@distilled.cloud/stackit 1.0.0-rc.13 → 1.0.0-rc.15

package/src/services/service_account.ts

@@ -1,16 +1,12 @@
+import * as API from "@distilled.cloud/core/api";
+import * as C from "@distilled.cloud/core/category";
 // AUTO-GENERATED by scripts/generate.ts from .generated-specs (specs/spec-mirror-stackit). Do not edit.
 import * as S from "@distilled.cloud/core/schema";
 import * as Redacted from "effect/Redacted";
-import * as API from "@distilled.cloud/core/api";
-import * as C from "@distilled.cloud/core/category";
-import * as T from "../traits.ts";
-import {
-  StackitProtocol,
-  type StackitOpError,
-  type StackitOpContext,
-} from "../protocol.ts";
 import { UnknownStackitError } from "../errors.ts";
+import { StackitProtocol, type StackitOpError, type StackitOpContext } from "../protocol.ts";
 import * as Retry from "../retry.ts";
+import * as T from "../traits.ts";
 
 export type { StackitOpError, StackitOpContext };
 
@@ -58,24 +54,22 @@ export interface CreateFederatedIdentityProviderRequestAssertionsItem {
   /** Value which the item is compared to */
   value?: string;
 }
-export const CreateFederatedIdentityProviderRequestAssertionsItem =
-  /*@__PURE__*/ S.suspend(() =>
-    S.Struct({
-      item: S.optional(S.String),
-      operator: S.optional(S.String),
-      value: S.optional(S.String),
-    }),
-  ).annotate({
-    identifier: "CreateFederatedIdentityProviderRequestAssertionsItem",
-  }) as any as S.Schema<CreateFederatedIdentityProviderRequestAssertionsItem>;
+export const CreateFederatedIdentityProviderRequestAssertionsItem = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    item: S.optional(S.String),
+    operator: S.optional(S.String),
+    value: S.optional(S.String),
+  }),
+).annotate({
+  identifier: "CreateFederatedIdentityProviderRequestAssertionsItem",
+}) as any as S.Schema<CreateFederatedIdentityProviderRequestAssertionsItem>;
 
 /** list of assertions of the federated identity provider */
 export type CreateFederatedIdentityProviderRequestAssertionsList =
   Array<CreateFederatedIdentityProviderRequestAssertionsItem>;
-export const CreateFederatedIdentityProviderRequestAssertionsList =
-  /*@__PURE__*/ S.Array(
-    CreateFederatedIdentityProviderRequestAssertionsItem,
-  ) as any as S.Schema<CreateFederatedIdentityProviderRequestAssertionsList>;
+export const CreateFederatedIdentityProviderRequestAssertionsList = /*@__PURE__*/ S.Array(
+  CreateFederatedIdentityProviderRequestAssertionsItem,
+) as any as S.Schema<CreateFederatedIdentityProviderRequestAssertionsList>;
 
 export interface CreateFederatedIdentityProviderRequest {
   /** The ID of the project. */
@@ -89,24 +83,21 @@ export interface CreateFederatedIdentityProviderRequest {
   /** Unique name used as identifier of the federated identity provider. */
   name: string;
 }
-export const CreateFederatedIdentityProviderRequest = /*@__PURE__*/ S.suspend(
-  () =>
-    S.Struct({
-      projectId: S.String.pipe(T.Label()),
-      serviceAccountEmail: S.String.pipe(T.Label()),
-      assertions: S.optional(
-        CreateFederatedIdentityProviderRequestAssertionsList,
-      ),
-      issuer: S.String,
-      name: S.String,
-    }).pipe(
-      T.Http({
-        method: "POST",
-        uri: "/v2/projects/{projectId}/service-accounts/{serviceAccountEmail}/federations",
-        code: 200,
-        baseUrl: "https://service-account.api.stackit.cloud",
-      }),
-    ),
+export const CreateFederatedIdentityProviderRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    projectId: S.String.pipe(T.Label()),
+    serviceAccountEmail: S.String.pipe(T.Label()),
+    assertions: S.optional(CreateFederatedIdentityProviderRequestAssertionsList),
+    issuer: S.String,
+    name: S.String,
+  }).pipe(
+    T.Http({
+      method: "POST",
+      uri: "/v2/projects/{projectId}/service-accounts/{serviceAccountEmail}/federations",
+      code: 200,
+      baseUrl: "https://service-account.api.stackit.cloud",
+    }),
+  ),
 ).annotate({
   identifier: "CreateFederatedIdentityProviderRequest",
 }) as any as S.Schema<CreateFederatedIdentityProviderRequest>;
@@ -119,13 +110,12 @@ export interface FederatedIdentityProviderAssertionsItem {
   /** Value which the item is compared to */
   value: string;
 }
-export const FederatedIdentityProviderAssertionsItem = /*@__PURE__*/ S.suspend(
-  () =>
-    S.Struct({
-      item: S.String,
-      operator: S.String,
-      value: S.String,
-    }),
+export const FederatedIdentityProviderAssertionsItem = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    item: S.String,
+    operator: S.String,
+    value: S.String,
+  }),
 ).annotate({
   identifier: "FederatedIdentityProviderAssertionsItem",
 }) as any as S.Schema<FederatedIdentityProviderAssertionsItem>;
@@ -203,13 +193,11 @@ export const ServiceAccount2 = /*@__PURE__*/ S.suspend(() =>
     internal: S.Boolean,
     projectId: S.String,
   }),
-).annotate({
-  identifier: "ServiceAccount2",
-}) as any as S.Schema<ServiceAccount2>;
+).annotate({ identifier: "ServiceAccount2" }) as any as S.Schema<ServiceAccount2>;
 
