@distilled.cloud/stackit 0.0.0-stage → 1.0.0-rc.13

package/src/services/object_storage.ts

@@ -0,0 +1,1248 @@
+// AUTO-GENERATED by scripts/generate.ts from .generated-specs (specs/spec-mirror-stackit). Do not edit.
+import * as S from "@distilled.cloud/core/schema";
+import * as Redacted from "effect/Redacted";
+import * as API from "@distilled.cloud/core/api";
+import * as C from "@distilled.cloud/core/category";
+import * as T from "../traits.ts";
+import {
+  StackitProtocol,
+  type StackitOpError,
+  type StackitOpContext,
+} from "../protocol.ts";
+import { UnknownStackitError } from "../errors.ts";
+import * as Retry from "../retry.ts";
+
+export type { StackitOpError, StackitOpContext };
+
+export class BadRequest
+  extends /*@__PURE__*/ T.applyErrorMatchers(
+    /*@__PURE__*/ S.TaggedError<BadRequest>()("BadRequest", {
+      code: S.Number,
+      message: S.String,
+    }).pipe(C.withBadRequestError),
+    [{ status: 400 }],
+  ) {}
+
+export class Conflict
+  extends /*@__PURE__*/ T.applyErrorMatchers(
+    /*@__PURE__*/ S.TaggedError<Conflict>()("Conflict", {
+      code: S.Number,
+      message: S.String,
+    }).pipe(C.withConflictError),
+    [{ status: 409 }],
+  ) {}
+
+export class Forbidden
+  extends /*@__PURE__*/ T.applyErrorMatchers(
+    /*@__PURE__*/ S.TaggedError<Forbidden>()("Forbidden", {
+      code: S.Number,
+      message: S.String,
+    }).pipe(C.withAuthError),
+    [{ status: 403 }],
+  ) {}
+
+export class NotFound
+  extends /*@__PURE__*/ T.applyErrorMatchers(
+    /*@__PURE__*/ S.TaggedError<NotFound>()("NotFound", {
+      code: S.Number,
+      message: S.String,
+    }).pipe(C.withBadRequestError),
+    [{ status: 404 }],
+  ) {}
+
+export class UnprocessableEntity
+  extends /*@__PURE__*/ T.applyErrorMatchers(
+    /*@__PURE__*/ S.TaggedError<UnprocessableEntity>()("UnprocessableEntity", {
+      code: S.Number,
+      message: S.String,
+    }).pipe(C.withBadRequestError),
+    [{ status: 422 }],
+  ) {}
+
+export interface CreateAccessKeyRequest {
+  /** STACKIT project ID */
+  projectId: string;
+  /** STACKIT Region */
+  region: string;
+  credentials_group?: string;
+  /** Expiration date. Null means never expires. */
+  expires?: string | null;
+}
+export const CreateAccessKeyRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    projectId: S.String.pipe(T.Label()),
+    region: S.String.pipe(T.Label()),
+    credentials_group: S.optional(S.String.pipe(T.Query("credentials-group"))),
+    expires: S.optional(S.NullOr(S.String)),
+  }).pipe(
+    T.Http({
+      method: "POST",
+      uri: "/v2/project/{projectId}/regions/{region}/access-key",
+      code: 200,
+      baseUrl: "https://object-storage.api.stackit.cloud",
+    }),
+  ),
+).annotate({
+  identifier: "CreateAccessKeyRequest",
+}) as any as S.Schema<CreateAccessKeyRequest>;
+
+export interface CreateAccessKeyResponse {
+  /** Access key */
+  accessKey: string;
+  /** Obfuscated access key */
+  displayName: string;
+  /** Expiration date. Null means never expires. */
+  expires: string | null;
+  /** Identifies the pair of access key and secret access key for deletion */
+  keyId: string;
+  /** Project ID */
+  project: string;
+  /** Secret access key */
+  secretAccessKey: string | Redacted.Redacted<string>;
+}
+export const CreateAccessKeyResponse = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    accessKey: S.String,
+    displayName: S.String,
+    expires: S.NullOr(S.String),
+    keyId: S.String,
+    project: S.String,
+    secretAccessKey: S.String.pipe(T.SensitiveValue({})),
+  }),
+).annotate({
+  identifier: "CreateAccessKeyResponse",
+}) as any as S.Schema<CreateAccessKeyResponse>;
+
+export interface CreateBucketRequest {
+  /** STACKIT project ID */
+  projectId: string;
+  /** STACKIT Region */
+  region: string;
+  /** The name has to be dns-conform. */
+  bucketName: string;
+  /** Enable S3 Object Lock on this bucket. Can only be set at creation time. Requires an active project-level compliance lock. */
+  objectLockEnabled?: boolean;
+}
+export const CreateBucketRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    projectId: S.String.pipe(T.Label()),
+    region: S.String.pipe(T.Label()),
+    bucketName: S.String.pipe(T.Label()),
+    objectLockEnabled: S.optional(S.Boolean.pipe(T.Query())),
+  }).pipe(
+    T.Http({
+      method: "POST",
+      uri: "/v2/project/{projectId}/regions/{region}/bucket/{bucketName}",
+      code: 200,
+      baseUrl: "https://object-storage.api.stackit.cloud",
+    }),
+  ),
+).annotate({
+  identifier: "CreateBucketRequest",
+}) as any as S.Schema<CreateBucketRequest>;
+
+export interface CreateBucketResponse {
+  /** Name of the bucket */
+  bucket: string;
