@distilled.cloud/stackit 0.0.0-stage → 1.0.0-rc.13

package/src/services/workflows.ts

@@ -0,0 +1,1361 @@
+// AUTO-GENERATED by scripts/generate.ts from .generated-specs (specs/spec-mirror-stackit). Do not edit.
+import * as S from "@distilled.cloud/core/schema";
+import * as Redacted from "effect/Redacted";
+import * as API from "@distilled.cloud/core/api";
+import * as C from "@distilled.cloud/core/category";
+import * as T from "../traits.ts";
+import {
+  StackitProtocol,
+  type StackitOpError,
+  type StackitOpContext,
+} from "../protocol.ts";
+import { UnknownStackitError } from "../errors.ts";
+import * as Retry from "../retry.ts";
+
+export type { StackitOpError, StackitOpContext };
+
+export class BadRequest
+  extends /*@__PURE__*/ T.applyErrorMatchers(
+    /*@__PURE__*/ S.TaggedError<BadRequest>()("BadRequest", {
+      code: S.Number,
+      message: S.String,
+    }).pipe(C.withBadRequestError),
+    [{ status: 400 }],
+  ) {}
+
+export class Conflict
+  extends /*@__PURE__*/ T.applyErrorMatchers(
+    /*@__PURE__*/ S.TaggedError<Conflict>()("Conflict", {
+      code: S.Number,
+      message: S.String,
+    }).pipe(C.withConflictError),
+    [{ status: 409 }],
+  ) {}
+
+export class Forbidden
+  extends /*@__PURE__*/ T.applyErrorMatchers(
+    /*@__PURE__*/ S.TaggedError<Forbidden>()("Forbidden", {
+      code: S.Number,
+      message: S.String,
+    }).pipe(C.withAuthError),
+    [{ status: 403 }],
+  ) {}
+
+export class NotFound
+  extends /*@__PURE__*/ T.applyErrorMatchers(
+    /*@__PURE__*/ S.TaggedError<NotFound>()("NotFound", {
+      code: S.Number,
+      message: S.String,
+    }).pipe(C.withBadRequestError),
+    [{ status: 404 }],
+  ) {}
+
+export interface BasicAuth {
+  /** The password or token */
+  password?: string | Redacted.Redacted<string>;
+  /** Type of authentication */
+  type?: string;
+  /** The username */
+  username?: string;
+}
+export const BasicAuth = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    password: S.optional(S.String.pipe(T.SensitiveValue({}))),
+    type: S.optional(S.String),
+    username: S.optional(S.String),
+  }),
+).annotate({ identifier: "BasicAuth" }) as any as S.Schema<BasicAuth>;
+
+/** No authentication required */
+export interface NoAuth {
+  /** Type of authentication */
+  type?: string;
+}
+export const NoAuth = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    type: S.optional(S.String),
+  }),
+).annotate({ identifier: "NoAuth" }) as any as S.Schema<NoAuth>;
+
+/** Authentication for Git repositories */
+export type GitAuth = BasicAuth | NoAuth;
+export const GitAuth = /*@__PURE__*/ S.Unknown as any as S.Schema<GitAuth>;
+
+/** Bundle type identifier. */
+export type GitDagBundleType = "git";
+export const GitDagBundleType = /*@__PURE__*/ S.String;
+
+/** A Git-based DAG bundle. Maps to airflow.providers.git.bundles.git.GitDagBundle. */
+export interface GitDagBundle {
+  auth: GitAuth;
+  /** The branch, tag or ref to track. */
+  branch: string;
+  /** Unique name for this bundle within the instance. Must be a valid DNS label (lowercase alphanumeric and hyphens, starting with a letter, max 63 characters). */
+  name: string;
+  /** How often (in seconds) to check for new commits. Defaults to 60. */
+  refreshInterval?: number;
+  /** Subdirectory within the repository containing DAG files. Defaults to root. Leading and trailing slashes are stripped automatically — the following four forms are all equivalent and stored as `dags/production`: `/dags/production/`, `dags/production/`, `/dags/production`, `dags/production`. */
+  subdir?: string;
+  /** Bundle type identifier. */
+  type: GitDagBundleType;
+  /** The URL of the Git repository. */
+  url: string;
+}
+export const GitDagBundle = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    auth: GitAuth,
+    branch: S.String,
+    name: S.String,
+    refreshInterval: S.optional(S.Number),
+    subdir: S.optional(S.String),
+    type: GitDagBundleType,
+    url: S.String,
+  }),
+).annotate({ identifier: "GitDagBundle" }) as any as S.Schema<GitDagBundle>;
+
+/** Type of authentication */
+export type S3AccessKeyAuthType = "accessKey";
+export const S3AccessKeyAuthType = /*@__PURE__*/ S.String;
+
+/** S3 access key credentials (access key ID + secret access key). */
+export interface S3AccessKeyAuth {
+  /** The S3 access key ID. */
+  accessKeyId: string | Redacted.Redacted<string>;
+  /** The S3 secret access key. This value is write-only and will not be returned in API responses. */
+  secretAccessKey: string | Redacted.Redacted<string>;
+  /** Type of authentication */
+  type: S3AccessKeyAuthType;
+}
+export const S3AccessKeyAuth = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    accessKeyId: S.String.pipe(T.SensitiveValue({})),
+    secretAccessKey: S.String.pipe(T.SensitiveValue({})),
+    type: S3AccessKeyAuthType,
+  }),
+).annotate({
+  identifier: "S3AccessKeyAuth",
+}) as any as S.Schema<S3AccessKeyAuth>;
+
+/** Authentication for S3-compatible object storage */
+export type S3Auth = S3AccessKeyAuth | NoAuth;
+export const S3Auth = /*@__PURE__*/ S.Unknown as any as S.Schema<S3Auth>;
+
+/** Bundle type identifier. */
+export type S3DagBundleType = "s3";
+export const S3DagBundleType = /*@__PURE__*/ S.String;
+
+/** An S3-based DAG bundle. Maps to airflow.providers.amazon.aws.bundles.s3.S3DagBundle. Compatible with any S3-compatible object storage (e.g. STACKIT Object Storage). */
+export interface S3DagBundle {
+  /** The S3 bucket name containing DAG files. */
+  bucketName: string;
+  /** S3-compatible endpoint URL. Defaults to https://object.storage.eu01.onstackit.cloud */
+  endpoint?: string;
+  /** Unique name for this bundle within the instance. Must be a valid DNS label (lowercase alphanumeric and hyphens, starting with a letter, max 63 characters). */
+  name: string;
+  /** Key prefix (folder path) within the bucket. Defaults to root. */
+  prefix?: string;
+  /** How often (in seconds) to check for new objects. Defaults to 60. */
+  refreshInterval?: number;
+  s3Auth: S3Auth;
+  /** Bundle type identifier. */
+  type: S3DagBundleType;
+}
+export const S3DagBundle = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    bucketName: S.String,
+    endpoint: S.optional(S.String),
+    name: S.String,
+    prefix: S.optional(S.String),
+    refreshInterval: S.optional(S.Number),
+    s3Auth: S3Auth,
+    type: S3DagBundleType,
+  }),
+).annotate({ identifier: "S3DagBundle" }) as any as S.Schema<S3DagBundle>;
+
+/** A DAG bundle configuration. Discriminated by the "type" field. Supported types are "git" and "s3". */