 /** Optional, key algorithm of the generated key-pair. Used only if publicKey attribute is not specified, otherwise the algorithm is derived from the public key. */
 export type CreateServiceAccountKeyRequestAlgorithm = "RSA_2048" | "RSA_4096";
-export const CreateServiceAccountKeyRequestAlgorithm = /*@__PURE__*/ S.String;
+export const CreateServiceAccountKeyRequestAlgorithm = S.String;
 
 export interface CreateServiceAccountKeyRequest {
   /** The ID of the project. */
@@ -256,35 +244,27 @@ export interface CreateServiceAccountKeyResponseCredentials {
   /** Endpoint used to obtain access tokens for the service account. */
   tokenEndpoint?: string;
 }
-export const CreateServiceAccountKeyResponseCredentials =
-  /*@__PURE__*/ S.suspend(() =>
-    S.Struct({
-      aud: S.String,
-      iss: S.String,
-      kid: S.String,
-      privateKey: S.optional(S.String.pipe(T.SensitiveValue({}))),
-      sub: S.String,
-      tokenEndpoint: S.optional(S.String),
-    }),
-  ).annotate({
-    identifier: "CreateServiceAccountKeyResponseCredentials",
-  }) as any as S.Schema<CreateServiceAccountKeyResponseCredentials>;
-
-export type CreateServiceAccountKeyResponseKeyAlgorithm =
-  | "RSA_2048"
-  | "RSA_4096";
-export const CreateServiceAccountKeyResponseKeyAlgorithm =
-  /*@__PURE__*/ S.String;
-
-export type CreateServiceAccountKeyResponseKeyOrigin =
-  | "USER_PROVIDED"
-  | "GENERATED";
-export const CreateServiceAccountKeyResponseKeyOrigin = /*@__PURE__*/ S.String;
-
-export type CreateServiceAccountKeyResponseKeyType =
-  | "USER_MANAGED"
-  | "SYSTEM_MANAGED";
-export const CreateServiceAccountKeyResponseKeyType = /*@__PURE__*/ S.String;
+export const CreateServiceAccountKeyResponseCredentials = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    aud: S.String,
+    iss: S.String,
+    kid: S.String,
+    privateKey: S.optional(S.String.pipe(T.SensitiveValue({}))),
+    sub: S.String,
+    tokenEndpoint: S.optional(S.String),
+  }),
+).annotate({
+  identifier: "CreateServiceAccountKeyResponseCredentials",
+}) as any as S.Schema<CreateServiceAccountKeyResponseCredentials>;
+
+export type CreateServiceAccountKeyResponseKeyAlgorithm = "RSA_2048" | "RSA_4096";
+export const CreateServiceAccountKeyResponseKeyAlgorithm = S.String;
+
+export type CreateServiceAccountKeyResponseKeyOrigin = "USER_PROVIDED" | "GENERATED";
+export const CreateServiceAccountKeyResponseKeyOrigin = S.String;
+
+export type CreateServiceAccountKeyResponseKeyType = "USER_MANAGED" | "SYSTEM_MANAGED";
+export const CreateServiceAccountKeyResponseKeyType = S.String;
 
