@distilled.cloud/stackit 1.0.0-rc.14 → 1.0.0-rc.16

package/src/services/alb_waf.ts

@@ -1,11 +1,14 @@
 import * as API from "@distilled.cloud/core/api";
 import * as C from "@distilled.cloud/core/category";
 // AUTO-GENERATED by scripts/generate.ts from .generated-specs (specs/spec-mirror-stackit). Do not edit.
-import * as S from "@distilled.cloud/core/schema";
+import * as S from "@distilled.cloud/core/schema-lite";
+import * as __L from "@distilled.cloud/core/schema-lite";
 import { UnknownStackitError } from "../errors.ts";
 import { StackitProtocol, type StackitOpError, type StackitOpContext } from "../protocol.ts";
 import * as Retry from "../retry.ts";
 import * as T from "../traits.ts";
+// Schema table, filled on first reach (see __S at the end).
+const __s: any[] = [];
 
 export type { StackitOpError, StackitOpContext };
 
@@ -47,8 +50,6 @@ export class NotFound
 
 /** The protective stance action. ACTION_DENY forces a 403 status response code. */
 export type Action = "ACTION_DENY" | "ACTION_PASS" | "ACTION_ALLOW";
-export const Action = S.String;
-
 export interface Behavior {
   action: Action | (string & {});
   /** Determines whether an entry should be generated in the security ledger upon a rule hit. */
@@ -56,14 +57,6 @@ export interface Behavior {
   /** Custom notification message string mapped to underlying logdata contexts. */
   logMsg?: string;
 }
-export const Behavior = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    action: Action,
-    log: S.optional(S.Boolean),
-    logMsg: S.optional(S.String),
-  }),
-).annotate({ identifier: "Behavior" }) as any as S.Schema<Behavior>;
-
 /** The operational evaluation type definition macro. */
 export type Operator =
   | "OPERATOR_BEGINS_WITH"
@@ -82,20 +75,11 @@ export type Operator =
   | "OPERATOR_VALIDATE_URL_ENCODING"
   | "OPERATOR_VALIDATE_UTF8_ENCODING"
   | "OPERATOR_WITHIN";
-export const Operator = S.String;
-
 export interface ConditionOperator {
   type: Operator | (string & {});
   /** The text or rule regex pattern arguments applied inside the operator execution loop. */
   value?: string;
 }
-export const ConditionOperator = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    type: Operator,
-    value: S.optional(S.String),
-  }),
-).annotate({ identifier: "ConditionOperator" }) as any as S.Schema<ConditionOperator>;
-
 export type Transformation =
   | "TRANSFORMATION_LENGTH"
   | "TRANSFORMATION_LOWERCASE"
@@ -103,14 +87,8 @@ export type Transformation =
   | "TRANSFORMATION_TRIM"
   | "TRANSFORMATION_UPPERCASE"
   | "TRANSFORMATION_UTF8_TO_UNICODE";
-export const Transformation = S.String;
-
 /** [HINT] Ordered processing adjustments applied to clean inputs before match checking. */
 export type ConditionTransformationsList = Array<Transformation | (string & {})>;
-export const ConditionTransformationsList = /*@__PURE__*/ S.Array(
-  Transformation,
-) as any as S.Schema<ConditionTransformationsList>;
-
 /** The targeted validation engine variable macro. */
 export type Variable =
   | "VARIABLE_ARGS_GET"
@@ -135,40 +113,19 @@ export type Variable =
   | "VARIABLE_RESPONSE_HEADERS_NAMES"
   | "VARIABLE_RESPONSE_PROTOCOL"
   | "VARIABLE_RESPONSE_STATUS";
-export const Variable = S.String;
-
 export interface ConditionVariable {
   type: Variable | (string & {});
   /** Optional key element context for map variables (e.g., matching a 'Host' header key). */
   value?: string;
 }
-export const ConditionVariable = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    type: Variable,
-    value: S.optional(S.String),
-  }),
-).annotate({ identifier: "ConditionVariable" }) as any as S.Schema<ConditionVariable>;
-
 export interface Condition {
   operator: ConditionOperator;
   /** [HINT] Ordered processing adjustments applied to clean inputs before match checking. */
   transformations?: ConditionTransformationsList;
   variable: ConditionVariable;
 }
-export const Condition = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    operator: ConditionOperator,
-    transformations: S.optional(ConditionTransformationsList),
-    variable: ConditionVariable,
-  }),
-).annotate({ identifier: "Condition" }) as any as S.Schema<Condition>;
-
 /** [HINT] Order matters! First condition match triggers execution. */
 export type CreateCustomRuleConditionsList = Array<Condition>;
-export const CreateCustomRuleConditionsList = /*@__PURE__*/ S.Array(