+export type CreateDagBundlePayload = GitDagBundle | S3DagBundle;
+export const CreateDagBundlePayload =
+  /*@__PURE__*/ S.Unknown as any as S.Schema<CreateDagBundlePayload>;
+
+export interface CreateDagBundleRequest {
+  /** The STACKIT portal project UUID the STACKIT Workflows instance is part of. */
+  projectId: string;
+  /** The STACKIT region the STACKIT Workflows instance is part of. */
+  regionId: string;
+  /** The STACKIT Workflows instance UUID. */
+  instanceId: string;
+  body: CreateDagBundlePayload;
+}
+export const CreateDagBundleRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    projectId: S.String.pipe(T.Label()),
+    regionId: S.String.pipe(T.Label()),
+    instanceId: S.String.pipe(T.Label()),
+    body: CreateDagBundlePayload.pipe(T.HttpBody()),
+  }).pipe(
+    T.Http({
+      method: "POST",
+      uri: "/v1alpha/projects/{projectId}/regions/{regionId}/instances/{instanceId}/dag-bundles",
+      code: 200,
+      baseUrl: "https://workflows.api.stackit.cloud",
+    }),
+  ),
+).annotate({
+  identifier: "CreateDagBundleRequest",
+}) as any as S.Schema<CreateDagBundleRequest>;
+
+/** Basic authentication as returned in API responses. The password field is always masked ("**********") and never contains the real value. */
+export interface BasicAuthResponseOutput {
+  /** Type of authentication */
+  type?: string;
+  /** The username */
+  username?: string;
+}
+export const BasicAuthResponseOutput = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    type: S.optional(S.String),
+    username: S.optional(S.String),
+  }),
+).annotate({
+  identifier: "BasicAuthResponseOutput",
+}) as any as S.Schema<BasicAuthResponseOutput>;
+
+/** Authentication configuration as returned in API responses. Credentials (passwords) are always masked and never returned in plain text. */
+export type GitAuthResponseOutput = BasicAuthResponseOutput | NoAuth;
+export const GitAuthResponseOutput =
+  /*@__PURE__*/ S.Unknown as any as S.Schema<GitAuthResponseOutput>;
+
+/** Bundle type identifier. */
+export type GitDagBundleResponseOutputType = "git";
+export const GitDagBundleResponseOutputType = /*@__PURE__*/ S.String;
+
+/** A Git-based DAG bundle as returned by the API. The auth structure (type, username) is included; passwords are masked. */
+export interface GitDagBundleResponseOutput {
+  auth: GitAuthResponseOutput;
+  /** The branch, tag or ref being tracked. */
+  branch: string;
+  /** Unique name for this bundle within the instance. */
+  name: string;
+  /** How often (in seconds) to check for new commits. */
+  refreshInterval?: number;
+  /** Subdirectory within the repository containing DAG files. Leading and trailing slashes are stripped automatically. Absent when set to root. */
+  subdir?: string;
+  /** Bundle type identifier. */
+  type: GitDagBundleResponseOutputType;
+  /** The URL of the Git repository. */
+  url: string;
+}
+export const GitDagBundleResponseOutput = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    auth: GitAuthResponseOutput,
+    branch: S.String,
+    name: S.String,
+    refreshInterval: S.optional(S.Number),
+    subdir: S.optional(S.String),
+    type: GitDagBundleResponseOutputType,
+    url: S.String,
+  }),
+).annotate({
+  identifier: "GitDagBundleResponseOutput",
+}) as any as S.Schema<GitDagBundleResponseOutput>;
+
+/** Type of authentication */
+export type S3AccessKeyAuthResponseType = "accessKey";
+export const S3AccessKeyAuthResponseType = /*@__PURE__*/ S.String;
+
+/** S3 access key credentials as returned in API responses. The secret access key is always masked ("**********") and never contains the real value. */
+export interface S3AccessKeyAuthResponse {
+  /** The S3 access key ID. */
+  accessKeyId: string | Redacted.Redacted<string>;
+  /** Always returned as "**********". The actual secret access key is never exposed in API responses. */
+  secretAccessKey?: string | Redacted.Redacted<string>;
+  /** Type of authentication */
+  type: S3AccessKeyAuthResponseType;
+}
+export const S3AccessKeyAuthResponse = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    accessKeyId: S.String.pipe(T.SensitiveValue({})),
+    secretAccessKey: S.optional(S.String.pipe(T.SensitiveValue({}))),
+    type: S3AccessKeyAuthResponseType,
+  }),
+).annotate({
+  identifier: "S3AccessKeyAuthResponse",
+}) as any as S.Schema<S3AccessKeyAuthResponse>;
+
+/** S3 authentication configuration as returned in API responses. Secret keys are always masked and never returned in plain text. */
+export type S3AuthResponse = S3AccessKeyAuthResponse | NoAuth;
+export const S3AuthResponse =
+  /*@__PURE__*/ S.Unknown as any as S.Schema<S3AuthResponse>;
+
+/** Bundle type identifier. */
+export type S3DagBundleResponseType = "s3";
+export const S3DagBundleResponseType = /*@__PURE__*/ S.String;
+
+/** An S3-based DAG bundle as returned by the API. The s3Auth structure (type, accessKeyId) is included; secret keys are masked. */
+export interface S3DagBundleResponse {
+  /** The S3 bucket name containing DAG files. */
+  bucketName: string;
+  /** S3-compatible endpoint URL. */
+  endpoint?: string;
+  /** Unique name for this bundle within the instance. */
+  name: string;
+  /** Key prefix (folder path) within the bucket. */
+  prefix?: string;
+  /** How often (in seconds) to check for new objects. */
+  refreshInterval?: number;
+  s3Auth: S3AuthResponse;
+  /** Bundle type identifier. */
+  type: S3DagBundleResponseType;
+}
+export const S3DagBundleResponse = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    bucketName: S.String,
+    endpoint: S.optional(S.String),
+    name: S.String,
+    prefix: S.optional(S.String),
+    refreshInterval: S.optional(S.Number),
+    s3Auth: S3AuthResponse,
+    type: S3DagBundleResponseType,
+  }),
+).annotate({
+  identifier: "S3DagBundleResponse",
+}) as any as S.Schema<S3DagBundleResponse>;
+
+/** A DAG bundle as returned by the API. Auth structure (type, username) is included but credentials (passwords, secret keys) are masked. Discriminated by the "type" field. */
+export type DagBundleResponseOutput =
+  | GitDagBundleResponseOutput
+  | S3DagBundleResponse;
+export const DagBundleResponseOutput =
+  /*@__PURE__*/ S.Unknown as any as S.Schema<DagBundleResponseOutput>;
+
+export type CreateDagBundleResponse = DagBundleResponseOutput;
+export const CreateDagBundleResponse = /*@__PURE__*/ S.suspend(() =>
+  DagBundleResponseOutput.pipe(T.RawResponseRoot()),
+).annotate({
+  identifier: "CreateDagBundleResponse",
+}) as any as S.Schema<CreateDagBundleResponse>;
+
+/** A DAG bundle configuration. Discriminated by the "type" field. Supported types are "git" and "s3". */