 export interface CreateServiceAccountKeyResponse {
   active: boolean;
@@ -321,8 +301,7 @@ export const CreateServiceAccountKeyResponse = /*@__PURE__*/ S.suspend(() =>
 export type CreateShortLivedAccessTokenRequestGrantType =
   | "urn:ietf:params:oauth:grant-type:jwt-bearer"
   | "refresh_token";
-export const CreateShortLivedAccessTokenRequestGrantType =
-  /*@__PURE__*/ S.String;
+export const CreateShortLivedAccessTokenRequestGrantType = S.String;
 
 export interface CreateShortLivedAccessTokenRequest {
   /** The self signed JWT. Must be given when grant_type is urn:ietf:params:oauth:grant-type:jwt-bearer */
@@ -350,8 +329,7 @@ export const CreateShortLivedAccessTokenRequest = /*@__PURE__*/ S.suspend(() =>
 }) as any as S.Schema<CreateShortLivedAccessTokenRequest>;
 
 export type CreateShortLivedAccessTokenResponseTokenType = "Bearer";
-export const CreateShortLivedAccessTokenResponseTokenType =
-  /*@__PURE__*/ S.String;
+export const CreateShortLivedAccessTokenResponseTokenType = S.String;
 
 export interface CreateShortLivedAccessTokenResponse {
   /** The short lived token that can be used for API access */
@@ -398,9 +376,7 @@ export const DeleteServiceAccountRequest = /*@__PURE__*/ S.suspend(() =>
 }) as any as S.Schema<DeleteServiceAccountRequest>;
 
 export interface DeleteServiceAccountResponse {}
-export const DeleteServiceAccountResponse = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({}),
-).annotate({
+export const DeleteServiceAccountResponse = /*@__PURE__*/ S.suspend(() => S.Struct({})).annotate({
   identifier: "DeleteServiceAccountResponse",
 }) as any as S.Schema<DeleteServiceAccountResponse>;
 
@@ -430,11 +406,9 @@ export const DeleteServiceAccountKeyRequest = /*@__PURE__*/ S.suspend(() =>
 }) as any as S.Schema<DeleteServiceAccountKeyRequest>;
 
 export interface DeleteServiceAccountKeyResponse {}
-export const DeleteServiceAccountKeyResponse = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({}),
-).annotate({
-  identifier: "DeleteServiceAccountKeyResponse",
-}) as any as S.Schema<DeleteServiceAccountKeyResponse>;
+export const DeleteServiceAccountKeyResponse = /*@__PURE__*/ S.suspend(() => S.Struct({})).annotate(
+  { identifier: "DeleteServiceAccountKeyResponse" },
+) as any as S.Schema<DeleteServiceAccountKeyResponse>;
 
 export interface DeleteServiceFederatedIdentityProviderRequest {
   /** The ID of the project. */
@@ -444,29 +418,29 @@ export interface DeleteServiceFederatedIdentityProviderRequest {
   /** ID of the Federated Identity Provider. */
   federationId: string;
 }
-export const DeleteServiceFederatedIdentityProviderRequest =
-  /*@__PURE__*/ S.suspend(() =>
-    S.Struct({
-      projectId: S.String.pipe(T.Label()),
-      serviceAccountEmail: S.String.pipe(T.Label()),
-      federationId: S.String.pipe(T.Label()),
-    }).pipe(
-      T.Http({
-        method: "DELETE",
-        uri: "/v2/projects/{projectId}/service-accounts/{serviceAccountEmail}/federations/{federationId}",
-        code: 200,
-        baseUrl: "https://service-account.api.stackit.cloud",
-      }),
-    ),
-  ).annotate({
-    identifier: "DeleteServiceFederatedIdentityProviderRequest",
-  }) as any as S.Schema<DeleteServiceFederatedIdentityProviderRequest>;
+export const DeleteServiceFederatedIdentityProviderRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    projectId: S.String.pipe(T.Label()),
+    serviceAccountEmail: S.String.pipe(T.Label()),
+    federationId: S.String.pipe(T.Label()),
+  }).pipe(
+    T.Http({
+      method: "DELETE",
+      uri: "/v2/projects/{projectId}/service-accounts/{serviceAccountEmail}/federations/{federationId}",
+      code: 200,
+      baseUrl: "https://service-account.api.stackit.cloud",
+    }),
+  ),
+).annotate({
+  identifier: "DeleteServiceFederatedIdentityProviderRequest",
+}) as any as S.Schema<DeleteServiceFederatedIdentityProviderRequest>;
 