-  Condition,
-) as any as S.Schema<CreateCustomRuleConditionsList>;
-
 export interface CreateCustomRule {
   behavior: Behavior;
   /** [HINT] Order matters! First condition match triggers execution. */
@@ -176,20 +133,8 @@ export interface CreateCustomRule {
   /** A clear description explaining the threat vector or criteria addressed by this rule. */
   description?: string;
 }
-export const CreateCustomRule = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    behavior: Behavior,
-    conditions: CreateCustomRuleConditionsList,
-    description: S.optional(S.String),
-  }),
-).annotate({ identifier: "CreateCustomRule" }) as any as S.Schema<CreateCustomRule>;
-
 /** The collection of custom rule group SecLang parameters forming this execution group. */
 export type CreateCustomRuleGroupRequestRulesList = Array<CreateCustomRule>;
-export const CreateCustomRuleGroupRequestRulesList = /*@__PURE__*/ S.Array(
-  CreateCustomRule,
-) as any as S.Schema<CreateCustomRuleGroupRequestRulesList>;
-
 export interface CreateCustomRuleGroupRequest {
   projectId: string;
   region: string;
@@ -198,24 +143,6 @@ export interface CreateCustomRuleGroupRequest {
   /** The collection of custom rule group SecLang parameters forming this execution group. */
   rules: CreateCustomRuleGroupRequestRulesList;
 }
-export const CreateCustomRuleGroupRequest = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    projectId: S.String.pipe(T.Label()),
-    region: S.String.pipe(T.Label()),
-    name: S.String,
-    rules: CreateCustomRuleGroupRequestRulesList,
-  }).pipe(
-    T.Http({
-      method: "POST",
-      uri: "/v1/projects/{projectId}/regions/{region}/custom-rule-groups",
-      code: 200,
-      baseUrl: "https://alb-waf.api.stackit.cloud",
-    }),
-  ),
-).annotate({
-  identifier: "CreateCustomRuleGroupRequest",
-}) as any as S.Schema<CreateCustomRuleGroupRequest>;
-
 /** Severity classification metric used by internal analytics graphs. */
 export type Severity =
   | "SEVERITY_EMERGENCY"
@@ -226,8 +153,6 @@ export type Severity =
   | "SEVERITY_NOTICE"
   | "SEVERITY_INFO"
   | "SEVERITY_DEBUG";
-export const Severity = S.String;
-
 export interface GetBehavior {
   action: Action;
   /** Determines whether an entry should be generated in the security ledger upon a rule hit. */
@@ -236,21 +161,8 @@ export interface GetBehavior {
   logMsg?: string;
   severity: Severity;
 }
-export const GetBehavior = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    action: Action,
-    log: S.Boolean,
-    logMsg: S.optional(S.String),
-    severity: Severity,
-  }),
-).annotate({ identifier: "GetBehavior" }) as any as S.Schema<GetBehavior>;
-
 /** [HINT] Order matters! First condition match triggers execution. */
 export type GetCustomRuleConditionsList = Array<Condition>;
-export const GetCustomRuleConditionsList = /*@__PURE__*/ S.Array(
-  Condition,
-) as any as S.Schema<GetCustomRuleConditionsList>;
-
 export interface GetCustomRule {
   behavior: GetBehavior;
   /** [HINT] Order matters! First condition match triggers execution. */
@@ -260,27 +172,10 @@ export interface GetCustomRule {
   /** Backend auto-allocated unique rule ID within the valid 1-99999 threshold. */
   id: number;
 }
-export const GetCustomRule = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    behavior: GetBehavior,
-    conditions: GetCustomRuleConditionsList,
-    description: S.optional(S.String),
-    id: S.Number,
-  }),
-).annotate({ identifier: "GetCustomRule" }) as any as S.Schema<GetCustomRule>;
-
 /** Enriched rules containing auto-generated IDs and computed severity values. */
 export type GetCustomRuleGroupResponseRulesList = Array<GetCustomRule>;
-export const GetCustomRuleGroupResponseRulesList = /*@__PURE__*/ S.Array(
-  GetCustomRule,
-) as any as S.Schema<GetCustomRuleGroupResponseRulesList>;
-
 /** List of individual WAF configuration names that bind this rule group. */
 export type CRGUsageItemsList = Array<string>;
-export const CRGUsageItemsList = /*@__PURE__*/ S.Array(
-  S.String,
-) as any as S.Schema<CRGUsageItemsList>;
-
 /** Tracking metrics for CRG resource utilization */
 export interface CRGUsage {
   /** Number of WAF configurations actively using this rule group. */
@@ -288,13 +183,6 @@ export interface CRGUsage {
   /** List of individual WAF configuration names that bind this rule group. */
   items?: CRGUsageItemsList;