+export type DagBundle = GitDagBundle | S3DagBundle;
+export const DagBundle = /*@__PURE__*/ S.Unknown as any as S.Schema<DagBundle>;
+
+/** List of DAG bundles to configure. Supports Git and S3 sources. If provided, this takes precedence over dagsRepository. At least one bundle must be specified. Maximum 10 bundles. Only supported for Airflow 3 versions. */
+export type CreateInstanceRequestDagBundlesList = Array<DagBundle>;
+export const CreateInstanceRequestDagBundlesList = /*@__PURE__*/ S.Array(
+  DagBundle,
+) as any as S.Schema<CreateInstanceRequestDagBundlesList>;
+
+export interface GitRepository {
+  auth: GitAuth;
+  /** The branch in the repository to use */
+  branch: string;
+  /** The URL of the Git repository. */
+  url: string;
+}
+export const GitRepository = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    auth: GitAuth,
+    branch: S.String,
+    url: S.String,
+  }),
+).annotate({ identifier: "GitRepository" }) as any as S.Schema<GitRepository>;
+
+export type StackITIdentityProviderType = "stackit";
+export const StackITIdentityProviderType = /*@__PURE__*/ S.String;
+
+/** The default STACKIT identity provider. */
+export interface StackITIdentityProvider {
+  type: StackITIdentityProviderType;
+}
+export const StackITIdentityProvider = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    type: StackITIdentityProviderType,
+  }),
+).annotate({
+  identifier: "StackITIdentityProvider",
+}) as any as S.Schema<StackITIdentityProvider>;
+
+/** Expected audience(s) for API token validation when using the session endpoint for token exchange. */
+export type OAuth2IdentityProviderApiAudienceList = Array<string>;
+export const OAuth2IdentityProviderApiAudienceList = /*@__PURE__*/ S.Array(
+  S.String,
+) as any as S.Schema<OAuth2IdentityProviderApiAudienceList>;
+
+export type OAuth2IdentityProviderType = "oauth2";
+export const OAuth2IdentityProviderType = /*@__PURE__*/ S.String;
+
+/** Configuration for the custom OAuth2 identity provider used. */
+export interface OAuth2IdentityProvider {
+  /** Expected audience(s) for API token validation when using the session endpoint for token exchange. */
+  apiAudience?: OAuth2IdentityProviderApiAudienceList;
+  /** The client id of the STACKIT Workflows application in the identity provider. */
+  clientId: string;
+  /** The client secret of the STACKIT Workflows application in the identity provider. */
+  clientSecret: string | Redacted.Redacted<string>;
+  /** Discovery endpoint of the OAuth2 identity provider. This endpoint is used to fetch the OpenID configuration. Typically, this endpoint ends with `/.well-known/openid-configuration`. */
+  discoveryEndpoint: string;
+  /** The name of the OAuth2 identity provider that will show in STACKIT Workflows instance. The following special values modify the way a token is parsed. If any of the following IdPs is used, please specify the corresponding value: `azure`, `okta`, `aws_cognito`, `keycloak` */
+  name: string;
+  /** RFC 8707 Resource Indicators for OAuth 2.0. Optional resource parameter to indicate which resource the token is intended for. */
+  resource?: string;
+  /** Dot-separated path to extract roles from JWT claims (e.g., "realm_access.roles" or "resource_access.my_client.roles"). If not specified, provider-specific defaults are used. */
+  rolesClaim?: string;
+  /** Scopes to request for Authorization Code Flows. (UI login) */
+  scope: string;
+  type: OAuth2IdentityProviderType;
+}
+export const OAuth2IdentityProvider = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    apiAudience: S.optional(OAuth2IdentityProviderApiAudienceList),
+    clientId: S.String,
+    clientSecret: S.String.pipe(T.SensitiveValue({})),
+    discoveryEndpoint: S.String,
+    name: S.String,
+    resource: S.optional(S.String),
+    rolesClaim: S.optional(S.String),
+    scope: S.String,
+    type: OAuth2IdentityProviderType,
+  }),
+).annotate({
+  identifier: "OAuth2IdentityProvider",
+}) as any as S.Schema<OAuth2IdentityProvider>;
+
+/** Configuration for the identity provider used. */
+export type IdentityProvider = StackITIdentityProvider | OAuth2IdentityProvider;
+export const IdentityProvider =
+  /*@__PURE__*/ S.Unknown as any as S.Schema<IdentityProvider>;
+
+export interface Network {
+  id?: string;
+}
+export const Network = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    id: S.optional(S.String),
+  }),
+).annotate({ identifier: "Network" }) as any as S.Schema<Network>;
+
+export interface CreateInstanceRequest {
+  /** The STACKIT portal project UUID the STACKIT Workflows instance is part of. */
+  projectId: string;
+  /** The STACKIT region the STACKIT Workflows instance is part of. */
+  regionId: string;
+  /** List of DAG bundles to configure. Supports Git and S3 sources. If provided, this takes precedence over dagsRepository. At least one bundle must be specified. Maximum 10 bundles. Only supported for Airflow 3 versions. */
+  dagBundles?: CreateInstanceRequestDagBundlesList;
+  dagsRepository?: GitRepository;
+  /** A user chosen description to distinguish multiple STACKIT Workflows instances. */
+  description?: string;
+  /** The displayed name to distinguish multiple STACKIT Workflows instances. */
+  displayName: string;
+  /** Whether to enable the Airflow built-in example DAGs in this instance. Maps to airflow.config.core.load_examples in the Helm chart. Only supported for Airflow 3 instances. Defaults to false. */
+  enableAirflowExampleDags?: boolean;
+  /** Whether to include the STACKIT sample DAGs in this instance. Only supported for Airflow 3 instances. Defaults to false. */
+  enableStackitExampleDags?: boolean;
+  identityProvider?: IdentityProvider;
+  network?: Network;
+  /** Unique identifier of the customer's observability instance. */
+  observabilityId?: string;
+  /** The version of the STACKIT Workflows to use. For valid versions please take a look at [provider-options](#tag/provider-options/operation/get-provider-options) */
+  version: string;
+}
+export const CreateInstanceRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    projectId: S.String.pipe(T.Label()),
+    regionId: S.String.pipe(T.Label()),
+    dagBundles: S.optional(CreateInstanceRequestDagBundlesList),
+    dagsRepository: S.optional(GitRepository),
+    description: S.optional(S.String),
+    displayName: S.String,
+    enableAirflowExampleDags: S.optional(S.Boolean),
+    enableStackitExampleDags: S.optional(S.Boolean),
+    identityProvider: S.optional(IdentityProvider),
+    network: S.optional(Network),