 export interface DeleteServiceFederatedIdentityProviderResponse {}
-export const DeleteServiceFederatedIdentityProviderResponse =
-  /*@__PURE__*/ S.suspend(() => S.Struct({})).annotate({
-    identifier: "DeleteServiceFederatedIdentityProviderResponse",
-  }) as any as S.Schema<DeleteServiceFederatedIdentityProviderResponse>;
+export const DeleteServiceFederatedIdentityProviderResponse = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({}),
+).annotate({
+  identifier: "DeleteServiceFederatedIdentityProviderResponse",
+}) as any as S.Schema<DeleteServiceFederatedIdentityProviderResponse>;
 
 export interface GetFederatedIdentityProviderRequest {
   /** The ID of the project. */
@@ -541,9 +515,7 @@ export const JWK = /*@__PURE__*/ S.suspend(() =>
 ).annotate({ identifier: "JWK" }) as any as S.Schema<JWK>;
 
 export type JWKSKeysList = Array<JWK>;
-export const JWKSKeysList = /*@__PURE__*/ S.Array(
-  JWK,
-) as any as S.Schema<JWKSKeysList>;
+export const JWKSKeysList = /*@__PURE__*/ S.Array(JWK) as any as S.Schema<JWKSKeysList>;
 
 export interface JWKS {
   keys: JWKSKeysList;
@@ -555,7 +527,7 @@ export const JWKS = /*@__PURE__*/ S.suspend(() =>
 ).annotate({ identifier: "JWKS" }) as any as S.Schema<JWKS>;
 
 export type GetServiceAccountKeyRequestFormat = "X509_PEM";
-export const GetServiceAccountKeyRequestFormat = /*@__PURE__*/ S.String;
+export const GetServiceAccountKeyRequestFormat = S.String;
 
 export interface GetServiceAccountKeyRequest {
   /** The ID of the project. */
@@ -595,30 +567,25 @@ export interface GetServiceAccountKeyResponseCredentials {
   /** Service account id */
   sub: string;
 }
-export const GetServiceAccountKeyResponseCredentials = /*@__PURE__*/ S.suspend(
-  () =>
-    S.Struct({
-      aud: S.String,
-      iss: S.String,
-      kid: S.String,
-      sub: S.String,
-    }),
+export const GetServiceAccountKeyResponseCredentials = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    aud: S.String,
+    iss: S.String,
+    kid: S.String,
+    sub: S.String,
+  }),
 ).annotate({
   identifier: "GetServiceAccountKeyResponseCredentials",
 }) as any as S.Schema<GetServiceAccountKeyResponseCredentials>;
 
 export type GetServiceAccountKeyResponseKeyAlgorithm = "RSA_2048" | "RSA_4096";
-export const GetServiceAccountKeyResponseKeyAlgorithm = /*@__PURE__*/ S.String;
+export const GetServiceAccountKeyResponseKeyAlgorithm = S.String;
 
-export type GetServiceAccountKeyResponseKeyOrigin =
-  | "USER_PROVIDED"
-  | "GENERATED";
-export const GetServiceAccountKeyResponseKeyOrigin = /*@__PURE__*/ S.String;
+export type GetServiceAccountKeyResponseKeyOrigin = "USER_PROVIDED" | "GENERATED";
+export const GetServiceAccountKeyResponseKeyOrigin = S.String;
 
-export type GetServiceAccountKeyResponseKeyType =
-  | "USER_MANAGED"
-  | "SYSTEM_MANAGED";
-export const GetServiceAccountKeyResponseKeyType = /*@__PURE__*/ S.String;
+export type GetServiceAccountKeyResponseKeyType = "USER_MANAGED" | "SYSTEM_MANAGED";
+export const GetServiceAccountKeyResponseKeyType = S.String;
 
