@distilled.cloud/stackit 0.0.0-stage → 1.0.0-rc.13

package/lib/services/kms.js

@@ -0,0 +1,703 @@
+// AUTO-GENERATED by scripts/generate.ts from .generated-specs (specs/spec-mirror-stackit). Do not edit.
+import * as S from "@distilled.cloud/core/schema";
+import * as API from "@distilled.cloud/core/api";
+import * as C from "@distilled.cloud/core/category";
+import * as T from "../traits.js";
+import { StackitProtocol, } from "../protocol.js";
+import { UnknownStackitError } from "../errors.js";
+import * as Retry from "../retry.js";
+export class BadRequest extends /*@__PURE__*/ /*@__PURE__*/ T.applyErrorMatchers(
+/*@__PURE__*/ S.TaggedError()("BadRequest", {
+    code: S.Number,
+    message: S.String,
+}).pipe(C.withBadRequestError), [{ status: 400 }]) {
+}
+export class Conflict extends /*@__PURE__*/ /*@__PURE__*/ T.applyErrorMatchers(
+/*@__PURE__*/ S.TaggedError()("Conflict", {
+    code: S.Number,
+    message: S.String,
+}).pipe(C.withConflictError), [{ status: 409 }]) {
+}
+export class Forbidden extends /*@__PURE__*/ /*@__PURE__*/ T.applyErrorMatchers(
+/*@__PURE__*/ S.TaggedError()("Forbidden", {
+    code: S.Number,
+    message: S.String,
+}).pipe(C.withAuthError), [{ status: 403 }]) {
+}
+export class NotFound extends /*@__PURE__*/ /*@__PURE__*/ T.applyErrorMatchers(
+/*@__PURE__*/ S.TaggedError()("NotFound", {
+    code: S.Number,
+    message: S.String,
+}).pipe(C.withBadRequestError), [{ status: 404 }]) {
+}
+export const CreateKeyRequestRegionId = /*@__PURE__*/ S.String;
+export const AccessScope = /*@__PURE__*/ S.String;
+export const Algorithm = /*@__PURE__*/ S.String;
+export const Purpose = /*@__PURE__*/ S.String;
+export const CreateKeyRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    projectId: S.String.pipe(T.Label()),
+    regionId: CreateKeyRequestRegionId.pipe(T.Label()),
+    keyRingId: S.String.pipe(T.Label()),
+    access_scope: S.optional(AccessScope),
+    algorithm: Algorithm,
+    description: S.optional(S.String),
+    displayName: S.String,
+    importOnly: S.optional(S.Boolean),
+    protection: S.String,
+    purpose: Purpose,
+}).pipe(T.Http({
+    method: "POST",
+    uri: "/v1/projects/{projectId}/regions/{regionId}/keyrings/{keyRingId}/keys",
+    code: 200,
+    baseUrl: "https://kms.api.stackit.cloud",
+}))).annotate({
+    identifier: "CreateKeyRequest",
+});
+export const KeyState = /*@__PURE__*/ S.String;
+export const Key = /*@__PURE__*/ S.suspend(() => S.Struct({
+    access_scope: AccessScope,
+    algorithm: Algorithm,
+    createdAt: S.String,
+    deletionDate: S.optional(S.String),
+    description: S.optional(S.String),
+    displayName: S.String,
+    id: S.String,
+    importOnly: S.Boolean,
+    keyRingId: S.String,
+    protection: S.String,
+    purpose: Purpose,
+    state: KeyState,
+})).annotate({ identifier: "Key" });
+export const CreateKeyRingRequestRegionId = /*@__PURE__*/ S.String;
+export const CreateKeyRingRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    projectId: S.String.pipe(T.Label()),
+    regionId: CreateKeyRingRequestRegionId.pipe(T.Label()),
+    description: S.optional(S.String),
+    displayName: S.String,
+}).pipe(T.Http({
+    method: "POST",
+    uri: "/v1/projects/{projectId}/regions/{regionId}/keyrings",
+    code: 200,
+    baseUrl: "https://kms.api.stackit.cloud",
+}))).annotate({
+    identifier: "CreateKeyRingRequest",
+});
+export const KeyRingState = /*@__PURE__*/ S.String;
+export const KeyRing = /*@__PURE__*/ S.suspend(() => S.Struct({
+    createdAt: S.String,
+    description: S.optional(S.String),
+    displayName: S.String,
+    id: S.String,
+    state: KeyRingState,