+    observabilityId: S.optional(S.String),
+    version: S.String,
+  }).pipe(
+    T.Http({
+      method: "POST",
+      uri: "/v1alpha/projects/{projectId}/regions/{regionId}/instances",
+      code: 200,
+      baseUrl: "https://workflows.api.stackit.cloud",
+    }),
+  ),
+).annotate({
+  identifier: "CreateInstanceRequest",
+}) as any as S.Schema<CreateInstanceRequest>;
+
+/** All configured DAG bundles. This is the canonical source of truth for DAG sources. Available for Airflow 3 instances. */
+export type InstanceDagBundlesList = Array<DagBundle>;
+export const InstanceDagBundlesList = /*@__PURE__*/ S.Array(
+  DagBundle,
+) as any as S.Schema<InstanceDagBundlesList>;
+
+/** A collection of endpoints offered by the Workflows instance. */
+export interface Endpoints {
+  /** The authentication callback URL. */
+  redirectUrl: string;
+  /** The URL for the UI of the Workflows instance. */
+  url: string;
+}
+export const Endpoints = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    redirectUrl: S.String,
+    url: S.String,
+  }),
+).annotate({ identifier: "Endpoints" }) as any as S.Schema<Endpoints>;
+
+/** The current status of the STACKIT Workflows instance. */
+export type InstanceStatus =
+  | "creating"
+  | "active"
+  | "updating"
+  | "deleting"
+  | "failed";
+export const InstanceStatus = /*@__PURE__*/ S.String;
+
+export interface Instance {
+  /** The date and time the creation of the STACKIT Workflows instance was triggered. */
+  createdAt: string;
+  /** All configured DAG bundles. This is the canonical source of truth for DAG sources. Available for Airflow 3 instances. */
+  dagBundles?: InstanceDagBundlesList;
+  dagsRepository?: GitRepository;
+  /** A user chosen description to distinguish multiple STACKIT Workflows instances. */
+  description?: string;
+  /** The displayed name of the STACKIT Workflows instance. */
+  displayName: string;
+  /** Whether the Airflow built-in example DAGs are enabled in this instance. Only supported for Airflow 3 instances. */
+  enableAirflowExampleDags?: boolean;
+  /** Whether the STACKIT sample DAGs are included in this instance. Only supported for Airflow 3 instances. */
+  enableStackitExampleDags?: boolean;
+  endpoints: Endpoints;
+  /** A auto generated unique id which identifies the STACKIT Workflows instance. */
+  id: string;
+  identityProvider: IdentityProvider;
+  network?: Network;
+  /** Unique identifier of the customer's observability instance. */
+  observabilityId?: string;
+  /** The STACKIT portal project UUID the STACKIT Workflows instance is part of. */
+  projectId: string;
+  /** The STACKIT region the STACKIT Workflows instance is part of. */
+  regionId: string;
+  /** The current status of the STACKIT Workflows instance. */
+  status: InstanceStatus;
+  /** A message related to the current status. */
+  statusMessage?: string;
+  /** The currently configured STACKIT Workflows instance version. */
+  version: string;
+}
+export const Instance = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    createdAt: S.String,
+    dagBundles: S.optional(InstanceDagBundlesList),
+    dagsRepository: S.optional(GitRepository),
+    description: S.optional(S.String),
+    displayName: S.String,
+    enableAirflowExampleDags: S.optional(S.Boolean),
+    enableStackitExampleDags: S.optional(S.Boolean),
+    endpoints: Endpoints,
+    id: S.String,
+    identityProvider: IdentityProvider,
+    network: S.optional(Network),
+    observabilityId: S.optional(S.String),
+    projectId: S.String,
+    regionId: S.String,
+    status: InstanceStatus,
+    statusMessage: S.optional(S.String),
+    version: S.String,
+  }),
+).annotate({ identifier: "Instance" }) as any as S.Schema<Instance>;
+
+export interface DeleteDagBundleRequest {
+  /** The STACKIT portal project UUID the STACKIT Workflows instance is part of. */
+  projectId: string;
+  /** The STACKIT region the STACKIT Workflows instance is part of. */
+  regionId: string;
+  /** The STACKIT Workflows instance UUID. */
+  instanceId: string;
+  /** The unique name of the DAG bundle. Must be a valid DNS label (lowercase alphanumeric and hyphens, max 63 characters). */
+  bundleName: string;
+}
+export const DeleteDagBundleRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    projectId: S.String.pipe(T.Label()),
+    regionId: S.String.pipe(T.Label()),
+    instanceId: S.String.pipe(T.Label()),
+    bundleName: S.String.pipe(T.Label()),
+  }).pipe(
+    T.Http({
+      method: "DELETE",
+      uri: "/v1alpha/projects/{projectId}/regions/{regionId}/instances/{instanceId}/dag-bundles/{bundleName}",
+      code: 200,
+      baseUrl: "https://workflows.api.stackit.cloud",
+    }),
+  ),
+).annotate({
+  identifier: "DeleteDagBundleRequest",
+}) as any as S.Schema<DeleteDagBundleRequest>;
+
+export interface DeleteDagBundleResponse {}
+export const DeleteDagBundleResponse = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({}),
+).annotate({
+  identifier: "DeleteDagBundleResponse",
+}) as any as S.Schema<DeleteDagBundleResponse>;
+
+export interface DeleteInstanceRequest {
+  /** The STACKIT portal project UUID the STACKIT Workflows instance is part of. */
+  projectId: string;
+  /** The STACKIT region the STACKIT Workflows instance is part of. */
+  regionId: string;
+  /** The STACKIT Workflows instance UUID. */
+  instanceId: string;
+}
+export const DeleteInstanceRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    projectId: S.String.pipe(T.Label()),
+    regionId: S.String.pipe(T.Label()),
+    instanceId: S.String.pipe(T.Label()),
+  }).pipe(
+    T.Http({
+      method: "DELETE",
+      uri: "/v1alpha/projects/{projectId}/regions/{regionId}/instances/{instanceId}",
+      code: 200,
+      baseUrl: "https://workflows.api.stackit.cloud",
+    }),
+  ),
+).annotate({
+  identifier: "DeleteInstanceRequest",
+}) as any as S.Schema<DeleteInstanceRequest>;
+
+export interface DeleteInstanceResponse {}
+export const DeleteInstanceResponse = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({}),
+).annotate({
+  identifier: "DeleteInstanceResponse",
+}) as any as S.Schema<DeleteInstanceResponse>;
+
+export interface GetDagBundleRequest {
+  /** The STACKIT portal project UUID the STACKIT Workflows instance is part of. */
+  projectId: string;
+  /** The STACKIT region the STACKIT Workflows instance is part of. */
+  regionId: string;
+  /** The STACKIT Workflows instance UUID. */
+  instanceId: string;
+  /** The unique name of the DAG bundle. Must be a valid DNS label (lowercase alphanumeric and hyphens, max 63 characters). */
+  bundleName: string;
+}