 export interface GetServiceAccountKeyResponse {
   active: boolean;
@@ -657,29 +624,27 @@ export interface ListFederatedIdentityProvidersRequest {
   /** The email of the service account. */
   serviceAccountEmail: string;
 }
-export const ListFederatedIdentityProvidersRequest = /*@__PURE__*/ S.suspend(
-  () =>
-    S.Struct({
-      projectId: S.String.pipe(T.Label()),
-      serviceAccountEmail: S.String.pipe(T.Label()),
-    }).pipe(
-      T.Http({
-        method: "GET",
-        uri: "/v2/projects/{projectId}/service-accounts/{serviceAccountEmail}/federations",
-        code: 200,
-        baseUrl: "https://service-account.api.stackit.cloud",
-      }),
-    ),
+export const ListFederatedIdentityProvidersRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    projectId: S.String.pipe(T.Label()),
+    serviceAccountEmail: S.String.pipe(T.Label()),
+  }).pipe(
+    T.Http({
+      method: "GET",
+      uri: "/v2/projects/{projectId}/service-accounts/{serviceAccountEmail}/federations",
+      code: 200,
+      baseUrl: "https://service-account.api.stackit.cloud",
+    }),
+  ),
 ).annotate({
   identifier: "ListFederatedIdentityProvidersRequest",
 }) as any as S.Schema<ListFederatedIdentityProvidersRequest>;
 
 export type FederatedListFederatedIdentityProvidersResponseResourcesList =
   Array<FederatedIdentityProvider>;
-export const FederatedListFederatedIdentityProvidersResponseResourcesList =
-  /*@__PURE__*/ S.Array(
-    FederatedIdentityProvider,
-  ) as any as S.Schema<FederatedListFederatedIdentityProvidersResponseResourcesList>;
+export const FederatedListFederatedIdentityProvidersResponseResourcesList = /*@__PURE__*/ S.Array(
+  FederatedIdentityProvider,
+) as any as S.Schema<FederatedListFederatedIdentityProvidersResponseResourcesList>;
 
 export interface FederatedListFederatedIdentityProvidersResponse {
   itemsPerPage: number;
@@ -687,17 +652,16 @@ export interface FederatedListFederatedIdentityProvidersResponse {
   startIndex: number;
   totalResults: number;
 }
-export const FederatedListFederatedIdentityProvidersResponse =
-  /*@__PURE__*/ S.suspend(() =>
-    S.Struct({
-      itemsPerPage: S.Number,
-      resources: FederatedListFederatedIdentityProvidersResponseResourcesList,
-      startIndex: S.Number,
-      totalResults: S.Number,
-    }),
-  ).annotate({
-    identifier: "FederatedListFederatedIdentityProvidersResponse",
-  }) as any as S.Schema<FederatedListFederatedIdentityProvidersResponse>;
+export const FederatedListFederatedIdentityProvidersResponse = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    itemsPerPage: S.Number,
+    resources: FederatedListFederatedIdentityProvidersResponseResourcesList,
+    startIndex: S.Number,
+    totalResults: S.Number,
+  }),
+).annotate({
+  identifier: "FederatedListFederatedIdentityProvidersResponse",
+}) as any as S.Schema<FederatedListFederatedIdentityProvidersResponse>;
 
 export interface ListServiceAccountKeysRequest {
   /** The ID of the project. */
@@ -722,17 +686,13 @@ export const ListServiceAccountKeysRequest = /*@__PURE__*/ S.suspend(() =>
 }) as any as S.Schema<ListServiceAccountKeysRequest>;
 
 export type ServiceAccountKeyListResponseKeyAlgorithm = "RSA_2048" | "RSA_4096";
-export const ServiceAccountKeyListResponseKeyAlgorithm = /*@__PURE__*/ S.String;
+export const ServiceAccountKeyListResponseKeyAlgorithm = S.String;
 
-export type ServiceAccountKeyListResponseKeyOrigin =
-  | "USER_PROVIDED"
-  | "GENERATED";
-export const ServiceAccountKeyListResponseKeyOrigin = /*@__PURE__*/ S.String;
+export type ServiceAccountKeyListResponseKeyOrigin = "USER_PROVIDED" | "GENERATED";
+export const ServiceAccountKeyListResponseKeyOrigin = S.String;
 
-export type ServiceAccountKeyListResponseKeyType =
-  | "USER_MANAGED"
-  | "SYSTEM_MANAGED";
-export const ServiceAccountKeyListResponseKeyType = /*@__PURE__*/ S.String;
+export type ServiceAccountKeyListResponseKeyType = "USER_MANAGED" | "SYSTEM_MANAGED";
+export const ServiceAccountKeyListResponseKeyType = S.String;
 
 export interface ServiceAccountKeyListResponse {
   active: boolean;
@@ -760,8 +720,7 @@ export const ServiceAccountKeyListResponse = /*@__PURE__*/ S.suspend(() =>
   identifier: "ServiceAccountKeyListResponse",
 }) as any as S.Schema<ServiceAccountKeyListResponse>;
 