+  /** Project ID */
+  project: string;
+}
+export const CreateBucketResponse = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    bucket: S.String,
+    project: S.String,
+  }),
+).annotate({
+  identifier: "CreateBucketResponse",
+}) as any as S.Schema<CreateBucketResponse>;
+
+export interface CreateComplianceLockRequest {
+  /** STACKIT project ID */
+  projectId: string;
+  /** STACKIT Region */
+  region: string;
+}
+export const CreateComplianceLockRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    projectId: S.String.pipe(T.Label()),
+    region: S.String.pipe(T.Label()),
+  }).pipe(
+    T.Http({
+      method: "POST",
+      uri: "/v2/project/{projectId}/regions/{region}/compliance-lock",
+      code: 200,
+      baseUrl: "https://object-storage.api.stackit.cloud",
+    }),
+  ),
+).annotate({
+  identifier: "CreateComplianceLockRequest",
+}) as any as S.Schema<CreateComplianceLockRequest>;
+
+export interface ComplianceLockResponse {
+  /** Maximum retention period in days */
+  maxRetentionDays: number;
+  /** Project ID */
+  project: string;
+}
+export const ComplianceLockResponse = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    maxRetentionDays: S.Number,
+    project: S.String,
+  }),
+).annotate({
+  identifier: "ComplianceLockResponse",
+}) as any as S.Schema<ComplianceLockResponse>;
+
+export interface CreateCredentialsGroupRequest {
+  /** STACKIT project ID */
+  projectId: string;
+  /** STACKIT Region */
+  region: string;
+  /** Name of the group holding credentials */
+  displayName: string;
+}
+export const CreateCredentialsGroupRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    projectId: S.String.pipe(T.Label()),
+    region: S.String.pipe(T.Label()),
+    displayName: S.String,
+  }).pipe(
+    T.Http({
+      method: "POST",
+      uri: "/v2/project/{projectId}/regions/{region}/credentials-group",
+      code: 200,
+      baseUrl: "https://object-storage.api.stackit.cloud",
+    }),
+  ),
+).annotate({
+  identifier: "CreateCredentialsGroupRequest",
+}) as any as S.Schema<CreateCredentialsGroupRequest>;
+
+export interface CredentialsGroup {
+  /** The ID of the credentials group */
+  credentialsGroupId: string;
+  /** Name of the group holding credentials */
+  displayName: string;
+  /** Credentials group URN */
+  urn: string;
+}
+export const CredentialsGroup = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    credentialsGroupId: S.String,
+    displayName: S.String,
+    urn: S.String,
+  }),
+).annotate({
+  identifier: "CredentialsGroup",
+}) as any as S.Schema<CredentialsGroup>;
+
+export interface CreateCredentialsGroupResponse {
+  credentialsGroup: CredentialsGroup;
+  /** Project ID */
+  project: string;
+}
+export const CreateCredentialsGroupResponse = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    credentialsGroup: CredentialsGroup,
+    project: S.String,
+  }),
+).annotate({
+  identifier: "CreateCredentialsGroupResponse",
+}) as any as S.Schema<CreateCredentialsGroupResponse>;
+
+export interface DeleteAccessKeyRequest {
+  /** STACKIT project ID */
+  projectId: string;
+  /** STACKIT Region */
+  region: string;
+  /** Object storage access key */
+  keyId: string;
+  credentials_group?: string;
+}
+export const DeleteAccessKeyRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    projectId: S.String.pipe(T.Label()),
+    region: S.String.pipe(T.Label()),
+    keyId: S.String.pipe(T.Label()),
+    credentials_group: S.optional(S.String.pipe(T.Query("credentials-group"))),
+  }).pipe(
+    T.Http({
+      method: "DELETE",
+      uri: "/v2/project/{projectId}/regions/{region}/access-key/{keyId}",
+      code: 200,
+      baseUrl: "https://object-storage.api.stackit.cloud",
+    }),
+  ),
+).annotate({
+  identifier: "DeleteAccessKeyRequest",
+}) as any as S.Schema<DeleteAccessKeyRequest>;
+
+export interface DeleteAccessKeyResponse {
+  /** Identifies the pair of access key and secret access key for deletion */
+  keyId: string;
+  /** Project ID */
+  project: string;
+}
+export const DeleteAccessKeyResponse = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    keyId: S.String,
+    project: S.String,
+  }),
+).annotate({
+  identifier: "DeleteAccessKeyResponse",
+}) as any as S.Schema<DeleteAccessKeyResponse>;
+
+export interface DeleteBucketRequest {
+  /** STACKIT project ID */
+  projectId: string;
+  /** STACKIT Region */
+  region: string;
+  /** The name has to be dns-conform. */
+  bucketName: string;
+}
+export const DeleteBucketRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    projectId: S.String.pipe(T.Label()),
+    region: S.String.pipe(T.Label()),
+    bucketName: S.String.pipe(T.Label()),
+  }).pipe(
+    T.Http({
+      method: "DELETE",