 }
-export const CRGUsage = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    count: S.optional(S.Number),
-    items: S.optional(CRGUsageItemsList),
-  }),
-).annotate({ identifier: "CRGUsage" }) as any as S.Schema<CRGUsage>;
-
 /** Response payload delivering the detailed CRG configuration name and it's rule content. */
 export interface GetCustomRuleGroupResponse {
   /** Custom rule group configuration name. */
@@ -303,20 +191,8 @@ export interface GetCustomRuleGroupResponse {
   rules: GetCustomRuleGroupResponseRulesList;
   usage?: CRGUsage;
 }
-export const GetCustomRuleGroupResponse = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    name: S.String,
-    rules: GetCustomRuleGroupResponseRulesList,
-    usage: S.optional(CRGUsage),
-  }),
-).annotate({
-  identifier: "GetCustomRuleGroupResponse",
-}) as any as S.Schema<GetCustomRuleGroupResponse>;
-
 /** Set the managed rule set type. */
 export type Type = "TYPE_OWASP_CRS";
-export const Type = S.String;
-
 export interface CreateManagedRuleSetRequest {
   projectId: string;
   region: string;
@@ -324,28 +200,8 @@ export interface CreateManagedRuleSetRequest {
   name: string;
   type: Type | (string & {});
 }
-export const CreateManagedRuleSetRequest = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    projectId: S.String.pipe(T.Label()),
-    region: S.String.pipe(T.Label()),
-    name: S.String,
-    type: Type,
-  }).pipe(
-    T.Http({
-      method: "POST",
-      uri: "/v1/projects/{projectId}/regions/{region}/managed-rule-sets",
-      code: 200,
-      baseUrl: "https://alb-waf.api.stackit.cloud",
-    }),
-  ),
-).annotate({
-  identifier: "CreateManagedRuleSetRequest",
-}) as any as S.Schema<CreateManagedRuleSetRequest>;
-
 /** The current mode of the rule. */
 export type Mode = "MODE_ENABLED" | "MODE_DISABLED" | "MODE_LOG_ONLY";
-export const Mode = S.String;
-
 /** Rule represents an individual security or validation rule. */
 export interface MRSRule {
   /** A description of what this rule covers. */
@@ -354,20 +210,7 @@ export interface MRSRule {
   /** Impact level. */
   severity: string;
 }
-export const MRSRule = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    description: S.String,
-    mode: Mode,
-    severity: S.String,
-  }),
-).annotate({ identifier: "MRSRule" }) as any as S.Schema<MRSRule>;
-
 export type MRSRuleGroupRulesMap = { [key: string]: MRSRule | undefined };
-export const MRSRuleGroupRulesMap = /*@__PURE__*/ S.Record(
-  S.String,
-  MRSRule,
-) as any as S.Schema<MRSRuleGroupRulesMap>;
-
 /** RuleGroup represents a collection of rules associated with a specific group. */
 export interface MRSRuleGroup {
   /** A description of what this group covers. */
@@ -376,40 +219,16 @@ export interface MRSRuleGroup {
   groupName: string;
   rules?: MRSRuleGroupRulesMap;
 }
-export const MRSRuleGroup = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    description: S.String,
-    groupName: S.String,
-    rules: S.optional(MRSRuleGroupRulesMap),
-  }),
-).annotate({ identifier: "MRSRuleGroup" }) as any as S.Schema<MRSRuleGroup>;
-
 /** Inventory of all available Managed Rule Set groups and their current configuration. The key is the unique Group ID. */
 export type GetManagedRuleSetResponseGroupsMap = { [key: string]: MRSRuleGroup | undefined };
-export const GetManagedRuleSetResponseGroupsMap = /*@__PURE__*/ S.Record(
-  S.String,
-  MRSRuleGroup,
-) as any as S.Schema<GetManagedRuleSetResponseGroupsMap>;
-
 /** List of WAFs that use this Managed Rule Set. */
 export type MRSUsageItemsList = Array<string>;
-export const MRSUsageItemsList = /*@__PURE__*/ S.Array(
-  S.String,
-) as any as S.Schema<MRSUsageItemsList>;
-
 export interface MRSUsage {
   /** Number of WAFs using this Managed Rule Set. */
   count?: number;
   /** List of WAFs that use this Managed Rule Set. */
   items?: MRSUsageItemsList;
 }
-export const MRSUsage = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    count: S.optional(S.Number),
-    items: S.optional(MRSUsageItemsList),
-  }),
-).annotate({ identifier: "MRSUsage" }) as any as S.Schema<MRSUsage>;
-
 /** GetManagedRuleSetResponse returns rule configuration name and it's rules. */
 export interface GetManagedRuleSetResponse {
   /** Inventory of all available Managed Rule Set groups and their current configuration. The key is the unique Group ID. */