+})).annotate({ identifier: "KeyRing" });
+export const CreateWrappingKeyRequestRegionId = /*@__PURE__*/ S.String;
+export const WrappingAlgorithm = /*@__PURE__*/ S.String;
+export const WrappingPurpose = /*@__PURE__*/ S.String;
+export const CreateWrappingKeyRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    projectId: S.String.pipe(T.Label()),
+    regionId: CreateWrappingKeyRequestRegionId.pipe(T.Label()),
+    keyRingId: S.String.pipe(T.Label()),
+    access_scope: S.optional(AccessScope),
+    algorithm: WrappingAlgorithm,
+    description: S.optional(S.String),
+    displayName: S.String,
+    protection: S.String,
+    purpose: WrappingPurpose,
+}).pipe(T.Http({
+    method: "POST",
+    uri: "/v1/projects/{projectId}/regions/{regionId}/keyrings/{keyRingId}/wrappingkeys",
+    code: 200,
+    baseUrl: "https://kms.api.stackit.cloud",
+}))).annotate({
+    identifier: "CreateWrappingKeyRequest",
+});
+export const WrappingKeyState = /*@__PURE__*/ S.String;
+export const WrappingKey = /*@__PURE__*/ S.suspend(() => S.Struct({
+    access_scope: AccessScope,
+    algorithm: WrappingAlgorithm,
+    createdAt: S.String,
+    description: S.optional(S.String),
+    displayName: S.String,
+    expiresAt: S.String,
+    id: S.String,
+    keyRingId: S.String,
+    protection: S.String,
+    publicKey: S.optional(S.String),
+    purpose: WrappingPurpose,
+    state: WrappingKeyState,
+})).annotate({ identifier: "WrappingKey" });
+export const DecryptRequestRegionId = /*@__PURE__*/ S.String;
+export const DecryptRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    projectId: S.String.pipe(T.Label()),
+    regionId: DecryptRequestRegionId.pipe(T.Label()),
+    keyRingId: S.String.pipe(T.Label()),
+    keyId: S.String.pipe(T.Label()),
+    versionNumber: S.Number.pipe(T.Label()),
+    data: S.String,
+}).pipe(T.Http({
+    method: "POST",
+    uri: "/v1/projects/{projectId}/regions/{regionId}/keyrings/{keyRingId}/keys/{keyId}/versions/{versionNumber}/decrypt",
+    code: 200,
+    baseUrl: "https://kms.api.stackit.cloud",
+}))).annotate({ identifier: "DecryptRequest" });
+export const DecryptedData = /*@__PURE__*/ S.suspend(() => S.Struct({
+    data: S.String,
+})).annotate({ identifier: "DecryptedData" });
+export const DeleteKeyRequestRegionId = /*@__PURE__*/ S.String;
+export const DeleteKeyRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    projectId: S.String.pipe(T.Label()),
+    regionId: DeleteKeyRequestRegionId.pipe(T.Label()),
+    keyRingId: S.String.pipe(T.Label()),
+    keyId: S.String.pipe(T.Label()),
+}).pipe(T.Http({
+    method: "DELETE",
+    uri: "/v1/projects/{projectId}/regions/{regionId}/keyrings/{keyRingId}/keys/{keyId}",
+    code: 200,
+    baseUrl: "https://kms.api.stackit.cloud",
+}))).annotate({
+    identifier: "DeleteKeyRequest",
+});
+export const DeleteKeyResponse = /*@__PURE__*/ S.suspend(() => S.Struct({})).annotate({
+    identifier: "DeleteKeyResponse",
+});
+export const DeleteKeyRingRequestRegionId = /*@__PURE__*/ S.String;
+export const DeleteKeyRingRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    projectId: S.String.pipe(T.Label()),
+    regionId: DeleteKeyRingRequestRegionId.pipe(T.Label()),
+    keyRingId: S.String.pipe(T.Label()),
+}).pipe(T.Http({
+    method: "DELETE",
+    uri: "/v1/projects/{projectId}/regions/{regionId}/keyrings/{keyRingId}",
+    code: 200,
+    baseUrl: "https://kms.api.stackit.cloud",
+}))).annotate({
+    identifier: "DeleteKeyRingRequest",
+});
+export const DeleteKeyRingResponse = /*@__PURE__*/ S.suspend(() => S.Struct({})).annotate({
+    identifier: "DeleteKeyRingResponse",
+});