+      uri: "/v2/project/{projectId}/regions/{region}/bucket/{bucketName}",
+      code: 200,
+      baseUrl: "https://object-storage.api.stackit.cloud",
+    }),
+  ),
+).annotate({
+  identifier: "DeleteBucketRequest",
+}) as any as S.Schema<DeleteBucketRequest>;
+
+export interface DeleteBucketResponse {
+  /** Name of the bucket */
+  bucket: string;
+  /** Project ID */
+  project: string;
+}
+export const DeleteBucketResponse = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    bucket: S.String,
+    project: S.String,
+  }),
+).annotate({
+  identifier: "DeleteBucketResponse",
+}) as any as S.Schema<DeleteBucketResponse>;
+
+export interface DeleteComplianceLockRequest {
+  /** STACKIT project ID */
+  projectId: string;
+  /** STACKIT Region */
+  region: string;
+}
+export const DeleteComplianceLockRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    projectId: S.String.pipe(T.Label()),
+    region: S.String.pipe(T.Label()),
+  }).pipe(
+    T.Http({
+      method: "DELETE",
+      uri: "/v2/project/{projectId}/regions/{region}/compliance-lock",
+      code: 200,
+      baseUrl: "https://object-storage.api.stackit.cloud",
+    }),
+  ),
+).annotate({
+  identifier: "DeleteComplianceLockRequest",
+}) as any as S.Schema<DeleteComplianceLockRequest>;
+
+export interface DeleteCredentialsGroupRequest {
+  /** STACKIT project ID */
+  projectId: string;
+  /** STACKIT Region */
+  region: string;
+  /** Id of the credentials group */
+  groupId: string;
+}
+export const DeleteCredentialsGroupRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    projectId: S.String.pipe(T.Label()),
+    region: S.String.pipe(T.Label()),
+    groupId: S.String.pipe(T.Label()),
+  }).pipe(
+    T.Http({
+      method: "DELETE",
+      uri: "/v2/project/{projectId}/regions/{region}/credentials-group/{groupId}",
+      code: 200,
+      baseUrl: "https://object-storage.api.stackit.cloud",
+    }),
+  ),
+).annotate({
+  identifier: "DeleteCredentialsGroupRequest",
+}) as any as S.Schema<DeleteCredentialsGroupRequest>;
+
+export interface DeleteCredentialsGroupResponse {
+  /** The ID of the credentials group */
+  credentialsGroupId: string;
+  /** Project ID */
+  project: string;
+}
+export const DeleteCredentialsGroupResponse = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    credentialsGroupId: S.String,
+    project: S.String,
+  }),
+).annotate({
+  identifier: "DeleteCredentialsGroupResponse",
+}) as any as S.Schema<DeleteCredentialsGroupResponse>;
+
+export interface DeleteDefaultRetentionRequest {
+  /** STACKIT project ID */
+  projectId: string;
+  /** STACKIT Region */
+  region: string;
+  /** The name has to be dns-conform. */
+  bucketName: string;
+}
+export const DeleteDefaultRetentionRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    projectId: S.String.pipe(T.Label()),
+    region: S.String.pipe(T.Label()),
+    bucketName: S.String.pipe(T.Label()),
+  }).pipe(
+    T.Http({
+      method: "DELETE",
+      uri: "/v2/project/{projectId}/regions/{region}/bucket/{bucketName}/default-retention",
+      code: 200,
+      baseUrl: "https://object-storage.api.stackit.cloud",
+    }),
+  ),
+).annotate({
+  identifier: "DeleteDefaultRetentionRequest",
+}) as any as S.Schema<DeleteDefaultRetentionRequest>;
+
+export interface DeleteDefaultRetentionResponse {
+  /** Name of the bucket */
+  bucket: string;
+  /** Project ID */
+  project: string;
+}
+export const DeleteDefaultRetentionResponse = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    bucket: S.String,
+    project: S.String,
+  }),
+).annotate({
+  identifier: "DeleteDefaultRetentionResponse",
+}) as any as S.Schema<DeleteDefaultRetentionResponse>;
+
+export interface DisableServiceRequest {
+  /** STACKIT project ID */
+  projectId: string;
+  /** STACKIT Region */
+  region: string;
+}
+export const DisableServiceRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    projectId: S.String.pipe(T.Label()),
+    region: S.String.pipe(T.Label()),
+  }).pipe(
+    T.Http({
+      method: "DELETE",
+      uri: "/v2/project/{projectId}/regions/{region}",
+      code: 200,
+      baseUrl: "https://object-storage.api.stackit.cloud",
+    }),
+  ),
+).annotate({
+  identifier: "DisableServiceRequest",
+}) as any as S.Schema<DisableServiceRequest>;
+
+/** The scope of a STACKIT project can be public (default) or can have client specific special requirements. */
+export type ProjectScope = "PUBLIC" | "SCHWARZ";
+export const ProjectScope = /*@__PURE__*/ S.String;
+
+export interface ProjectStatus {
+  /** Project ID */
+  project: string;
+  /** Project Scope */
+  scope: ProjectScope;
+}
+export const ProjectStatus = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    project: S.String,