+export const GetDagBundleRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    projectId: S.String.pipe(T.Label()),
+    regionId: S.String.pipe(T.Label()),
+    instanceId: S.String.pipe(T.Label()),
+    bundleName: S.String.pipe(T.Label()),
+  }).pipe(
+    T.Http({
+      method: "GET",
+      uri: "/v1alpha/projects/{projectId}/regions/{regionId}/instances/{instanceId}/dag-bundles/{bundleName}",
+      code: 200,
+      baseUrl: "https://workflows.api.stackit.cloud",
+    }),
+  ),
+).annotate({
+  identifier: "GetDagBundleRequest",
+}) as any as S.Schema<GetDagBundleRequest>;
+
+export type GetDagBundleResponse = DagBundleResponseOutput;
+export const GetDagBundleResponse = /*@__PURE__*/ S.suspend(() =>
+  DagBundleResponseOutput.pipe(T.RawResponseRoot()),
+).annotate({
+  identifier: "GetDagBundleResponse",
+}) as any as S.Schema<GetDagBundleResponse>;
+
+export interface GetInstanceRequest {
+  /** The STACKIT portal project UUID the STACKIT Workflows instance is part of. */
+  projectId: string;
+  /** The STACKIT region the STACKIT Workflows instance is part of. */
+  regionId: string;
+  /** The STACKIT Workflows instance UUID. */
+  instanceId: string;
+}
+export const GetInstanceRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    projectId: S.String.pipe(T.Label()),
+    regionId: S.String.pipe(T.Label()),
+    instanceId: S.String.pipe(T.Label()),
+  }).pipe(
+    T.Http({
+      method: "GET",
+      uri: "/v1alpha/projects/{projectId}/regions/{regionId}/instances/{instanceId}",
+      code: 200,
+      baseUrl: "https://workflows.api.stackit.cloud",
+    }),
+  ),
+).annotate({
+  identifier: "GetInstanceRequest",
+}) as any as S.Schema<GetInstanceRequest>;
+
+export interface GetProviderOptionsRequest {
+  /** The STACKIT region the STACKIT Workflows instance is part of. */
+  regionId: string;
+}
+export const GetProviderOptionsRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    regionId: S.String.pipe(T.Label()),
+  }).pipe(
+    T.Http({
+      method: "GET",
+      uri: "/v1alpha/regions/{regionId}/provider-options",
+      code: 200,
+      baseUrl: "https://workflows.api.stackit.cloud",
+    }),
+  ),
+).annotate({
+  identifier: "GetProviderOptionsRequest",
+}) as any as S.Schema<GetProviderOptionsRequest>;
+
+export interface SupportedVersion {
+  expirationDate?: string;
+  state: string;
+  version: string;
+}
+export const SupportedVersion = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    expirationDate: S.optional(S.String),
+    state: S.String,
+    version: S.String,
+  }),
+).annotate({
+  identifier: "SupportedVersion",
+}) as any as S.Schema<SupportedVersion>;
+
+export type ProviderOptionsVersionsList = Array<SupportedVersion>;
+export const ProviderOptionsVersionsList = /*@__PURE__*/ S.Array(
+  SupportedVersion,
+) as any as S.Schema<ProviderOptionsVersionsList>;
+
+export interface ProviderOptions {
+  versions: ProviderOptionsVersionsList;
+}
+export const ProviderOptions = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    versions: ProviderOptionsVersionsList,
+  }),
+).annotate({
+  identifier: "ProviderOptions",
+}) as any as S.Schema<ProviderOptions>;
+
+export interface ListDagBundlesRequest {
+  /** The STACKIT portal project UUID the STACKIT Workflows instance is part of. */
+  projectId: string;
+  /** The STACKIT region the STACKIT Workflows instance is part of. */
+  regionId: string;
+  /** The STACKIT Workflows instance UUID. */
+  instanceId: string;
+}
+export const ListDagBundlesRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    projectId: S.String.pipe(T.Label()),
+    regionId: S.String.pipe(T.Label()),
+    instanceId: S.String.pipe(T.Label()),
+  }).pipe(
+    T.Http({
+      method: "GET",
+      uri: "/v1alpha/projects/{projectId}/regions/{regionId}/instances/{instanceId}/dag-bundles",
+      code: 200,
+      baseUrl: "https://workflows.api.stackit.cloud",
+    }),
+  ),
+).annotate({
+  identifier: "ListDagBundlesRequest",
+}) as any as S.Schema<ListDagBundlesRequest>;
+
+/** List of all configured DAG bundles. Authentication type and username are returned for informational purposes; passwords and secrets are always masked. */
+export type ListDagBundlesResponseOutputDagBundlesList =
+  Array<DagBundleResponseOutput>;
+export const ListDagBundlesResponseOutputDagBundlesList = /*@__PURE__*/ S.Array(
+  DagBundleResponseOutput,
+) as any as S.Schema<ListDagBundlesResponseOutputDagBundlesList>;
+
+export interface ListDagBundlesResponseOutput {
+  /** List of all configured DAG bundles. Authentication type and username are returned for informational purposes; passwords and secrets are always masked. */
+  dagBundles: ListDagBundlesResponseOutputDagBundlesList;
+}
+export const ListDagBundlesResponseOutput = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    dagBundles: ListDagBundlesResponseOutputDagBundlesList,
+  }),
+).annotate({
+  identifier: "ListDagBundlesResponseOutput",
+}) as any as S.Schema<ListDagBundlesResponseOutput>;
+
+export interface ListInstancesRequest {
+  /** The STACKIT portal project UUID the STACKIT Workflows instance is part of. */
+  projectId: string;
+  /** The STACKIT region the STACKIT Workflows instance is part of. */
+  regionId: string;
+}
+export const ListInstancesRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    projectId: S.String.pipe(T.Label()),
+    regionId: S.String.pipe(T.Label()),
+  }).pipe(
+    T.Http({
+      method: "GET",
+      uri: "/v1alpha/projects/{projectId}/regions/{regionId}/instances",
+      code: 200,
+      baseUrl: "https://workflows.api.stackit.cloud",
+    }),
+  ),
+).annotate({
+  identifier: "ListInstancesRequest",
+}) as any as S.Schema<ListInstancesRequest>;
+
+export type ListInstancesResponseInstancesList = Array<Instance>;
+export const ListInstancesResponseInstancesList = /*@__PURE__*/ S.Array(
+  Instance,
+) as any as S.Schema<ListInstancesResponseInstancesList>;
+
+export interface ListInstancesResponse {
+  instances: ListInstancesResponseInstancesList;
+}
+export const ListInstancesResponse = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    instances: ListInstancesResponseInstancesList,
+  }),
+).annotate({
+  identifier: "ListInstancesResponse",
+}) as any as S.Schema<ListInstancesResponse>;
+
+/** Bundle type identifier — must match the existing bundle's type. */
+export type UpdateGitDagBundlePayloadType = "git";
+export const UpdateGitDagBundlePayloadType = /*@__PURE__*/ S.String;
+
+/** Partial update payload for a Git DAG bundle. All fields except "type" are optional; only the provided fields will be updated. */