+export const DeleteWrappingKeyRequestRegionId = /*@__PURE__*/ S.String;
+export const DeleteWrappingKeyRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    projectId: S.String.pipe(T.Label()),
+    regionId: DeleteWrappingKeyRequestRegionId.pipe(T.Label()),
+    keyRingId: S.String.pipe(T.Label()),
+    wrappingKeyId: S.String.pipe(T.Label()),
+}).pipe(T.Http({
+    method: "DELETE",
+    uri: "/v1/projects/{projectId}/regions/{regionId}/keyrings/{keyRingId}/wrappingkeys/{wrappingKeyId}",
+    code: 200,
+    baseUrl: "https://kms.api.stackit.cloud",
+}))).annotate({
+    identifier: "DeleteWrappingKeyRequest",
+});
+export const DeleteWrappingKeyResponse = /*@__PURE__*/ S.suspend(() => S.Struct({})).annotate({
+    identifier: "DeleteWrappingKeyResponse",
+});
+export const DestroyVersionRequestRegionId = /*@__PURE__*/ S.String;
+export const DestroyVersionRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    projectId: S.String.pipe(T.Label()),
+    regionId: DestroyVersionRequestRegionId.pipe(T.Label()),
+    keyRingId: S.String.pipe(T.Label()),
+    keyId: S.String.pipe(T.Label()),
+    versionNumber: S.Number.pipe(T.Label()),
+}).pipe(T.Http({
+    method: "POST",
+    uri: "/v1/projects/{projectId}/regions/{regionId}/keyrings/{keyRingId}/keys/{keyId}/versions/{versionNumber}/destroy",
+    code: 200,
+    baseUrl: "https://kms.api.stackit.cloud",
+}))).annotate({
+    identifier: "DestroyVersionRequest",
+});
+export const DestroyVersionResponse = /*@__PURE__*/ S.suspend(() => S.Struct({})).annotate({
+    identifier: "DestroyVersionResponse",
+});
+export const DisableVersionRequestRegionId = /*@__PURE__*/ S.String;
+export const DisableVersionRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    projectId: S.String.pipe(T.Label()),
+    regionId: DisableVersionRequestRegionId.pipe(T.Label()),
+    keyRingId: S.String.pipe(T.Label()),
+    keyId: S.String.pipe(T.Label()),
+    versionNumber: S.Number.pipe(T.Label()),
+}).pipe(T.Http({
+    method: "POST",
+    uri: "/v1/projects/{projectId}/regions/{regionId}/keyrings/{keyRingId}/keys/{keyId}/versions/{versionNumber}/disable",
+    code: 200,
+    baseUrl: "https://kms.api.stackit.cloud",
+}))).annotate({
+    identifier: "DisableVersionRequest",
+});
+export const DisableVersionResponse = /*@__PURE__*/ S.suspend(() => S.Struct({})).annotate({
+    identifier: "DisableVersionResponse",
+});
+export const EnableVersionRequestRegionId = /*@__PURE__*/ S.String;
+export const EnableVersionRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    projectId: S.String.pipe(T.Label()),
+    regionId: EnableVersionRequestRegionId.pipe(T.Label()),
+    keyRingId: S.String.pipe(T.Label()),
+    keyId: S.String.pipe(T.Label()),
+    versionNumber: S.Number.pipe(T.Label()),
+}).pipe(T.Http({
+    method: "POST",
+    uri: "/v1/projects/{projectId}/regions/{regionId}/keyrings/{keyRingId}/keys/{keyId}/versions/{versionNumber}/enable",
+    code: 200,
+    baseUrl: "https://kms.api.stackit.cloud",
+}))).annotate({
+    identifier: "EnableVersionRequest",
+});
+export const EnableVersionResponse = /*@__PURE__*/ S.suspend(() => S.Struct({})).annotate({
+    identifier: "EnableVersionResponse",
+});
+export const EncryptRequestRegionId = /*@__PURE__*/ S.String;
+export const EncryptRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    projectId: S.String.pipe(T.Label()),
+    regionId: EncryptRequestRegionId.pipe(T.Label()),
+    keyRingId: S.String.pipe(T.Label()),
+    keyId: S.String.pipe(T.Label()),
+    versionNumber: S.Number.pipe(T.Label()),
+    data: S.String,
+}).pipe(T.Http({
+    method: "POST",