+    scope: ProjectScope,
+  }),
+).annotate({ identifier: "ProjectStatus" }) as any as S.Schema<ProjectStatus>;
+
+export interface EnableServiceRequest {
+  /** STACKIT project ID */
+  projectId: string;
+  /** STACKIT Region */
+  region: string;
+}
+export const EnableServiceRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    projectId: S.String.pipe(T.Label()),
+    region: S.String.pipe(T.Label()),
+  }).pipe(
+    T.Http({
+      method: "POST",
+      uri: "/v2/project/{projectId}/regions/{region}",
+      code: 200,
+      baseUrl: "https://object-storage.api.stackit.cloud",
+    }),
+  ),
+).annotate({
+  identifier: "EnableServiceRequest",
+}) as any as S.Schema<EnableServiceRequest>;
+
+export interface GetBucketRequest {
+  /** STACKIT project ID */
+  projectId: string;
+  /** STACKIT Region */
+  region: string;
+  /** The name has to be dns-conform. */
+  bucketName: string;
+}
+export const GetBucketRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    projectId: S.String.pipe(T.Label()),
+    region: S.String.pipe(T.Label()),
+    bucketName: S.String.pipe(T.Label()),
+  }).pipe(
+    T.Http({
+      method: "GET",
+      uri: "/v2/project/{projectId}/regions/{region}/bucket/{bucketName}",
+      code: 200,
+      baseUrl: "https://object-storage.api.stackit.cloud",
+    }),
+  ),
+).annotate({
+  identifier: "GetBucketRequest",
+}) as any as S.Schema<GetBucketRequest>;
+
+export interface Bucket {
+  name: string;
+  /** Whether S3 Object Lock is enabled for this bucket */
+  objectLockEnabled: boolean;
+  region: string;
+  /** URL in path style */
+  urlPathStyle: string;
+  /** URL in virtual hosted style */
+  urlVirtualHostedStyle: string;
+}
+export const Bucket = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    name: S.String,
+    objectLockEnabled: S.Boolean,
+    region: S.String,
+    urlPathStyle: S.String,
+    urlVirtualHostedStyle: S.String,
+  }),
+).annotate({ identifier: "Bucket" }) as any as S.Schema<Bucket>;
+
+export interface GetBucketResponse {
+  bucket: Bucket;
+  /** Project ID */
+  project: string;
+}
+export const GetBucketResponse = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    bucket: Bucket,
+    project: S.String,
+  }),
+).annotate({
+  identifier: "GetBucketResponse",
+}) as any as S.Schema<GetBucketResponse>;
+
+export interface GetComplianceLockRequest {
+  /** STACKIT project ID */
+  projectId: string;
+  /** STACKIT Region */
+  region: string;
+}
+export const GetComplianceLockRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    projectId: S.String.pipe(T.Label()),
+    region: S.String.pipe(T.Label()),
+  }).pipe(
+    T.Http({
+      method: "GET",
+      uri: "/v2/project/{projectId}/regions/{region}/compliance-lock",
+      code: 200,
+      baseUrl: "https://object-storage.api.stackit.cloud",
+    }),
+  ),
+).annotate({
+  identifier: "GetComplianceLockRequest",
+}) as any as S.Schema<GetComplianceLockRequest>;
+
+export interface GetCredentialsGroupRequest {
+  /** STACKIT project ID */
+  projectId: string;
+  /** STACKIT Region */
+  region: string;
+  /** Id of the credentials group */
+  groupId: string;
+}
+export const GetCredentialsGroupRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    projectId: S.String.pipe(T.Label()),
+    region: S.String.pipe(T.Label()),
+    groupId: S.String.pipe(T.Label()),
+  }).pipe(
+    T.Http({
+      method: "GET",
+      uri: "/v2/project/{projectId}/regions/{region}/credentials-group/{groupId}",
+      code: 200,
+      baseUrl: "https://object-storage.api.stackit.cloud",
+    }),
+  ),
+).annotate({
+  identifier: "GetCredentialsGroupRequest",
+}) as any as S.Schema<GetCredentialsGroupRequest>;
+
+export interface CredentialsGroupExtended {
+  /** The ID of the credentials group */
+  credentialsGroupId: string;
+  /** Name of the group holding credentials */
+  displayName: string;
+  /** StorageGRID group URN */
+  urn: string;
+  /** StorageGRID user URN */
+  userUrn: string;
+}
+export const CredentialsGroupExtended = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    credentialsGroupId: S.String,
+    displayName: S.String,
+    urn: S.String,
+    userUrn: S.String,
+  }),
+).annotate({
+  identifier: "CredentialsGroupExtended",
+}) as any as S.Schema<CredentialsGroupExtended>;
+
+export interface GetCredentialsGroupResponse {
+  credentialsGroup: CredentialsGroupExtended;
+  /** Project ID */
+  project: string;
+}
+export const GetCredentialsGroupResponse = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    credentialsGroup: CredentialsGroupExtended,
+    project: S.String,
+  }),
+).annotate({
+  identifier: "GetCredentialsGroupResponse",
