    });
+    for (const other of [
+      undefined,
+      "no such job 'unrelated'\n",
+      message + "other failure",
+      "got timeout\n",
+    ]) {
+      expect(await call(op, 500, { data: null, message: other })).toMatchObject(
+        { _tag: "InternalServerError" },
+      );
+    }
+  });
+}
+
+const missingAlias = {
+  data: null,
+  message: "Parameter verification failed.\n",
+  errors: { name: "no such alias" },
+};
+for (const op of [
+  cluster.getClusterFirewallAlias({ name: "test" }),
+  cluster.putClusterFirewallAlias({ name: "test", cidr: "192.0.2.1" }),
+]) {
+  test("alias requires the sole exact errors.name detail", async () => {
+    expect(await call(op, 400, missingAlias)).toMatchObject({
+      _tag: "FirewallAliasNotFound",
+    });
+    expect(await call(op, 403, missingAlias)).toMatchObject({
+      _tag: "Forbidden",
+    });
+    for (const errors of [
+      { name: "no such alias", cidr: "invalid" },
+      { other: "no such alias" },
+      { name: "invalid alias" },
+    ]) {
+      expect(await call(op, 400, { ...missingAlias, errors })).toMatchObject({
+        _tag: "ParameterVerificationFailed",
+      });
+    }
+    expect(
+      await call(op, 400, { ...missingAlias, message: "unrelated validation" }),
+    ).toMatchObject({ _tag: "ParameterVerificationFailed" });
+  });
+}
+
+test("absence patches do not classify unrelated operations", async () => {
+  expect(
+    await call(
+      cluster.createClusterFirewallAlias({ name: "test", cidr: "192.0.2.1" }),
+      400,
+      missingAlias,
+    ),
+  ).toMatchObject({ _tag: "ParameterVerificationFailed" });
+  expect(
+    await call(
+      cluster.deleteClusterFirewallAlias({ name: "test" }),
+      400,
+      missingAlias,
+    ),
+  ).toMatchObject({ _tag: "ParameterVerificationFailed" });
+  expect(
+    await call(
+      cluster.createClusterReplication({
+        id: "900-0",
+        target: "pve-b",
+        type: "local",
+      }),
+      500,
+      { message: "no such job '900-0'\n" },
+    ),
+  ).toMatchObject({ _tag: "InternalServerError" });
+});

package/src/services/cluster.ts

@@ -1,6 +1,7 @@
 // AUTO-GENERATED by scripts/generate.ts from .generated-specs (apidata.js, via scripts/apidoc.ts — see its header). Do not edit.
 import * as S from "@distilled.cloud/core/schema";
 import * as API from "@distilled.cloud/core/api";
+import * as C from "@distilled.cloud/core/category";
 import * as T from "../traits.ts";
 import {
   ProxmoxProtocol,
@@ -11,6 +12,66 @@ import * as Retry from "../retry.ts";
 
 export type { ProxmoxOpError, ProxmoxOpContext };
 