+    uri: "/v1/projects/{projectId}/regions/{regionId}/keyrings/{keyRingId}/keys/{keyId}/versions/{versionNumber}/encrypt",
+    code: 200,
+    baseUrl: "https://kms.api.stackit.cloud",
+}))).annotate({ identifier: "EncryptRequest" });
+export const EncryptedData = /*@__PURE__*/ S.suspend(() => S.Struct({
+    data: S.String,
+})).annotate({ identifier: "EncryptedData" });
+export const GetKeyRequestRegionId = /*@__PURE__*/ S.String;
+export const GetKeyRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    projectId: S.String.pipe(T.Label()),
+    regionId: GetKeyRequestRegionId.pipe(T.Label()),
+    keyRingId: S.String.pipe(T.Label()),
+    keyId: S.String.pipe(T.Label()),
+}).pipe(T.Http({
+    method: "GET",
+    uri: "/v1/projects/{projectId}/regions/{regionId}/keyrings/{keyRingId}/keys/{keyId}",
+    code: 200,
+    baseUrl: "https://kms.api.stackit.cloud",
+}))).annotate({ identifier: "GetKeyRequest" });
+export const GetKeyRingRequestRegionId = /*@__PURE__*/ S.String;
+export const GetKeyRingRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    projectId: S.String.pipe(T.Label()),
+    regionId: GetKeyRingRequestRegionId.pipe(T.Label()),
+    keyRingId: S.String.pipe(T.Label()),
+}).pipe(T.Http({
+    method: "GET",
+    uri: "/v1/projects/{projectId}/regions/{regionId}/keyrings/{keyRingId}",
+    code: 200,
+    baseUrl: "https://kms.api.stackit.cloud",
+}))).annotate({
+    identifier: "GetKeyRingRequest",
+});
+export const GetVersionRequestRegionId = /*@__PURE__*/ S.String;
+export const GetVersionRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    projectId: S.String.pipe(T.Label()),
+    regionId: GetVersionRequestRegionId.pipe(T.Label()),
+    keyRingId: S.String.pipe(T.Label()),
+    keyId: S.String.pipe(T.Label()),
+    versionNumber: S.Number.pipe(T.Label()),
+}).pipe(T.Http({
+    method: "GET",
+    uri: "/v1/projects/{projectId}/regions/{regionId}/keyrings/{keyRingId}/keys/{keyId}/versions/{versionNumber}",
+    code: 200,
+    baseUrl: "https://kms.api.stackit.cloud",
+}))).annotate({
+    identifier: "GetVersionRequest",
+});
+export const VersionState = /*@__PURE__*/ S.String;
+export const Version = /*@__PURE__*/ S.suspend(() => S.Struct({
+    createdAt: S.String,
+    destroyDate: S.optional(S.String),
+    disabled: S.Boolean,
+    keyId: S.String,
+    keyRingId: S.String,
+    number: S.Number,
+    publicKey: S.optional(S.String),
+    state: VersionState,
+})).annotate({ identifier: "Version" });
+export const GetWrappingKeyRequestRegionId = /*@__PURE__*/ S.String;
+export const GetWrappingKeyRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    projectId: S.String.pipe(T.Label()),
+    regionId: GetWrappingKeyRequestRegionId.pipe(T.Label()),
+    keyRingId: S.String.pipe(T.Label()),
+    wrappingKeyId: S.String.pipe(T.Label()),
+}).pipe(T.Http({
+    method: "GET",
+    uri: "/v1/projects/{projectId}/regions/{regionId}/keyrings/{keyRingId}/wrappingkeys/{wrappingKeyId}",
+    code: 200,
+    baseUrl: "https://kms.api.stackit.cloud",
+}))).annotate({
+    identifier: "GetWrappingKeyRequest",
+});
+export const ImportKeyRequestRegionId = /*@__PURE__*/ S.String;
+export const ImportKeyRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    projectId: S.String.pipe(T.Label()),
+    regionId: ImportKeyRequestRegionId.pipe(T.Label()),
+    keyRingId: S.String.pipe(T.Label()),
+    keyId: S.String.pipe(T.Label()),
+    wrappedKey: S.String,
+    wrappingKeyId: S.String,
+}).pipe(T.Http({
+    method: "POST",
+    uri: "/v1/projects/{projectId}/regions/{regionId}/keyrings/{keyRingId}/keys/{keyId}/import",
+    code: 200,
+    baseUrl: "https://kms.api.stackit.cloud",
+}))).annotate({