+}) as any as S.Schema<GetCredentialsGroupResponse>;
+
+export interface GetDefaultRetentionRequest {
+  /** STACKIT project ID */
+  projectId: string;
+  /** STACKIT Region */
+  region: string;
+  /** The name has to be dns-conform. */
+  bucketName: string;
+}
+export const GetDefaultRetentionRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    projectId: S.String.pipe(T.Label()),
+    region: S.String.pipe(T.Label()),
+    bucketName: S.String.pipe(T.Label()),
+  }).pipe(
+    T.Http({
+      method: "GET",
+      uri: "/v2/project/{projectId}/regions/{region}/bucket/{bucketName}/default-retention",
+      code: 200,
+      baseUrl: "https://object-storage.api.stackit.cloud",
+    }),
+  ),
+).annotate({
+  identifier: "GetDefaultRetentionRequest",
+}) as any as S.Schema<GetDefaultRetentionRequest>;
+
+/** The retention mode for default retention on a bucket. */
+export type RetentionMode = "COMPLIANCE" | "GOVERNANCE";
+export const RetentionMode = /*@__PURE__*/ S.String;
+
+export interface DefaultRetentionResponse {
+  /** Name of the bucket */
+  bucket: string;
+  /** Retention period in days */
+  days: number;
+  mode: RetentionMode;
+  /** Project ID */
+  project: string;
+}
+export const DefaultRetentionResponse = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    bucket: S.String,
+    days: S.Number,
+    mode: RetentionMode,
+    project: S.String,
+  }),
+).annotate({
+  identifier: "DefaultRetentionResponse",
+}) as any as S.Schema<DefaultRetentionResponse>;
+
+export interface GetServiceStatusRequest {
+  /** STACKIT project ID */
+  projectId: string;
+  /** STACKIT Region */
+  region: string;
+}
+export const GetServiceStatusRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    projectId: S.String.pipe(T.Label()),
+    region: S.String.pipe(T.Label()),
+  }).pipe(
+    T.Http({
+      method: "GET",
+      uri: "/v2/project/{projectId}/regions/{region}",
+      code: 200,
+      baseUrl: "https://object-storage.api.stackit.cloud",
+    }),
+  ),
+).annotate({
+  identifier: "GetServiceStatusRequest",
+}) as any as S.Schema<GetServiceStatusRequest>;
+
+export interface ListAccessKeysRequest {
+  /** STACKIT project ID */
+  projectId: string;
+  /** STACKIT Region */
+  region: string;
+  credentials_group?: string;
+}
+export const ListAccessKeysRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    projectId: S.String.pipe(T.Label()),
+    region: S.String.pipe(T.Label()),
+    credentials_group: S.optional(S.String.pipe(T.Query("credentials-group"))),
+  }).pipe(
+    T.Http({
+      method: "GET",
+      uri: "/v2/project/{projectId}/regions/{region}/access-keys",
+      code: 200,
+      baseUrl: "https://object-storage.api.stackit.cloud",
+    }),
+  ),
+).annotate({
+  identifier: "ListAccessKeysRequest",
+}) as any as S.Schema<ListAccessKeysRequest>;
+
+export interface AccessKey {
+  displayName: string;
+  expires: string | null;
+  /** Identifies the pair of access key and secret access key for deletion */
+  keyId: string;
+}
+export const AccessKey = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    displayName: S.String,
+    expires: S.NullOr(S.String),
+    keyId: S.String,
+  }),
+).annotate({ identifier: "AccessKey" }) as any as S.Schema<AccessKey>;
+
+export type ListAccessKeysResponseAccessKeysList = Array<AccessKey>;
+export const ListAccessKeysResponseAccessKeysList = /*@__PURE__*/ S.Array(
+  AccessKey,
+) as any as S.Schema<ListAccessKeysResponseAccessKeysList>;
+
+export interface ListAccessKeysResponse {
+  accessKeys: ListAccessKeysResponseAccessKeysList;
+  /** Project ID */
+  project: string;
+}
+export const ListAccessKeysResponse = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    accessKeys: ListAccessKeysResponseAccessKeysList,
+    project: S.String,
+  }),
+).annotate({
+  identifier: "ListAccessKeysResponse",
+}) as any as S.Schema<ListAccessKeysResponse>;
+
+export interface ListBucketsRequest {
+  /** STACKIT project ID */
+  projectId: string;
+  /** STACKIT Region */
+  region: string;
+}
+export const ListBucketsRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    projectId: S.String.pipe(T.Label()),
+    region: S.String.pipe(T.Label()),
+  }).pipe(
+    T.Http({
+      method: "GET",
+      uri: "/v2/project/{projectId}/regions/{region}/buckets",
+      code: 200,
+      baseUrl: "https://object-storage.api.stackit.cloud",
+    }),
+  ),
+).annotate({
+  identifier: "ListBucketsRequest",
+}) as any as S.Schema<ListBucketsRequest>;
+
+export type ListBucketsResponseBucketsList = Array<Bucket>;
+export const ListBucketsResponseBucketsList = /*@__PURE__*/ S.Array(
+  Bucket,
+) as any as S.Schema<ListBucketsResponseBucketsList>;
+
+export interface ListBucketsResponse {