+/** The backup job does not exist. pve-manager 9.2.11, f6997e698c7933ea8e62319e2bf1bf7262daa56a, PVE/API2/Backup.pm:406,458,755 raises a 400 parameter exception with exactly errors.id = No such job '<id>'. The Proxmox protocol extracts that sole precise detail for matching; unrelated or multi-field validation errors never become absence. Update uses a different exception and is deliberately not attached. */
+export class BackupJobNotFound
+  extends /*@__PURE__*/ T.applyErrorMatchers(
+    /*@__PURE__*/ S.TaggedError<BackupJobNotFound>()("BackupJobNotFound", {
+      message: S.String,
+    }).pipe(C.withBadRequestError),
+    [{ status: 400, message: { matches: "^No such job '[^']+'$" } }],
+  ) {}
+
+/** Installed pve-firewall 6.0.5 PVE/API2/Firewall/Aliases.pm:203-204,252, read-only 2026-09-24; SHA256 aa4d71ea897515ca71caa8e04abd142aedf8077058649f793605f014be84db0e. GET and PUT raise HTTP400 Parameter verification failed with the sole field errors.name = no such alias. DELETE is intrinsically idempotent and has no missing-alias exception. Other validation failures remain ParameterVerificationFailed. */
+export class FirewallAliasNotFound
+  extends /*@__PURE__*/ T.applyErrorMatchers(
+    /*@__PURE__*/ S.TaggedError<FirewallAliasNotFound>()(
+      "FirewallAliasNotFound",
+      {
+        message: S.String,
+      },
+    ).pipe(C.withBadRequestError),
+    [{ status: 400, message: { matches: "^no such alias$" } }],
+  ) {}
+
+/** The metrics server does not exist. pve-manager 9.2.11, f6997e698c7933ea8e62319e2bf1bf7262daa56a, PVE/API2/Cluster/MetricServer.pm:136 throws status server entry '<id>' does not exist on GET, and line 228 throws no such server '<id>' on PUT. Both are wire 500. DELETE dereferences the plugin config without an explicit absence check and is not declared to return this tag. */
+export class MetricServerNotFound
+  extends /*@__PURE__*/ T.applyErrorMatchers(
+    /*@__PURE__*/ S.TaggedError<MetricServerNotFound>()(
+      "MetricServerNotFound",
+      {
+        message: S.String,
+      },
+    ).pipe(C.withBadRequestError),
+    [
+      {
+        status: 500,
+        message: {
+          matches: "^status server entry '[^']+' does not exist\\n?$",
+        },
+      },
+      { status: 500, message: { matches: "^no such server '[^']+'\\n?$" } },
+    ],
+  ) {}
+
+/** pve-manager 9.2.11 f6997e698c7933ea8e62319e2bf1bf7262daa56a PVE/API2/ReplicationConfig.pm:107,226,305. GET raises no such replication job; PUT and non-force DELETE raise no such job. Exact structured job IDs only. DELETE normally marks remove_job=full for background cleanup; an absent job is already removed. */
+export class ReplicationJobNotFound
+  extends /*@__PURE__*/ T.applyErrorMatchers(
+    /*@__PURE__*/ S.TaggedError<ReplicationJobNotFound>()(
+      "ReplicationJobNotFound",
+      {
+        message: S.String,
+      },
+    ).pipe(C.withBadRequestError),
+    [
+      {
+        status: 500,
+        message: {
+          matches: "^no such (replication )?job '[0-9]+-[0-9]+'\\n?$",
+        },
+      },
+    ],
+  ) {}
+
 export interface CreateClusterAcmeAccountRequest {
   /** Contact email addresses. */
   contact: string;
@@ -15170,7 +15231,7 @@ export const deleteClusterAcmePlugin: API.OperationMethod<
   retry: Retry.Retry,
 }));
 
-export type DeleteClusterBackupError = ProxmoxOpError;
+export type DeleteClusterBackupError = BackupJobNotFound | ProxmoxOpError;
 /** Delete vzdump backup job definition. (root-privileged endpoint) */
 export const deleteClusterBackup: API.OperationMethod<
   DeleteClusterBackupRequest,
@@ -15180,7 +15241,7 @@ export const deleteClusterBackup: API.OperationMethod<
 > = /*@__PURE__*/ API.make(() => ({
   input: DeleteClusterBackupRequest,
   output: DeleteClusterBackupResponse,
-  errors: [],
+  errors: [BackupJobNotFound],
   protocol: ProxmoxProtocol,
   retry: Retry.Retry,
 }));
@@ -15500,7 +15561,9 @@ export const deleteClusterQemuCustomCpuModel: API.OperationMethod<
   retry: Retry.Retry,
 }));
 
-export type DeleteClusterReplicationError = ProxmoxOpError;
+export type DeleteClusterReplicationError =
+  | ReplicationJobNotFound
+  | ProxmoxOpError;
 /** Mark replication job for removal. (root-privileged endpoint) */
 export const deleteClusterReplication: API.OperationMethod<
   DeleteClusterReplicationRequest,
@@ -15510,7 +15573,7 @@ export const deleteClusterReplication: API.OperationMethod<
 > = /*@__PURE__*/ API.make(() => ({
   input: DeleteClusterReplicationRequest,
   output: DeleteClusterReplicationResponse,
-  errors: [],
+  errors: [ReplicationJobNotFound],
   protocol: ProxmoxProtocol,
   retry: Retry.Retry,
 }));
@@ -15785,7 +15848,7 @@ export const getClusterAcmeTos: API.OperationMethod<
   retry: Retry.Retry,
 }));
 