+    identifier: "ImportKeyRequest",
+});
+export const ListKeyRingsRequestRegionId = /*@__PURE__*/ S.String;
+export const ListKeyRingsRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    projectId: S.String.pipe(T.Label()),
+    regionId: ListKeyRingsRequestRegionId.pipe(T.Label()),
+}).pipe(T.Http({
+    method: "GET",
+    uri: "/v1/projects/{projectId}/regions/{regionId}/keyrings",
+    code: 200,
+    baseUrl: "https://kms.api.stackit.cloud",
+}))).annotate({
+    identifier: "ListKeyRingsRequest",
+});
+export const KeyRingListKeyRingsList = /*@__PURE__*/ S.Array(KeyRing);
+export const KeyRingList = /*@__PURE__*/ S.suspend(() => S.Struct({
+    keyRings: KeyRingListKeyRingsList,
+})).annotate({ identifier: "KeyRingList" });
+export const ListKeysRequestRegionId = /*@__PURE__*/ S.String;
+export const ListKeysRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    projectId: S.String.pipe(T.Label()),
+    regionId: ListKeysRequestRegionId.pipe(T.Label()),
+    keyRingId: S.String.pipe(T.Label()),
+}).pipe(T.Http({
+    method: "GET",
+    uri: "/v1/projects/{projectId}/regions/{regionId}/keyrings/{keyRingId}/keys",
+    code: 200,
+    baseUrl: "https://kms.api.stackit.cloud",
+}))).annotate({
+    identifier: "ListKeysRequest",
+});
+export const KeyListKeysList = /*@__PURE__*/ S.Array(Key);
+export const KeyList = /*@__PURE__*/ S.suspend(() => S.Struct({
+    keys: KeyListKeysList,
+})).annotate({ identifier: "KeyList" });
+export const ListVersionsRequestRegionId = /*@__PURE__*/ S.String;
+export const ListVersionsRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    projectId: S.String.pipe(T.Label()),
+    regionId: ListVersionsRequestRegionId.pipe(T.Label()),
+    keyRingId: S.String.pipe(T.Label()),
+    keyId: S.String.pipe(T.Label()),
+}).pipe(T.Http({
+    method: "GET",
+    uri: "/v1/projects/{projectId}/regions/{regionId}/keyrings/{keyRingId}/keys/{keyId}/versions",
+    code: 200,
+    baseUrl: "https://kms.api.stackit.cloud",
+}))).annotate({
+    identifier: "ListVersionsRequest",
+});
+export const VersionListVersionsList = /*@__PURE__*/ S.Array(Version);
+export const VersionList = /*@__PURE__*/ S.suspend(() => S.Struct({
+    versions: VersionListVersionsList,
+})).annotate({ identifier: "VersionList" });
+export const ListWrappingKeysRequestRegionId = /*@__PURE__*/ S.String;
+export const ListWrappingKeysRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    projectId: S.String.pipe(T.Label()),
+    regionId: ListWrappingKeysRequestRegionId.pipe(T.Label()),
+    keyRingId: S.String.pipe(T.Label()),
+}).pipe(T.Http({
+    method: "GET",
+    uri: "/v1/projects/{projectId}/regions/{regionId}/keyrings/{keyRingId}/wrappingkeys",
+    code: 200,
+    baseUrl: "https://kms.api.stackit.cloud",
+}))).annotate({
+    identifier: "ListWrappingKeysRequest",
+});
+export const WrappingKeyListWrappingKeysList = /*@__PURE__*/ S.Array(WrappingKey);
+export const WrappingKeyList = /*@__PURE__*/ S.suspend(() => S.Struct({
+    wrappingKeys: WrappingKeyListWrappingKeysList,
+})).annotate({
+    identifier: "WrappingKeyList",
+});
+export const RestoreKeyRequestRegionId = /*@__PURE__*/ S.String;
+export const RestoreKeyRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    projectId: S.String.pipe(T.Label()),
+    regionId: RestoreKeyRequestRegionId.pipe(T.Label()),
+    keyRingId: S.String.pipe(T.Label()),
+    keyId: S.String.pipe(T.Label()),
+}).pipe(T.Http({
+    method: "POST",
+    uri: "/v1/projects/{projectId}/regions/{regionId}/keyrings/{keyRingId}/keys/{keyId}/restore",
+    code: 200,
+    baseUrl: "https://kms.api.stackit.cloud",
+}))).annotate({