+  buckets: ListBucketsResponseBucketsList;
+  /** Project ID */
+  project: string;
+}
+export const ListBucketsResponse = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    buckets: ListBucketsResponseBucketsList,
+    project: S.String,
+  }),
+).annotate({
+  identifier: "ListBucketsResponse",
+}) as any as S.Schema<ListBucketsResponse>;
+
+export interface ListCredentialsGroupsRequest {
+  /** STACKIT project ID */
+  projectId: string;
+  /** STACKIT Region */
+  region: string;
+}
+export const ListCredentialsGroupsRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    projectId: S.String.pipe(T.Label()),
+    region: S.String.pipe(T.Label()),
+  }).pipe(
+    T.Http({
+      method: "GET",
+      uri: "/v2/project/{projectId}/regions/{region}/credentials-groups",
+      code: 200,
+      baseUrl: "https://object-storage.api.stackit.cloud",
+    }),
+  ),
+).annotate({
+  identifier: "ListCredentialsGroupsRequest",
+}) as any as S.Schema<ListCredentialsGroupsRequest>;
+
+export type ListCredentialsGroupsResponseCredentialsGroupsList =
+  Array<CredentialsGroup>;
+export const ListCredentialsGroupsResponseCredentialsGroupsList =
+  /*@__PURE__*/ S.Array(
+    CredentialsGroup,
+  ) as any as S.Schema<ListCredentialsGroupsResponseCredentialsGroupsList>;
+
+export interface ListCredentialsGroupsResponse {
+  credentialsGroups: ListCredentialsGroupsResponseCredentialsGroupsList;
+  /** Project ID */
+  project: string;
+}
+export const ListCredentialsGroupsResponse = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    credentialsGroups: ListCredentialsGroupsResponseCredentialsGroupsList,
+    project: S.String,
+  }),
+).annotate({
+  identifier: "ListCredentialsGroupsResponse",
+}) as any as S.Schema<ListCredentialsGroupsResponse>;
+
+export interface SetDefaultRetentionRequest {
+  /** STACKIT project ID */
+  projectId: string;
+  /** STACKIT Region */
+  region: string;
+  /** The name has to be dns-conform. */
+  bucketName: string;
+  /** Retention period in days */
+  days: number;
+  mode: RetentionMode | (string & {});
+}
+export const SetDefaultRetentionRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    projectId: S.String.pipe(T.Label()),
+    region: S.String.pipe(T.Label()),
+    bucketName: S.String.pipe(T.Label()),
+    days: S.Number,
+    mode: RetentionMode,
+  }).pipe(
+    T.Http({
+      method: "PUT",
+      uri: "/v2/project/{projectId}/regions/{region}/bucket/{bucketName}/default-retention",
+      code: 200,
+      baseUrl: "https://object-storage.api.stackit.cloud",
+    }),
+  ),
+).annotate({
+  identifier: "SetDefaultRetentionRequest",
+}) as any as S.Schema<SetDefaultRetentionRequest>;
+
+export type CreateAccessKeyError =
+  | Forbidden
+  | NotFound
+  | UnprocessableEntity
+  | StackitOpError;
+/** Create Access Key Create an access key for the given project. */
+export const createAccessKey: API.OperationMethod<
+  CreateAccessKeyRequest,
+  CreateAccessKeyResponse,
+  CreateAccessKeyError,
+  StackitOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: CreateAccessKeyRequest,
+  output: CreateAccessKeyResponse,
+  errors: [Forbidden, NotFound, UnprocessableEntity, UnknownStackitError],
+  protocol: StackitProtocol,
+  retry: Retry.Retry,
+}));
+
+export type CreateBucketError =
+  | NotFound
+  | Conflict
+  | UnprocessableEntity
+  | StackitOpError;
+/** Create Bucket Create a bucket for the given project. Bucket with the same name cannot already exists in the object storage */
+export const createBucket: API.OperationMethod<
+  CreateBucketRequest,
+  CreateBucketResponse,
+  CreateBucketError,
+  StackitOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: CreateBucketRequest,
+  output: CreateBucketResponse,
+  errors: [NotFound, Conflict, UnprocessableEntity, UnknownStackitError],
+  protocol: StackitProtocol,
+  retry: Retry.Retry,
+}));
+
+export type CreateComplianceLockError = NotFound | Conflict | StackitOpError;
+/** Create Compliance Lock Enable compliance lock for a project. */
+export const createComplianceLock: API.OperationMethod<
+  CreateComplianceLockRequest,
+  ComplianceLockResponse,
+  CreateComplianceLockError,
+  StackitOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: CreateComplianceLockRequest,
+  output: ComplianceLockResponse,
+  errors: [NotFound, Conflict, UnknownStackitError],
+  protocol: StackitProtocol,
+  retry: Retry.Retry,
+}));
+
+export type CreateCredentialsGroupError =
+  | Forbidden
+  | NotFound
+  | Conflict
+  | UnprocessableEntity
+  | StackitOpError;
+/** Create Credentials Group */
+export const createCredentialsGroup: API.OperationMethod<
+  CreateCredentialsGroupRequest,
+  CreateCredentialsGroupResponse,
+  CreateCredentialsGroupError,