-export type GetClusterBackupError = ProxmoxOpError;
+export type GetClusterBackupError = BackupJobNotFound | ProxmoxOpError;
 /** Read vzdump backup job definition. */
 export const getClusterBackup: API.OperationMethod<
   GetClusterBackupRequest,
@@ -15795,12 +15858,14 @@ export const getClusterBackup: API.OperationMethod<
 > = /*@__PURE__*/ API.make(() => ({
   input: GetClusterBackupRequest,
   output: GetClusterBackupResponse,
-  errors: [],
+  errors: [BackupJobNotFound],
   protocol: ProxmoxProtocol,
   retry: Retry.Retry,
 }));
 
-export type GetClusterBackupIncludedVolumesError = ProxmoxOpError;
+export type GetClusterBackupIncludedVolumesError =
+  | BackupJobNotFound
+  | ProxmoxOpError;
 /** Returns included guests and the backup status of their disks. Optimized to be used in ExtJS tree views. (root-privileged endpoint) */
 export const getClusterBackupIncludedVolumes: API.OperationMethod<
   GetClusterBackupIncludedVolumesRequest,
@@ -15810,7 +15875,7 @@ export const getClusterBackupIncludedVolumes: API.OperationMethod<
 > = /*@__PURE__*/ API.make(() => ({
   input: GetClusterBackupIncludedVolumesRequest,
   output: GetClusterBackupIncludedVolumesResponse,
-  errors: [],
+  errors: [BackupJobNotFound],
   protocol: ProxmoxProtocol,
   retry: Retry.Retry,
 }));
@@ -15920,7 +15985,9 @@ export const getClusterConfigTotem: API.OperationMethod<
   retry: Retry.Retry,
 }));
 
-export type GetClusterFirewallAliasError = ProxmoxOpError;
+export type GetClusterFirewallAliasError =
+  | FirewallAliasNotFound
+  | ProxmoxOpError;
 /** Read alias. */
 export const getClusterFirewallAlias: API.OperationMethod<
   GetClusterFirewallAliasRequest,
@@ -15930,7 +15997,7 @@ export const getClusterFirewallAlias: API.OperationMethod<
 > = /*@__PURE__*/ API.make(() => ({
   input: GetClusterFirewallAliasRequest,
   output: GetClusterFirewallAliasResponse,
-  errors: [],
+  errors: [FirewallAliasNotFound],
   protocol: ProxmoxProtocol,
   retry: Retry.Retry,
 }));
@@ -16160,7 +16227,9 @@ export const getClusterMetricsExport: API.OperationMethod<
   retry: Retry.Retry,
 }));
 
-export type GetClusterMetricsServerError = ProxmoxOpError;
+export type GetClusterMetricsServerError =
+  | MetricServerNotFound
+  | ProxmoxOpError;
 /** Read metric server configuration. */
 export const getClusterMetricsServer: API.OperationMethod<
   GetClusterMetricsServerRequest,
@@ -16170,7 +16239,7 @@ export const getClusterMetricsServer: API.OperationMethod<
 > = /*@__PURE__*/ API.make(() => ({
   input: GetClusterMetricsServerRequest,
   output: GetClusterMetricsServerResponse,
-  errors: [],
+  errors: [MetricServerNotFound],
   protocol: ProxmoxProtocol,
   retry: Retry.Retry,
 }));
@@ -16295,7 +16364,9 @@ export const getClusterQemuCustomCpuModel: API.OperationMethod<
   retry: Retry.Retry,
 }));
 
-export type GetClusterReplicationError = ProxmoxOpError;
+export type GetClusterReplicationError =
+  | ReplicationJobNotFound
+  | ProxmoxOpError;
 /** Read replication job configuration. */
 export const getClusterReplication: API.OperationMethod<
   GetClusterReplicationRequest,
@@ -16305,7 +16376,7 @@ export const getClusterReplication: API.OperationMethod<
 > = /*@__PURE__*/ API.make(() => ({
   input: GetClusterReplicationRequest,
   output: GetClusterReplicationResponse,
-  errors: [],
+  errors: [ReplicationJobNotFound],
   protocol: ProxmoxProtocol,
   retry: Retry.Retry,
 }));
@@ -17810,7 +17881,9 @@ export const putClusterCephHealthMute: API.OperationMethod<
   retry: Retry.Retry,
 }));
 