+export interface UpdateGitDagBundlePayload {
+  auth?: GitAuth;
+  /** Updated branch/tag/ref to track. */
+  branch?: string;
+  /** Updated refresh interval in seconds. */
+  refreshInterval?: number;
+  /** Updated subdirectory within the repository. Set to empty string or "/" to clear an existing subdir. */
+  subdir?: string;
+  /** Bundle type identifier — must match the existing bundle's type. */
+  type: UpdateGitDagBundlePayloadType;
+  /** Updated Git repository URL. If changed, auth must also be provided. */
+  url?: string;
+}
+export const UpdateGitDagBundlePayload = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    auth: S.optional(GitAuth),
+    branch: S.optional(S.String),
+    refreshInterval: S.optional(S.Number),
+    subdir: S.optional(S.String),
+    type: UpdateGitDagBundlePayloadType,
+    url: S.optional(S.String),
+  }),
+).annotate({
+  identifier: "UpdateGitDagBundlePayload",
+}) as any as S.Schema<UpdateGitDagBundlePayload>;
+
+/** Bundle type identifier — must match the existing bundle's type. */
+export type UpdateS3DagBundlePayloadType = "s3";
+export const UpdateS3DagBundlePayloadType = /*@__PURE__*/ S.String;
+
+/** Partial update payload for an S3 DAG bundle. All fields except "type" are optional; only the provided fields will be updated. */
+export interface UpdateS3DagBundlePayload {
+  /** Updated S3 bucket name. If changed, s3Auth must also be provided. */
+  bucketName?: string;
+  /** Updated S3-compatible endpoint URL. If changed, s3Auth must also be provided. */
+  endpoint?: string;
+  /** Updated key prefix within the bucket. */
+  prefix?: string;
+  /** Updated refresh interval in seconds. */
+  refreshInterval?: number;
+  s3Auth?: S3Auth;
+  /** Bundle type identifier — must match the existing bundle's type. */
+  type: UpdateS3DagBundlePayloadType;
+}
+export const UpdateS3DagBundlePayload = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    bucketName: S.optional(S.String),
+    endpoint: S.optional(S.String),
+    prefix: S.optional(S.String),
+    refreshInterval: S.optional(S.Number),
+    s3Auth: S.optional(S3Auth),
+    type: UpdateS3DagBundlePayloadType,
+  }),
+).annotate({
+  identifier: "UpdateS3DagBundlePayload",
+}) as any as S.Schema<UpdateS3DagBundlePayload>;
+
+/** Partial update payload for a DAG bundle. The "type" field must be provided and must match the existing bundle's type ("git" or "s3"). Only the provided fields will be updated. Supplying fields that belong to the wrong type will be rejected. */
+export type UpdateDagBundlePayload =
+  | UpdateGitDagBundlePayload
+  | UpdateS3DagBundlePayload;
+export const UpdateDagBundlePayload =
+  /*@__PURE__*/ S.Unknown as any as S.Schema<UpdateDagBundlePayload>;
+
+export interface UpdateDagBundleRequest {
+  /** The STACKIT portal project UUID the STACKIT Workflows instance is part of. */
+  projectId: string;
+  /** The STACKIT region the STACKIT Workflows instance is part of. */
+  regionId: string;
+  /** The STACKIT Workflows instance UUID. */
+  instanceId: string;
+  /** The unique name of the DAG bundle. Must be a valid DNS label (lowercase alphanumeric and hyphens, max 63 characters). */
+  bundleName: string;
+  body: UpdateDagBundlePayload;
+}
+export const UpdateDagBundleRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    projectId: S.String.pipe(T.Label()),
+    regionId: S.String.pipe(T.Label()),
+    instanceId: S.String.pipe(T.Label()),
+    bundleName: S.String.pipe(T.Label()),
+    body: UpdateDagBundlePayload.pipe(T.HttpBody()),
+  }).pipe(
+    T.Http({
+      method: "PATCH",
+      uri: "/v1alpha/projects/{projectId}/regions/{regionId}/instances/{instanceId}/dag-bundles/{bundleName}",
+      code: 200,
+      baseUrl: "https://workflows.api.stackit.cloud",
+    }),
+  ),
+).annotate({
+  identifier: "UpdateDagBundleRequest",
+}) as any as S.Schema<UpdateDagBundleRequest>;
+
+export type UpdateDagBundleResponse = DagBundleResponseOutput;
+export const UpdateDagBundleResponse = /*@__PURE__*/ S.suspend(() =>
+  DagBundleResponseOutput.pipe(T.RawResponseRoot()),
+).annotate({
+  identifier: "UpdateDagBundleResponse",
+}) as any as S.Schema<UpdateDagBundleResponse>;
+
+export interface UpdateDagsRepositoryRequest {
+  /** The STACKIT portal project UUID the STACKIT Workflows instance is part of. */
+  projectId: string;
+  /** The STACKIT region the STACKIT Workflows instance is part of. */
+  regionId: string;
+  /** The STACKIT Workflows instance UUID. */
+  instanceId: string;
+  auth?: GitAuth;
+  /** The branch in the repository to use */
+  branch?: string;
+  /** The URL of the Git repository. */
+  url?: string;
+}
+export const UpdateDagsRepositoryRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    projectId: S.String.pipe(T.Label()),
+    regionId: S.String.pipe(T.Label()),
+    instanceId: S.String.pipe(T.Label()),
+    auth: S.optional(GitAuth),
+    branch: S.optional(S.String),
+    url: S.optional(S.String),
+  }).pipe(
+    T.Http({
+      method: "PATCH",
+      uri: "/v1alpha/projects/{projectId}/regions/{regionId}/instances/{instanceId}/dags-repository",
+      code: 200,
+      baseUrl: "https://workflows.api.stackit.cloud",
+    }),
+  ),
+).annotate({
+  identifier: "UpdateDagsRepositoryRequest",
+}) as any as S.Schema<UpdateDagsRepositoryRequest>;
+
+/** Updated expected audience(s) for API token validation. Set to empty array to disable audience validation. */
+export type OAuth2IdentityProviderPatchApiAudienceList = Array<string>;
+export const OAuth2IdentityProviderPatchApiAudienceList = /*@__PURE__*/ S.Array(
+  S.String,
+) as any as S.Schema<OAuth2IdentityProviderPatchApiAudienceList>;
+
+/** Request to update an OAuth2 identity provider configuration */
+export interface OAuth2IdentityProviderPatch {
+  /** Updated expected audience(s) for API token validation. Set to empty array to disable audience validation. */
+  apiAudience?: OAuth2IdentityProviderPatchApiAudienceList;
+  /** Updated client id of the STACKIT Workflows application in the identity provider. If changed, requires to also set the client secret. */
+  clientId?: string;
+  /** Updated client secret of the STACKIT Workflows application in the identity provider. */
+  clientSecret?: string | Redacted.Redacted<string>;
+  /** Updated discovery endpoint of the OAuth2 identity provider. If changed, requires to also set the client id and client secret. */
+  discoveryEndpoint?: string;
+  /** Updated name of the OAuth2 identity provider. */
+  name?: string;
+  /** Updated RFC 8707 resource parameter. Set to empty string to remove the resource parameter. */