+  StackitOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: CreateCredentialsGroupRequest,
+  output: CreateCredentialsGroupResponse,
+  errors: [
+    Forbidden,
+    NotFound,
+    Conflict,
+    UnprocessableEntity,
+    UnknownStackitError,
+  ],
+  protocol: StackitProtocol,
+  retry: Retry.Retry,
+}));
+
+export type DeleteAccessKeyError =
+  | Forbidden
+  | NotFound
+  | UnprocessableEntity
+  | StackitOpError;
+/** Delete Access Key Delete an access key from the given project. */
+export const deleteAccessKey: API.OperationMethod<
+  DeleteAccessKeyRequest,
+  DeleteAccessKeyResponse,
+  DeleteAccessKeyError,
+  StackitOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: DeleteAccessKeyRequest,
+  output: DeleteAccessKeyResponse,
+  errors: [Forbidden, NotFound, UnprocessableEntity, UnknownStackitError],
+  protocol: StackitProtocol,
+  retry: Retry.Retry,
+}));
+
+export type DeleteBucketError = NotFound | UnprocessableEntity | StackitOpError;
+/** Delete Bucket Delete a bucket from the given project. */
+export const deleteBucket: API.OperationMethod<
+  DeleteBucketRequest,
+  DeleteBucketResponse,
+  DeleteBucketError,
+  StackitOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: DeleteBucketRequest,
+  output: DeleteBucketResponse,
+  errors: [NotFound, UnprocessableEntity, UnknownStackitError],
+  protocol: StackitProtocol,
+  retry: Retry.Retry,
+}));
+
+export type DeleteComplianceLockError = NotFound | Conflict | StackitOpError;
+/** Delete Compliance Lock Remove compliance lock from a project. */
+export const deleteComplianceLock: API.OperationMethod<
+  DeleteComplianceLockRequest,
+  ComplianceLockResponse,
+  DeleteComplianceLockError,
+  StackitOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: DeleteComplianceLockRequest,
+  output: ComplianceLockResponse,
+  errors: [NotFound, Conflict, UnknownStackitError],
+  protocol: StackitProtocol,
+  retry: Retry.Retry,
+}));
+
+export type DeleteCredentialsGroupError =
+  | NotFound
+  | UnprocessableEntity
+  | StackitOpError;
+/** Delete Credentials Group Delete a credentials group inside a project if the project exists and no valid access keys are left in the group. */
+export const deleteCredentialsGroup: API.OperationMethod<
+  DeleteCredentialsGroupRequest,
+  DeleteCredentialsGroupResponse,
+  DeleteCredentialsGroupError,
+  StackitOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: DeleteCredentialsGroupRequest,
+  output: DeleteCredentialsGroupResponse,
+  errors: [NotFound, UnprocessableEntity, UnknownStackitError],
+  protocol: StackitProtocol,
+  retry: Retry.Retry,
+}));
+
+export type DeleteDefaultRetentionError = NotFound | Conflict | StackitOpError;
+/** Delete Default Retention Remove the default retention from a bucket. Object Lock itself remains enabled. */
+export const deleteDefaultRetention: API.OperationMethod<
+  DeleteDefaultRetentionRequest,
+  DeleteDefaultRetentionResponse,
+  DeleteDefaultRetentionError,
+  StackitOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: DeleteDefaultRetentionRequest,
+  output: DeleteDefaultRetentionResponse,
+  errors: [NotFound, Conflict, UnknownStackitError],
+  protocol: StackitProtocol,
+  retry: Retry.Retry,
+}));
+
+export type DisableServiceError =
+  | BadRequest
+  | Forbidden
+  | NotFound
+  | Conflict
+  | UnprocessableEntity
+  | StackitOpError;
+/** Delete Project Delete the given project */
+export const disableService: API.OperationMethod<
+  DisableServiceRequest,
+  ProjectStatus,
+  DisableServiceError,
+  StackitOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: DisableServiceRequest,
+  output: ProjectStatus,
+  errors: [
+    BadRequest,
+    Forbidden,
+    NotFound,
+    Conflict,
+    UnprocessableEntity,
+    UnknownStackitError,
+  ],
+  protocol: StackitProtocol,
+  retry: Retry.Retry,
+}));
+
+export type EnableServiceError =
+  | Forbidden
+  | Conflict
+  | UnprocessableEntity
+  | StackitOpError;
+/** Create Project Create a project. Creation will also be successful if the project already exists, but will not create a duplicate */
+export const enableService: API.OperationMethod<
+  EnableServiceRequest,
+  ProjectStatus,
+  EnableServiceError,
+  StackitOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: EnableServiceRequest,
+  output: ProjectStatus,
+  errors: [Forbidden, Conflict, UnprocessableEntity, UnknownStackitError],
+  protocol: StackitProtocol,
+  retry: Retry.Retry,
+}));
+
+export type GetBucketError =
+  | Forbidden
+  | NotFound
+  | UnprocessableEntity
+  | StackitOpError;
+/** Get Bucket Get information for the given bucket in the project. */
+export const getBucket: API.OperationMethod<
+  GetBucketRequest,
+  GetBucketResponse,
+  GetBucketError,