-export type PutClusterFirewallAliasError = ProxmoxOpError;
+export type PutClusterFirewallAliasError =
+  | FirewallAliasNotFound
+  | ProxmoxOpError;
 /** Update IP or Network alias. (root-privileged endpoint) */
 export const putClusterFirewallAlias: API.OperationMethod<
   PutClusterFirewallAliasRequest,
@@ -17820,7 +17893,7 @@ export const putClusterFirewallAlias: API.OperationMethod<
 > = /*@__PURE__*/ API.make(() => ({
   input: PutClusterFirewallAliasRequest,
   output: PutClusterFirewallAliasResponse,
-  errors: [],
+  errors: [FirewallAliasNotFound],
   protocol: ProxmoxProtocol,
   retry: Retry.Retry,
 }));
@@ -17990,7 +18063,9 @@ export const putClusterMappingUsb: API.OperationMethod<
   retry: Retry.Retry,
 }));
 
-export type PutClusterMetricsServerError = ProxmoxOpError;
+export type PutClusterMetricsServerError =
+  | MetricServerNotFound
+  | ProxmoxOpError;
 /** Update metric server configuration. (root-privileged endpoint) */
 export const putClusterMetricsServer: API.OperationMethod<
   PutClusterMetricsServerRequest,
@@ -18000,7 +18075,7 @@ export const putClusterMetricsServer: API.OperationMethod<
 > = /*@__PURE__*/ API.make(() => ({
   input: PutClusterMetricsServerRequest,
   output: PutClusterMetricsServerResponse,
-  errors: [],
+  errors: [MetricServerNotFound],
   protocol: ProxmoxProtocol,
   retry: Retry.Retry,
 }));
@@ -18110,7 +18185,9 @@ export const putClusterQemuCustomCpuModel: API.OperationMethod<
   retry: Retry.Retry,
 }));
 
-export type PutClusterReplicationError = ProxmoxOpError;
+export type PutClusterReplicationError =
+  | ReplicationJobNotFound
+  | ProxmoxOpError;
 /** Update replication job configuration. (root-privileged endpoint) */
 export const putClusterReplication: API.OperationMethod<
   PutClusterReplicationRequest,
@@ -18120,7 +18197,7 @@ export const putClusterReplication: API.OperationMethod<
 > = /*@__PURE__*/ API.make(() => ({
   input: PutClusterReplicationRequest,
   output: PutClusterReplicationResponse,
-  errors: [],
+  errors: [ReplicationJobNotFound],
   protocol: ProxmoxProtocol,
   retry: Retry.Retry,
 }));

package/src/services/nodes.ts

@@ -50,6 +50,35 @@ export class ClusterNodeUnreachable
     [{ status: 595 }],
   ) {}
 
+/** The requested container config is absent on this node. VM IDs are cluster-wide: callers must still check whether another node or QEMU guest holds the ID before creating. Also raised by PUT (update_vm) and DELETE (destroy_vm), which both call the same load_config first. This GET requires VM.Audit on /vms/{vmid}; retain its credential for any permission-filtered cluster index read. */
+export class LxcConfigNotFound
+  extends /*@__PURE__*/ T.applyErrorMatchers(
+    /*@__PURE__*/ S.TaggedError<LxcConfigNotFound>()("LxcConfigNotFound", {
+      message: S.String,
+    }).pipe(C.withBadRequestError),
+    [
+      {
+        status: 500,
+        message: {
+          matches:
+            "^Configuration file 'nodes/[^/']+/lxc/[0-9]+\\.conf' does not exist\\n?$",
+        },
+      },
+    ],
+  ) {}
+
+/** pve-manager 9.2.11, PVE/API2/Network.pm. GET (network_config) and PUT (update_network) both raise HTTP 400 with exactly errors.iface = interface does not exist -- verified against the live n2 source on 2026-09-25. DELETE (delete_network) raises it too but is left untyped: no generated deleteNodeNetwork2 caller exists yet. Only the exact sole-field detail is normalized for operation matching; all other validation errors remain ParameterVerificationFailed. Attached to GET and PUT. */
+export class NetworkInterfaceNotFound
+  extends /*@__PURE__*/ T.applyErrorMatchers(
+    /*@__PURE__*/ S.TaggedError<NetworkInterfaceNotFound>()(
+      "NetworkInterfaceNotFound",
+      {
+        message: S.String,
+      },
+    ).pipe(C.withBadRequestError),
+    [{ status: 400, message: { matches: "^interface does not exist$" } }],
+  ) {}
+
 export interface CloneNodesLxcRequest {
   node: string;
   vmid: string;
@@ -21398,7 +21427,7 @@ export const deleteNodeFirewallRule: API.OperationMethod<
   retry: Retry.Retry,
 }));
 