+  resource?: string;
+  /** Updated dot-separated path to extract roles from JWT claims. Set to empty string to use provider-specific defaults. */
+  rolesClaim?: string;
+  /** Updated scopes to request for Authorization Code Flows. (UI login) */
+  scope?: string;
+}
+export const OAuth2IdentityProviderPatch = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    apiAudience: S.optional(OAuth2IdentityProviderPatchApiAudienceList),
+    clientId: S.optional(S.String),
+    clientSecret: S.optional(S.String.pipe(T.SensitiveValue({}))),
+    discoveryEndpoint: S.optional(S.String),
+    name: S.optional(S.String),
+    resource: S.optional(S.String),
+    rolesClaim: S.optional(S.String),
+    scope: S.optional(S.String),
+  }),
+).annotate({
+  identifier: "OAuth2IdentityProviderPatch",
+}) as any as S.Schema<OAuth2IdentityProviderPatch>;
+
+/** Request to update an identity provider configuration */
+export type UpdateIdentityProviderPayload =
+  | StackITIdentityProvider
+  | OAuth2IdentityProviderPatch;
+export const UpdateIdentityProviderPayload =
+  /*@__PURE__*/ S.Unknown as any as S.Schema<UpdateIdentityProviderPayload>;
+
+export interface UpdateIdentityProviderRequest {
+  /** The STACKIT portal project UUID the STACKIT Workflows instance is part of. */
+  projectId: string;
+  /** The STACKIT region the STACKIT Workflows instance is part of. */
+  regionId: string;
+  /** The STACKIT Workflows instance UUID. */
+  instanceId: string;
+  body: UpdateIdentityProviderPayload;
+}
+export const UpdateIdentityProviderRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    projectId: S.String.pipe(T.Label()),
+    regionId: S.String.pipe(T.Label()),
+    instanceId: S.String.pipe(T.Label()),
+    body: UpdateIdentityProviderPayload.pipe(T.HttpBody()),
+  }).pipe(
+    T.Http({
+      method: "PATCH",
+      uri: "/v1alpha/projects/{projectId}/regions/{regionId}/instances/{instanceId}/identity-provider",
+      code: 200,
+      baseUrl: "https://workflows.api.stackit.cloud",
+    }),
+  ),
+).annotate({
+  identifier: "UpdateIdentityProviderRequest",
+}) as any as S.Schema<UpdateIdentityProviderRequest>;
+
+export interface UpdateInstanceRequest {
+  /** The STACKIT portal project UUID the STACKIT Workflows instance is part of. */
+  projectId: string;
+  /** The STACKIT region the STACKIT Workflows instance is part of. */
+  regionId: string;
+  /** The STACKIT Workflows instance UUID. */
+  instanceId: string;
+  /** A user chosen description to distinguish multiple STACKIT Workflows instances. If not provided, the description won't be updated. Set to empty string to remove the description. */
+  description?: string;
+  /** The displayed name to distinguish multiple STACKIT Workflows instances. If not provided, the display name won't be updated. */
+  displayName?: string;
+  /** Whether to enable the Airflow built-in example DAGs in this instance. Maps to airflow.config.core.load_examples in the Helm chart. Only supported for Airflow 3 instances. If not provided, the setting won't be updated. */
+  enableAirflowExampleDags?: boolean;
+  /** Whether to include the STACKIT sample DAGs in this instance. Only supported for Airflow 3 instances. If not provided, the setting won't be updated. */
+  enableStackitExampleDags?: boolean;
+  /** The STACKIT Workflows version to use. For valid versions please take a look at [provider-options](#tag/provider-options/operation/get-provider-options) If not provided, the version won't be updated. */
+  version?: string;
+}
+export const UpdateInstanceRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    projectId: S.String.pipe(T.Label()),
+    regionId: S.String.pipe(T.Label()),
+    instanceId: S.String.pipe(T.Label()),
+    description: S.optional(S.String),
+    displayName: S.optional(S.String),
+    enableAirflowExampleDags: S.optional(S.Boolean),
+    enableStackitExampleDags: S.optional(S.Boolean),
+    version: S.optional(S.String),
+  }).pipe(
+    T.Http({
+      method: "PATCH",
+      uri: "/v1alpha/projects/{projectId}/regions/{regionId}/instances/{instanceId}",
+      code: 200,
+      baseUrl: "https://workflows.api.stackit.cloud",
+    }),
+  ),
+).annotate({
+  identifier: "UpdateInstanceRequest",
+}) as any as S.Schema<UpdateInstanceRequest>;
+
+export interface UpdateObservabilityRequest {
+  /** The STACKIT portal project UUID the STACKIT Workflows instance is part of. */
+  projectId: string;
+  /** The STACKIT region the STACKIT Workflows instance is part of. */
+  regionId: string;
+  /** The STACKIT Workflows instance UUID. */
+  instanceId: string;
+  /** Unique identifier of the customer's observability instance. */
+  observabilityId?: string;
+}
+export const UpdateObservabilityRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    projectId: S.String.pipe(T.Label()),
+    regionId: S.String.pipe(T.Label()),
+    instanceId: S.String.pipe(T.Label()),
+    observabilityId: S.optional(S.String),
+  }).pipe(
+    T.Http({
+      method: "PATCH",
+      uri: "/v1alpha/projects/{projectId}/regions/{regionId}/instances/{instanceId}/observability",
+      code: 200,
+      baseUrl: "https://workflows.api.stackit.cloud",
+    }),
+  ),
+).annotate({
+  identifier: "UpdateObservabilityRequest",
+}) as any as S.Schema<UpdateObservabilityRequest>;
+
+export type CreateDagBundleError =
+  | BadRequest
+  | Forbidden
+  | NotFound
+  | Conflict
+  | StackitOpError;
+/** Adds a new DAG bundle to this STACKIT Workflows instance. Only supported for Airflow 3 instances. Maximum 10 bundles per instance. */
+export const createDagBundle: API.OperationMethod<
+  CreateDagBundleRequest,
+  CreateDagBundleResponse,
+  CreateDagBundleError,
+  StackitOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: CreateDagBundleRequest,
+  output: CreateDagBundleResponse,
+  errors: [BadRequest, Forbidden, NotFound, Conflict, UnknownStackitError],
+  protocol: StackitProtocol,
+  retry: Retry.Retry,
+}));
+
+export type CreateInstanceError = BadRequest | Forbidden | StackitOpError;
+/** Creates a new STACKIT Workflows instance within the project. */
+export const createInstance: API.OperationMethod<
+  CreateInstanceRequest,
+  Instance,
+  CreateInstanceError,
+  StackitOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: CreateInstanceRequest,
+  output: Instance,
+  errors: [BadRequest, Forbidden, UnknownStackitError],
+  protocol: StackitProtocol,
+  retry: Retry.Retry,
+}));
+
+export type DeleteDagBundleError =
+  | BadRequest
+  | Forbidden
+  | NotFound
+  | Conflict
+  | StackitOpError;