+  StackitOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: GetBucketRequest,
+  output: GetBucketResponse,
+  errors: [Forbidden, NotFound, UnprocessableEntity, UnknownStackitError],
+  protocol: StackitProtocol,
+  retry: Retry.Retry,
+}));
+
+export type GetComplianceLockError = NotFound | StackitOpError;
+/** Get Compliance Lock Get the project-level compliance lock. */
+export const getComplianceLock: API.OperationMethod<
+  GetComplianceLockRequest,
+  ComplianceLockResponse,
+  GetComplianceLockError,
+  StackitOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: GetComplianceLockRequest,
+  output: ComplianceLockResponse,
+  errors: [NotFound, UnknownStackitError],
+  protocol: StackitProtocol,
+  retry: Retry.Retry,
+}));
+
+export type GetCredentialsGroupError =
+  | NotFound
+  | UnprocessableEntity
+  | StackitOpError;
+/** Get Credentials Group Get the details of a single credentials group */
+export const getCredentialsGroup: API.OperationMethod<
+  GetCredentialsGroupRequest,
+  GetCredentialsGroupResponse,
+  GetCredentialsGroupError,
+  StackitOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: GetCredentialsGroupRequest,
+  output: GetCredentialsGroupResponse,
+  errors: [NotFound, UnprocessableEntity, UnknownStackitError],
+  protocol: StackitProtocol,
+  retry: Retry.Retry,
+}));
+
+export type GetDefaultRetentionError = NotFound | Conflict | StackitOpError;
+/** Get Default Retention Get the default retention configuration for a bucket. */
+export const getDefaultRetention: API.OperationMethod<
+  GetDefaultRetentionRequest,
+  DefaultRetentionResponse,
+  GetDefaultRetentionError,
+  StackitOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: GetDefaultRetentionRequest,
+  output: DefaultRetentionResponse,
+  errors: [NotFound, Conflict, UnknownStackitError],
+  protocol: StackitProtocol,
+  retry: Retry.Retry,
+}));
+
+export type GetServiceStatusError =
+  | Forbidden
+  | NotFound
+  | UnprocessableEntity
+  | StackitOpError;
+/** Get Project Get project details. */
+export const getServiceStatus: API.OperationMethod<
+  GetServiceStatusRequest,
+  ProjectStatus,
+  GetServiceStatusError,
+  StackitOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: GetServiceStatusRequest,
+  output: ProjectStatus,
+  errors: [Forbidden, NotFound, UnprocessableEntity, UnknownStackitError],
+  protocol: StackitProtocol,
+  retry: Retry.Retry,
+}));
+
+export type ListAccessKeysError =
+  | Forbidden
+  | NotFound
+  | UnprocessableEntity
+  | StackitOpError;
+/** Get Access Keys Get a list of access keys for the given project. */
+export const listAccessKeys: API.OperationMethod<
+  ListAccessKeysRequest,
+  ListAccessKeysResponse,
+  ListAccessKeysError,
+  StackitOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: ListAccessKeysRequest,
+  output: ListAccessKeysResponse,
+  errors: [Forbidden, NotFound, UnprocessableEntity, UnknownStackitError],
+  protocol: StackitProtocol,
+  retry: Retry.Retry,
+}));
+
+export type ListBucketsError =
+  | Forbidden
+  | NotFound
+  | UnprocessableEntity
+  | StackitOpError;
+/** Get Buckets Get the list of all buckets in the given project */
+export const listBuckets: API.OperationMethod<
+  ListBucketsRequest,
+  ListBucketsResponse,
+  ListBucketsError,
+  StackitOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: ListBucketsRequest,
+  output: ListBucketsResponse,
+  errors: [Forbidden, NotFound, UnprocessableEntity, UnknownStackitError],
+  protocol: StackitProtocol,
+  retry: Retry.Retry,
+}));
+
+export type ListCredentialsGroupsError =
+  | NotFound
+  | UnprocessableEntity
+  | StackitOpError;
+/** Get Credentials Groups Get credentials groups inside a project if the project exists */
+export const listCredentialsGroups: API.OperationMethod<
+  ListCredentialsGroupsRequest,
+  ListCredentialsGroupsResponse,
+  ListCredentialsGroupsError,
+  StackitOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: ListCredentialsGroupsRequest,
+  output: ListCredentialsGroupsResponse,
+  errors: [NotFound, UnprocessableEntity, UnknownStackitError],
+  protocol: StackitProtocol,
+  retry: Retry.Retry,
+}));
+
+export type SetDefaultRetentionError =
+  | BadRequest
+  | NotFound
+  | Conflict
+  | StackitOpError;
+/** Update Default Retention Set or update the default retention for a bucket. */
+export const setDefaultRetention: API.OperationMethod<
+  SetDefaultRetentionRequest,
+  DefaultRetentionResponse,
+  SetDefaultRetentionError,
+  StackitOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: SetDefaultRetentionRequest,
+  output: DefaultRetentionResponse,
+  errors: [BadRequest, NotFound, Conflict, UnknownStackitError],
+  protocol: StackitProtocol,
+  retry: Retry.Retry,
+}));