-export type ListServiceAccountKeysResponseItemsList =
-  Array<ServiceAccountKeyListResponse>;
+export type ListServiceAccountKeysResponseItemsList = Array<ServiceAccountKeyListResponse>;
 export const ListServiceAccountKeysResponseItemsList = /*@__PURE__*/ S.Array(
   ServiceAccountKeyListResponse,
 ) as any as S.Schema<ListServiceAccountKeysResponseItemsList>;
@@ -839,8 +798,8 @@ export interface PartialUpdateServiceAccountFederatedIdentityProviderRequest {
   /** Unique name used as identifier of the federated identity provider. */
   name: string;
 }
-export const PartialUpdateServiceAccountFederatedIdentityProviderRequest =
-  /*@__PURE__*/ S.suspend(() =>
+export const PartialUpdateServiceAccountFederatedIdentityProviderRequest = /*@__PURE__*/ S.suspend(
+  () =>
     S.Struct({
       projectId: S.String.pipe(T.Label()),
       serviceAccountEmail: S.String.pipe(T.Label()),
@@ -858,9 +817,9 @@ export const PartialUpdateServiceAccountFederatedIdentityProviderRequest =
         baseUrl: "https://service-account.api.stackit.cloud",
       }),
     ),
-  ).annotate({
-    identifier: "PartialUpdateServiceAccountFederatedIdentityProviderRequest",
-  }) as any as S.Schema<PartialUpdateServiceAccountFederatedIdentityProviderRequest>;
+).annotate({
+  identifier: "PartialUpdateServiceAccountFederatedIdentityProviderRequest",
+}) as any as S.Schema<PartialUpdateServiceAccountFederatedIdentityProviderRequest>;
 
 export interface PartialUpdateServiceAccountKeyRequest {
   /** The ID of the project. */
@@ -874,43 +833,33 @@ export interface PartialUpdateServiceAccountKeyRequest {
   /** Optional, date of key expiration. To disable, set time to "9999-01-01T01:01:01Z" */
   validUntil?: string;
 }
-export const PartialUpdateServiceAccountKeyRequest = /*@__PURE__*/ S.suspend(
-  () =>
-    S.Struct({
-      projectId: S.String.pipe(T.Label()),
-      serviceAccountEmail: S.String.pipe(T.Label()),
-      keyId: S.String.pipe(T.Label()),
-      active: S.optional(S.Boolean),
-      validUntil: S.optional(S.String),
-    }).pipe(
-      T.Http({
-        method: "PATCH",
-        uri: "/v2/projects/{projectId}/service-accounts/{serviceAccountEmail}/keys/{keyId}",
-        code: 200,
-        baseUrl: "https://service-account.api.stackit.cloud",
-      }),
-    ),
+export const PartialUpdateServiceAccountKeyRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    projectId: S.String.pipe(T.Label()),
+    serviceAccountEmail: S.String.pipe(T.Label()),
+    keyId: S.String.pipe(T.Label()),
+    active: S.optional(S.Boolean),
+    validUntil: S.optional(S.String),
+  }).pipe(
+    T.Http({
+      method: "PATCH",
+      uri: "/v2/projects/{projectId}/service-accounts/{serviceAccountEmail}/keys/{keyId}",
+      code: 200,
+      baseUrl: "https://service-account.api.stackit.cloud",
+    }),
+  ),
 ).annotate({
   identifier: "PartialUpdateServiceAccountKeyRequest",
 }) as any as S.Schema<PartialUpdateServiceAccountKeyRequest>;
 
-export type PartialUpdateServiceAccountKeyResponseKeyAlgorithm =
-  | "RSA_2048"
-  | "RSA_4096";
-export const PartialUpdateServiceAccountKeyResponseKeyAlgorithm =
-  /*@__PURE__*/ S.String;
+export type PartialUpdateServiceAccountKeyResponseKeyAlgorithm = "RSA_2048" | "RSA_4096";
+export const PartialUpdateServiceAccountKeyResponseKeyAlgorithm = S.String;
 
-export type PartialUpdateServiceAccountKeyResponseKeyOrigin =
-  | "USER_PROVIDED"
-  | "GENERATED";
-export const PartialUpdateServiceAccountKeyResponseKeyOrigin =
-  /*@__PURE__*/ S.String;
+export type PartialUpdateServiceAccountKeyResponseKeyOrigin = "USER_PROVIDED" | "GENERATED";
+export const PartialUpdateServiceAccountKeyResponseKeyOrigin = S.String;
 