+    identifier: "RestoreKeyRequest",
+});
+export const RestoreKeyResponse = /*@__PURE__*/ S.suspend(() => S.Struct({})).annotate({
+    identifier: "RestoreKeyResponse",
+});
+export const RestoreVersionRequestRegionId = /*@__PURE__*/ S.String;
+export const RestoreVersionRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    projectId: S.String.pipe(T.Label()),
+    regionId: RestoreVersionRequestRegionId.pipe(T.Label()),
+    keyRingId: S.String.pipe(T.Label()),
+    keyId: S.String.pipe(T.Label()),
+    versionNumber: S.Number.pipe(T.Label()),
+}).pipe(T.Http({
+    method: "POST",
+    uri: "/v1/projects/{projectId}/regions/{regionId}/keyrings/{keyRingId}/keys/{keyId}/versions/{versionNumber}/restore",
+    code: 200,
+    baseUrl: "https://kms.api.stackit.cloud",
+}))).annotate({
+    identifier: "RestoreVersionRequest",
+});
+export const RestoreVersionResponse = /*@__PURE__*/ S.suspend(() => S.Struct({})).annotate({
+    identifier: "RestoreVersionResponse",
+});
+export const RotateKeyRequestRegionId = /*@__PURE__*/ S.String;
+export const RotateKeyRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    projectId: S.String.pipe(T.Label()),
+    regionId: RotateKeyRequestRegionId.pipe(T.Label()),
+    keyRingId: S.String.pipe(T.Label()),
+    keyId: S.String.pipe(T.Label()),
+}).pipe(T.Http({
+    method: "POST",
+    uri: "/v1/projects/{projectId}/regions/{regionId}/keyrings/{keyRingId}/keys/{keyId}/rotate",
+    code: 200,
+    baseUrl: "https://kms.api.stackit.cloud",
+}))).annotate({
+    identifier: "RotateKeyRequest",
+});
+export const SignRequestRegionId = /*@__PURE__*/ S.String;
+export const SignRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    projectId: S.String.pipe(T.Label()),
+    regionId: SignRequestRegionId.pipe(T.Label()),
+    keyRingId: S.String.pipe(T.Label()),
+    keyId: S.String.pipe(T.Label()),
+    versionNumber: S.Number.pipe(T.Label()),
+    data: S.String,
+}).pipe(T.Http({
+    method: "POST",
+    uri: "/v1/projects/{projectId}/regions/{regionId}/keyrings/{keyRingId}/keys/{keyId}/versions/{versionNumber}/sign",
+    code: 200,
+    baseUrl: "https://kms.api.stackit.cloud",
+}))).annotate({ identifier: "SignRequest" });
+export const SignedData = /*@__PURE__*/ S.suspend(() => S.Struct({
+    data: S.String,
+    signature: S.String,
+})).annotate({ identifier: "SignedData" });
+export const VerifyRequestRegionId = /*@__PURE__*/ S.String;
+export const VerifyRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    projectId: S.String.pipe(T.Label()),
+    regionId: VerifyRequestRegionId.pipe(T.Label()),
+    keyRingId: S.String.pipe(T.Label()),
+    keyId: S.String.pipe(T.Label()),
+    versionNumber: S.Number.pipe(T.Label()),
+    data: S.String,
+    signature: S.String,
+}).pipe(T.Http({
+    method: "POST",
+    uri: "/v1/projects/{projectId}/regions/{regionId}/keyrings/{keyRingId}/keys/{keyId}/versions/{versionNumber}/verify",
+    code: 200,
+    baseUrl: "https://kms.api.stackit.cloud",
+}))).annotate({ identifier: "VerifyRequest" });
+export const VerifiedData = /*@__PURE__*/ S.suspend(() => S.Struct({
+    valid: S.Boolean,
+})).annotate({ identifier: "VerifiedData" });
+/** Create key Creates a new key for the given key ring. */
+export const createKey = /*@__PURE__*/ API.make(() => ({
+    input: CreateKeyRequest,
+    output: Key,
+    errors: [BadRequest, NotFound, UnknownStackitError],
+    protocol: StackitProtocol,
+    retry: Retry.Retry,
+}));
+/** Create key ring Creates a new key ring within the project. */
+export const createKeyRing = /*@__PURE__*/ API.make(() => ({
+    input: CreateKeyRingRequest,
+    output: KeyRing,