+/** Removes a DAG bundle from this STACKIT Workflows instance. At least one bundle must remain configured. Only supported for Airflow 3 instances. */
+export const deleteDagBundle: API.OperationMethod<
+  DeleteDagBundleRequest,
+  DeleteDagBundleResponse,
+  DeleteDagBundleError,
+  StackitOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: DeleteDagBundleRequest,
+  output: DeleteDagBundleResponse,
+  errors: [BadRequest, Forbidden, NotFound, Conflict, UnknownStackitError],
+  protocol: StackitProtocol,
+  retry: Retry.Retry,
+}));
+
+export type DeleteInstanceError =
+  | BadRequest
+  | Forbidden
+  | NotFound
+  | Conflict
+  | StackitOpError;
+/** Deletes the given STACKIT Workflows instance. */
+export const deleteInstance: API.OperationMethod<
+  DeleteInstanceRequest,
+  DeleteInstanceResponse,
+  DeleteInstanceError,
+  StackitOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: DeleteInstanceRequest,
+  output: DeleteInstanceResponse,
+  errors: [BadRequest, Forbidden, NotFound, Conflict, UnknownStackitError],
+  protocol: StackitProtocol,
+  retry: Retry.Retry,
+}));
+
+export type GetDagBundleError = Forbidden | NotFound | StackitOpError;
+/** Returns the configuration of a single DAG bundle. */
+export const getDagBundle: API.OperationMethod<
+  GetDagBundleRequest,
+  GetDagBundleResponse,
+  GetDagBundleError,
+  StackitOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: GetDagBundleRequest,
+  output: GetDagBundleResponse,
+  errors: [Forbidden, NotFound, UnknownStackitError],
+  protocol: StackitProtocol,
+  retry: Retry.Retry,
+}));
+
+export type GetInstanceError =
+  | BadRequest
+  | Forbidden
+  | NotFound
+  | StackitOpError;
+/** Returns the details for the given STACKIT Workflows instance. */
+export const getInstance: API.OperationMethod<
+  GetInstanceRequest,
+  Instance,
+  GetInstanceError,
+  StackitOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: GetInstanceRequest,
+  output: Instance,
+  errors: [BadRequest, Forbidden, NotFound, UnknownStackitError],
+  protocol: StackitProtocol,
+  retry: Retry.Retry,
+}));
+
+export type GetProviderOptionsError = BadRequest | StackitOpError;
+/** Get provider options Returns a list of supported configuration options for this region. */
+export const getProviderOptions: API.OperationMethod<
+  GetProviderOptionsRequest,
+  ProviderOptions,
+  GetProviderOptionsError,
+  StackitOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: GetProviderOptionsRequest,
+  output: ProviderOptions,
+  errors: [BadRequest, UnknownStackitError],
+  protocol: StackitProtocol,
+  retry: Retry.Retry,
+}));
+
+export type ListDagBundlesError =
+  | BadRequest
+  | Forbidden
+  | NotFound
+  | StackitOpError;
+/** Returns a list of all DAG bundles configured for this STACKIT Workflows instance. */
+export const listDagBundles: API.OperationMethod<
+  ListDagBundlesRequest,
+  ListDagBundlesResponseOutput,
+  ListDagBundlesError,
+  StackitOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: ListDagBundlesRequest,
+  output: ListDagBundlesResponseOutput,
+  errors: [BadRequest, Forbidden, NotFound, UnknownStackitError],
+  protocol: StackitProtocol,
+  retry: Retry.Retry,
+}));
+
+export type ListInstancesError = BadRequest | Forbidden | StackitOpError;
+/** Returns a list of all STACKIT Workflows instances within the project. */
+export const listInstances: API.OperationMethod<
+  ListInstancesRequest,
+  ListInstancesResponse,
+  ListInstancesError,
+  StackitOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: ListInstancesRequest,
+  output: ListInstancesResponse,
+  errors: [BadRequest, Forbidden, UnknownStackitError],
+  protocol: StackitProtocol,
+  retry: Retry.Retry,
+}));
+
+export type UpdateDagBundleError =
+  | BadRequest
+  | Forbidden
+  | NotFound
+  | StackitOpError;
+/** Updates an existing DAG bundle. The bundle type (git/s3) is inferred from the existing bundle and cannot be changed. To change the type, delete and recreate the bundle. Only supported for Airflow 3 instances. */
+export const updateDagBundle: API.OperationMethod<
+  UpdateDagBundleRequest,
+  UpdateDagBundleResponse,
+  UpdateDagBundleError,
+  StackitOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: UpdateDagBundleRequest,
+  output: UpdateDagBundleResponse,
+  errors: [BadRequest, Forbidden, NotFound, UnknownStackitError],
+  protocol: StackitProtocol,
+  retry: Retry.Retry,
+}));
+
+export type UpdateDagsRepositoryError =
+  | BadRequest
+  | Forbidden
+  | NotFound
+  | StackitOpError;
+/** Updates the DAGs repository configuration for this STACKIT Workflows instance. */
+export const updateDagsRepository: API.OperationMethod<
+  UpdateDagsRepositoryRequest,
+  Instance,
+  UpdateDagsRepositoryError,
+  StackitOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: UpdateDagsRepositoryRequest,
+  output: Instance,
+  errors: [BadRequest, Forbidden, NotFound, UnknownStackitError],
+  protocol: StackitProtocol,
+  retry: Retry.Retry,
+}));
+
+export type UpdateIdentityProviderError =
+  | BadRequest
+  | Forbidden
+  | NotFound
+  | StackitOpError;
+/** Updates the identity provider configuration for this STACKIT Workflows instance. */
+export const updateIdentityProvider: API.OperationMethod<
+  UpdateIdentityProviderRequest,
+  Instance,
+  UpdateIdentityProviderError,
+  StackitOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: UpdateIdentityProviderRequest,
+  output: Instance,
+  errors: [BadRequest, Forbidden, NotFound, UnknownStackitError],
+  protocol: StackitProtocol,
+  retry: Retry.Retry,
+}));
+
+export type UpdateInstanceError =
+  | BadRequest
+  | Forbidden
+  | NotFound
+  | Conflict
+  | StackitOpError;
+/** Updates core Attributes of this STACKIT Workflows Instance. */
+export const updateInstance: API.OperationMethod<
+  UpdateInstanceRequest,
+  Instance,
+  UpdateInstanceError,
+  StackitOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: UpdateInstanceRequest,
+  output: Instance,
+  errors: [BadRequest, Forbidden, NotFound, Conflict, UnknownStackitError],
+  protocol: StackitProtocol,
+  retry: Retry.Retry,
+}));
+
+export type UpdateObservabilityError =
+  | BadRequest
+  | Forbidden
+  | NotFound
+  | StackitOpError;
+/** Updates the Observability configuration for this STACKIT Workflows instance. */
+export const updateObservability: API.OperationMethod<
+  UpdateObservabilityRequest,
+  Instance,
+  UpdateObservabilityError,
+  StackitOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: UpdateObservabilityRequest,
+  output: Instance,
+  errors: [BadRequest, Forbidden, NotFound, UnknownStackitError],
+  protocol: StackitProtocol,
+  retry: Retry.Retry,
+}));