-export type PartialUpdateServiceAccountKeyResponseKeyType =
-  | "USER_MANAGED"
-  | "SYSTEM_MANAGED";
-export const PartialUpdateServiceAccountKeyResponseKeyType =
-  /*@__PURE__*/ S.String;
+export type PartialUpdateServiceAccountKeyResponseKeyType = "USER_MANAGED" | "SYSTEM_MANAGED";
+export const PartialUpdateServiceAccountKeyResponseKeyType = S.String;
 
 export interface PartialUpdateServiceAccountKeyResponse {
   active: boolean;
@@ -924,17 +873,16 @@ export interface PartialUpdateServiceAccountKeyResponse {
   /** If specified, the timestamp until the key is active. May be null */
   validUntil?: string;
 }
-export const PartialUpdateServiceAccountKeyResponse = /*@__PURE__*/ S.suspend(
-  () =>
-    S.Struct({
-      active: S.Boolean,
-      createdAt: S.String,
-      id: S.String,
-      keyAlgorithm: PartialUpdateServiceAccountKeyResponseKeyAlgorithm,
-      keyOrigin: PartialUpdateServiceAccountKeyResponseKeyOrigin,
-      keyType: PartialUpdateServiceAccountKeyResponseKeyType,
-      validUntil: S.optional(S.String),
-    }),
+export const PartialUpdateServiceAccountKeyResponse = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    active: S.Boolean,
+    createdAt: S.String,
+    id: S.String,
+    keyAlgorithm: PartialUpdateServiceAccountKeyResponseKeyAlgorithm,
+    keyOrigin: PartialUpdateServiceAccountKeyResponseKeyOrigin,
+    keyType: PartialUpdateServiceAccountKeyResponseKeyType,
+    validUntil: S.optional(S.String),
+  }),
 ).annotate({
   identifier: "PartialUpdateServiceAccountKeyResponse",
 }) as any as S.Schema<PartialUpdateServiceAccountKeyResponse>;
@@ -958,11 +906,7 @@ export const createFederatedIdentityProvider: API.OperationMethod<
   retry: Retry.Retry,
 }));
 
-export type CreateServiceAccountError =
-  | BadRequest
-  | Forbidden
-  | Conflict
-  | StackitOpError;
+export type CreateServiceAccountError = BadRequest | Forbidden | Conflict | StackitOpError;
 /** Create a new Service Account Create a new Service Account in a project. The service account only resides in the project, and initially has no roles or permissions on any resources. After creation, the service account can be assigned to this project, other projects in the parent organization or to the parent organization. */
 export const createServiceAccount: API.OperationMethod<
   CreateServiceAccountRequest,
@@ -977,11 +921,7 @@ export const createServiceAccount: API.OperationMethod<
   retry: Retry.Retry,
 }));
 
-export type CreateServiceAccountKeyError =
-  | BadRequest
-  | Forbidden
-  | Conflict
-  | StackitOpError;
+export type CreateServiceAccountKeyError = BadRequest | Forbidden | Conflict | StackitOpError;
 /** Create a new Service Account key Create a new key to the service account. You can generate an RSA keypair, and post the PUBLIC part of the keypair, or leave empty, then the service will generate a pair. Maximum of 10 key can be added. A new key cannot be created using the same service account (authenticated using the short lived token of another key of the same service account). */
 export const createServiceAccountKey: API.OperationMethod<
   CreateServiceAccountKeyRequest,
@@ -996,10 +936,7 @@ export const createServiceAccountKey: API.OperationMethod<
   retry: Retry.Retry,
 }));
 
-export type CreateShortLivedAccessTokenError =
-  | BadRequest
-  | Forbidden
-  | StackitOpError;
+export type CreateShortLivedAccessTokenError = BadRequest | Forbidden | StackitOpError;
 /** Request short lived API access token (OAUTH2). Request a short lived API access token with OAUTH2. Compatible with [Using JWTs as Authorization Grants](https://www.rfc-editor.org/rfc/rfc7523.html#section-2.1) You can request a token with a self signed token, or with a refresh token. */
 export const createShortLivedAccessToken: API.OperationMethod<
   CreateShortLivedAccessTokenRequest,
@@ -1014,11 +951,7 @@ export const createShortLivedAccessToken: API.OperationMethod<
   retry: Retry.Retry,
 }));
 