+    errors: [BadRequest, UnknownStackitError],
+    protocol: StackitProtocol,
+    retry: Retry.Retry,
+}));
+/** Create wrapping key Creates a new wrapping key for the given key ring. */
+export const createWrappingKey = /*@__PURE__*/ API.make(() => ({
+    input: CreateWrappingKeyRequest,
+    output: WrappingKey,
+    errors: [BadRequest, NotFound, UnknownStackitError],
+    protocol: StackitProtocol,
+    retry: Retry.Retry,
+}));
+/** Decrypt Decrypts data using the given key version. */
+export const decrypt = /*@__PURE__*/ API.make(() => ({
+    input: DecryptRequest,
+    output: DecryptedData,
+    errors: [BadRequest, NotFound, Conflict, UnknownStackitError],
+    protocol: StackitProtocol,
+    retry: Retry.Retry,
+}));
+/** Delete key Schedules the deletion of the given key */
+export const deleteKey = /*@__PURE__*/ API.make(() => ({
+    input: DeleteKeyRequest,
+    output: DeleteKeyResponse,
+    errors: [BadRequest, NotFound, Conflict, UnknownStackitError],
+    protocol: StackitProtocol,
+    retry: Retry.Retry,
+}));
+/** Delete keyring Deletes the given key ring if it is empty */
+export const deleteKeyRing = /*@__PURE__*/ API.make(() => ({
+    input: DeleteKeyRingRequest,
+    output: DeleteKeyRingResponse,
+    errors: [BadRequest, NotFound, Conflict, UnknownStackitError],
+    protocol: StackitProtocol,
+    retry: Retry.Retry,
+}));
+/** Delete wrapping key Deletes the given wrapping key */
+export const deleteWrappingKey = /*@__PURE__*/ API.make(() => ({
+    input: DeleteWrappingKeyRequest,
+    output: DeleteWrappingKeyResponse,
+    errors: [BadRequest, NotFound, Conflict, UnknownStackitError],
+    protocol: StackitProtocol,
+    retry: Retry.Retry,
+}));
+/** Destroy version Removes the key material of a version permanently. */
+export const destroyVersion = /*@__PURE__*/ API.make(() => ({
+    input: DestroyVersionRequest,
+    output: DestroyVersionResponse,
+    errors: [BadRequest, NotFound, Conflict, UnknownStackitError],
+    protocol: StackitProtocol,
+    retry: Retry.Retry,
+}));
+/** Disable version Disables the given version. */
+export const disableVersion = /*@__PURE__*/ API.make(() => ({
+    input: DisableVersionRequest,
+    output: DisableVersionResponse,
+    errors: [BadRequest, NotFound, Conflict, UnknownStackitError],
+    protocol: StackitProtocol,
+    retry: Retry.Retry,
+}));
+/** Enable version Enables the given version. */
+export const enableVersion = /*@__PURE__*/ API.make(() => ({
+    input: EnableVersionRequest,
+    output: EnableVersionResponse,
+    errors: [BadRequest, NotFound, Conflict, UnknownStackitError],
+    protocol: StackitProtocol,
+    retry: Retry.Retry,
+}));
+/** Encrypt Encrypts data using the given key version. */
+export const encrypt = /*@__PURE__*/ API.make(() => ({
+    input: EncryptRequest,
+    output: EncryptedData,
+    errors: [BadRequest, NotFound, Conflict, UnknownStackitError],
+    protocol: StackitProtocol,
+    retry: Retry.Retry,
+}));
+/** Get key Returns the details for the given key. */
+export const getKey = /*@__PURE__*/ API.make(() => ({
+    input: GetKeyRequest,
+    output: Key,
+    errors: [BadRequest, NotFound, UnknownStackitError],
+    protocol: StackitProtocol,
+    retry: Retry.Retry,
+}));
+/** Get key ring Returns the details for the given key ring. */
+export const getKeyRing = /*@__PURE__*/ API.make(() => ({
+    input: GetKeyRingRequest,
+    output: KeyRing,
+    errors: [BadRequest, NotFound, UnknownStackitError],
+    protocol: StackitProtocol,
+    retry: Retry.Retry,
+}));
+/** Get version Returns the details for the given version. */