-export type DeleteNodeLxcError = ProxmoxOpError;
+export type DeleteNodeLxcError = LxcConfigNotFound | ProxmoxOpError;
 /** Destroy the container (also delete all uses files). (root-privileged endpoint) */
 export const deleteNodeLxc: API.OperationMethod<
   DeleteNodeLxcRequest,
@@ -21408,7 +21437,7 @@ export const deleteNodeLxc: API.OperationMethod<
 > = /*@__PURE__*/ API.make(() => ({
   input: DeleteNodeLxcRequest,
   output: DeleteNodeLxcResponse,
-  errors: [],
+  errors: [LxcConfigNotFound],
   protocol: ProxmoxProtocol,
   retry: Retry.Retry,
 }));
@@ -22088,7 +22117,7 @@ export const getNodeLxc: API.OperationMethod<
   retry: Retry.Retry,
 }));
 
-export type GetNodeLxcConfigError = ProxmoxOpError;
+export type GetNodeLxcConfigError = LxcConfigNotFound | ProxmoxOpError;
 /** Get container configuration. */
 export const getNodeLxcConfig: API.OperationMethod<
   GetNodeLxcConfigRequest,
@@ -22098,7 +22127,7 @@ export const getNodeLxcConfig: API.OperationMethod<
 > = /*@__PURE__*/ API.make(() => ({
   input: GetNodeLxcConfigRequest,
   output: GetNodeLxcConfigResponse,
-  errors: [],
+  errors: [LxcConfigNotFound],
   protocol: ProxmoxProtocol,
   retry: Retry.Retry,
 }));
@@ -22297,7 +22326,7 @@ export const getNodeLxcVncwebsocket: API.OperationMethod<
   retry: Retry.Retry,
 }));
 
-export type GetNodeNetworkError = ProxmoxOpError;
+export type GetNodeNetworkError = NetworkInterfaceNotFound | ProxmoxOpError;
 /** Read network device configuration */
 export const getNodeNetwork: API.OperationMethod<
   GetNodeNetworkRequest,
@@ -22307,7 +22336,7 @@ export const getNodeNetwork: API.OperationMethod<
 > = /*@__PURE__*/ API.make(() => ({
   input: GetNodeNetworkRequest,
   output: GetNodeNetworkResponse,
-  errors: [],
+  errors: [NetworkInterfaceNotFound],
   protocol: ProxmoxProtocol,
   retry: Retry.Retry,
 }));
@@ -24738,7 +24767,7 @@ export const putNodeFirewallRule: API.OperationMethod<
   retry: Retry.Retry,
 }));
 
-export type PutNodeLxcConfigError = ProxmoxOpError;
+export type PutNodeLxcConfigError = LxcConfigNotFound | ProxmoxOpError;
 /** Set container options. (root-privileged endpoint) */
 export const putNodeLxcConfig: API.OperationMethod<
   PutNodeLxcConfigRequest,
@@ -24748,7 +24777,7 @@ export const putNodeLxcConfig: API.OperationMethod<
 > = /*@__PURE__*/ API.make(() => ({
   input: PutNodeLxcConfigRequest,
   output: PutNodeLxcConfigResponse,
-  errors: [],
+  errors: [LxcConfigNotFound],
   protocol: ProxmoxProtocol,
   retry: Retry.Retry,
 }));
@@ -24858,7 +24887,7 @@ export const putNodeNetwork: API.OperationMethod<
   retry: Retry.Retry,
 }));
 
-export type PutNodeNetwork2Error = ProxmoxOpError;
+export type PutNodeNetwork2Error = NetworkInterfaceNotFound | ProxmoxOpError;
 /** Update network device configuration (root-privileged endpoint) */
 export const putNodeNetwork2: API.OperationMethod<
   PutNodeNetwork2Request,
@@ -24868,7 +24897,7 @@ export const putNodeNetwork2: API.OperationMethod<
 > = /*@__PURE__*/ API.make(() => ({
   input: PutNodeNetwork2Request,
   output: PutNodeNetwork2Response,
-  errors: [],
+  errors: [NetworkInterfaceNotFound],
   protocol: ProxmoxProtocol,
   retry: Retry.Retry,
 }));