-export type DeleteServiceAccountError =
-  | BadRequest
-  | Forbidden
-  | NotFound
-  | StackitOpError;
+export type DeleteServiceAccountError = BadRequest | Forbidden | NotFound | StackitOpError;
 /** Delete Service Account Delete a Service Account. */
 export const deleteServiceAccount: API.OperationMethod<
   DeleteServiceAccountRequest,
@@ -1033,10 +966,7 @@ export const deleteServiceAccount: API.OperationMethod<
   retry: Retry.Retry,
 }));
 
-export type DeleteServiceAccountKeyError =
-  | BadRequest
-  | Forbidden
-  | StackitOpError;
+export type DeleteServiceAccountKeyError = BadRequest | Forbidden | StackitOpError;
 /** Delete a service account key Delete a key */
 export const deleteServiceAccountKey: API.OperationMethod<
   DeleteServiceAccountKeyRequest,
@@ -1051,10 +981,7 @@ export const deleteServiceAccountKey: API.OperationMethod<
   retry: Retry.Retry,
 }));
 
-export type DeleteServiceFederatedIdentityProviderError =
-  | BadRequest
-  | Forbidden
-  | StackitOpError;
+export type DeleteServiceFederatedIdentityProviderError = BadRequest | Forbidden | StackitOpError;
 /** Delete a service account Federated Identity Provider Delete a Federated Identity Provider */
 export const deleteServiceFederatedIdentityProvider: API.OperationMethod<
   DeleteServiceFederatedIdentityProviderRequest,
@@ -1069,11 +996,7 @@ export const deleteServiceFederatedIdentityProvider: API.OperationMethod<
   retry: Retry.Retry,
 }));
 
-export type GetFederatedIdentityProviderError =
-  | BadRequest
-  | Forbidden
-  | NotFound
-  | StackitOpError;
+export type GetFederatedIdentityProviderError = BadRequest | Forbidden | NotFound | StackitOpError;
 /** Get a service account Federated Identity Provider Get a Federated Identity Provider of the service account by its ID. */
 export const getFederatedIdentityProvider: API.OperationMethod<
   GetFederatedIdentityProviderRequest,
@@ -1090,18 +1013,14 @@ export const getFederatedIdentityProvider: API.OperationMethod<
 
 export type GetJWKSError = StackitOpError;
 /** Get JSON Web Key set of the service account Get JSON Web Key set of the service account */
-export const getJWKS: API.OperationMethod<
-  GetJWKSRequest,
-  JWKS,
-  GetJWKSError,
-  StackitOpContext
-> = /*@__PURE__*/ API.make(() => ({
-  input: GetJWKSRequest,
-  output: JWKS,
-  errors: [UnknownStackitError],
-  protocol: StackitProtocol,
-  retry: Retry.Retry,
-}));
+export const getJWKS: API.OperationMethod<GetJWKSRequest, JWKS, GetJWKSError, StackitOpContext> =
+  /*@__PURE__*/ API.make(() => ({
+    input: GetJWKSRequest,
+    output: JWKS,
+    errors: [UnknownStackitError],
+    protocol: StackitProtocol,
+    retry: Retry.Retry,
+  }));
 
 export type GetServiceAccountKeyError = BadRequest | Forbidden | StackitOpError;
 /** Get service account key details Get key details */
@@ -1118,10 +1037,7 @@ export const getServiceAccountKey: API.OperationMethod<
   retry: Retry.Retry,
 }));
 
-export type ListFederatedIdentityProvidersError =
-  | BadRequest
-  | Forbidden
-  | StackitOpError;
+export type ListFederatedIdentityProvidersError = BadRequest | Forbidden | StackitOpError;
 /** List all federated identity providers List all the identity providers the service account is federated with. */
 export const listFederatedIdentityProviders: API.OperationMethod<
   ListFederatedIdentityProvidersRequest,
@@ -1136,10 +1052,7 @@ export const listFederatedIdentityProviders: API.OperationMethod<
   retry: Retry.Retry,
 }));
 
-export type ListServiceAccountKeysError =
-  | BadRequest
-  | Forbidden
-  | StackitOpError;
+export type ListServiceAccountKeysError = BadRequest | Forbidden | StackitOpError;
 /** List all keys that belong to the service account List all keys that belong to the service account */
 export const listServiceAccountKeys: API.OperationMethod<
   ListServiceAccountKeysRequest,