+export const getVersion = /*@__PURE__*/ API.make(() => ({
+    input: GetVersionRequest,
+    output: Version,
+    errors: [BadRequest, NotFound, UnknownStackitError],
+    protocol: StackitProtocol,
+    retry: Retry.Retry,
+}));
+/** Get wrapping key Returns the details for the given wrapping key. */
+export const getWrappingKey = /*@__PURE__*/ API.make(() => ({
+    input: GetWrappingKeyRequest,
+    output: WrappingKey,
+    errors: [BadRequest, NotFound, UnknownStackitError],
+    protocol: StackitProtocol,
+    retry: Retry.Retry,
+}));
+/** Import key Imports a new version to the given key. */
+export const importKey = /*@__PURE__*/ API.make(() => ({
+    input: ImportKeyRequest,
+    output: Version,
+    errors: [BadRequest, NotFound, Conflict, UnknownStackitError],
+    protocol: StackitProtocol,
+    retry: Retry.Retry,
+}));
+/** List key rings Returns a list of all key rings within the project. */
+export const listKeyRings = /*@__PURE__*/ API.make(() => ({
+    input: ListKeyRingsRequest,
+    output: KeyRingList,
+    errors: [BadRequest, UnknownStackitError],
+    protocol: StackitProtocol,
+    retry: Retry.Retry,
+}));
+/** List keys Returns the keys for the given key ring. */
+export const listKeys = /*@__PURE__*/ API.make(() => ({
+    input: ListKeysRequest,
+    output: KeyList,
+    errors: [BadRequest, NotFound, UnknownStackitError],
+    protocol: StackitProtocol,
+    retry: Retry.Retry,
+}));
+/** List versions Returns a list of all versions of a given key. */
+export const listVersions = /*@__PURE__*/ API.make(() => ({
+    input: ListVersionsRequest,
+    output: VersionList,
+    errors: [BadRequest, NotFound, UnknownStackitError],
+    protocol: StackitProtocol,
+    retry: Retry.Retry,
+}));
+/** List wrapping keys Returns the wrapping keys for the given key ring. */
+export const listWrappingKeys = /*@__PURE__*/ API.make(() => ({
+    input: ListWrappingKeysRequest,
+    output: WrappingKeyList,
+    errors: [BadRequest, NotFound, UnknownStackitError],
+    protocol: StackitProtocol,
+    retry: Retry.Retry,
+}));
+/** Restore deleted key Restores the given key from being deleted. */
+export const restoreKey = /*@__PURE__*/ API.make(() => ({
+    input: RestoreKeyRequest,
+    output: RestoreKeyResponse,
+    errors: [BadRequest, NotFound, Conflict, UnknownStackitError],
+    protocol: StackitProtocol,
+    retry: Retry.Retry,
+}));
+/** Restore version Restores the given version from being destroyed */
+export const restoreVersion = /*@__PURE__*/ API.make(() => ({
+    input: RestoreVersionRequest,
+    output: RestoreVersionResponse,
+    errors: [BadRequest, NotFound, Conflict, UnknownStackitError],
+    protocol: StackitProtocol,
+    retry: Retry.Retry,
+}));
+/** Rotate key Rotates the given key. */
+export const rotateKey = /*@__PURE__*/ API.make(() => ({
+    input: RotateKeyRequest,
+    output: Version,
+    errors: [BadRequest, Forbidden, NotFound, Conflict, UnknownStackitError],
+    protocol: StackitProtocol,
+    retry: Retry.Retry,
+}));
+/** Sign Sign data using the given key version as secret. */
+export const sign = /*@__PURE__*/ API.make(() => ({
+    input: SignRequest,
+    output: SignedData,
+    errors: [BadRequest, NotFound, Conflict, UnknownStackitError],
+    protocol: StackitProtocol,
+    retry: Retry.Retry,
+}));
+/** Verify Verify data using the given key version as secret. */
+export const verify = /*@__PURE__*/ API.make(() => ({
+    input: VerifyRequest,
+    output: VerifiedData,
+    errors: [BadRequest, NotFound, Conflict, UnknownStackitError],
+    protocol: StackitProtocol,
+    retry: Retry.Retry,
+}));
+//# sourceMappingURL=kms.js.map