@@ -421,25 +240,8 @@ export interface GetManagedRuleSetResponse {
   /** Managed rule set version. */
   version: string;
 }
-export const GetManagedRuleSetResponse = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    groups: S.optional(GetManagedRuleSetResponseGroupsMap),
-    name: S.String,
-    type: Type,
-    usage: S.optional(MRSUsage),
-    version: S.String,
-  }),
-).annotate({
-  identifier: "GetManagedRuleSetResponse",
-}) as any as S.Schema<GetManagedRuleSetResponse>;
-
 /** Labels represent user-defined metadata as key-value pairs. Label count should not exceed 64 per WAF. **Key Formatting Rules:** Length: 1-63 characters. Characters: Must begin and end with [a-zA-Z0-9]. May contain dashes (-), underscores (_), dots (.), and alphanumerics in between. Keys starting with 'stackit-' are system-reserved; users MUST NOT manage them. **Value Formatting Rules:** Length: 0-63 characters (empty string explicitly allowed). Characters (for non-empty values): Must begin and end with [a-zA-Z0-9]. May contain dashes (-), underscores (_), dots (.), and alphanumerics in between. */
 export type CreateWAFRequestLabelsMap = { [key: string]: string | undefined };
-export const CreateWAFRequestLabelsMap = /*@__PURE__*/ S.Record(
-  S.String,
-  S.String,
-) as any as S.Schema<CreateWAFRequestLabelsMap>;
-
 export interface CreateWAFRequest {
   projectId: string;
   region: string;
@@ -452,69 +254,24 @@ export interface CreateWAFRequest {
   /** WAF name */
   name: string;
 }
-export const CreateWAFRequest = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    projectId: S.String.pipe(T.Label()),
-    region: S.String.pipe(T.Label()),
-    customRuleGroupName: S.optional(S.String),
-    labels: S.optional(CreateWAFRequestLabelsMap),
-    managedRuleSetName: S.optional(S.String),
-    name: S.String,
-  }).pipe(
-    T.Http({
-      method: "POST",
-      uri: "/v1/projects/{projectId}/regions/{region}/wafs",
-      code: 200,
-      baseUrl: "https://alb-waf.api.stackit.cloud",
-    }),
-  ),
-).annotate({ identifier: "CreateWAFRequest" }) as any as S.Schema<CreateWAFRequest>;
-
 /** Labels represent user-defined metadata as key-value pairs. Label count should not exceed 64 per WAF. **Key Formatting Rules:** Length: 1-63 characters. Characters: Must begin and end with [a-zA-Z0-9]. May contain dashes (-), underscores (_), dots (.), and alphanumerics in between. Keys starting with 'stackit-' are system-reserved; users MUST NOT manage them. **Value Formatting Rules:** Length: 0-63 characters (empty string explicitly allowed). Characters (for non-empty values): Must begin and end with [a-zA-Z0-9]. May contain dashes (-), underscores (_), dots (.), and alphanumerics in between. */
 export type GetWAFResponseLabelsMap = { [key: string]: string | undefined };
-export const GetWAFResponseLabelsMap = /*@__PURE__*/ S.Record(
-  S.String,
-  S.String,
-) as any as S.Schema<GetWAFResponseLabelsMap>;
-
 /** The list of listener names in this Load Balancer, that are using the WAF. */
 export type WAFUsageItemListenerNamesList = Array<string>;
-export const WAFUsageItemListenerNamesList = /*@__PURE__*/ S.Array(
-  S.String,
-) as any as S.Schema<WAFUsageItemListenerNamesList>;
-
 export interface WAFUsageItem {
   /** The list of listener names in this Load Balancer, that are using the WAF. */
   listenerNames?: WAFUsageItemListenerNamesList;
   /** The display name of the Load Balancer. */
   loadBalancerName: string;
 }
-export const WAFUsageItem = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    listenerNames: S.optional(WAFUsageItemListenerNamesList),
-    loadBalancerName: S.String,
-  }),
-).annotate({ identifier: "WAFUsageItem" }) as any as S.Schema<WAFUsageItem>;
-
 /** List of Application Load Balancers with their associated listeners that use this WAF configuration. */
 export type WAFUsageItemsList = Array<WAFUsageItem>;
-export const WAFUsageItemsList = /*@__PURE__*/ S.Array(
-  WAFUsageItem,
-) as any as S.Schema<WAFUsageItemsList>;
-
 export interface WAFUsage {
   /** Number of listeners using this WAF configuration. */
   count?: number;
   /** List of Application Load Balancers with their associated listeners that use this WAF configuration. */
   items?: WAFUsageItemsList;
 }
-export const WAFUsage = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    count: S.optional(S.Number),
-    items: S.optional(WAFUsageItemsList),
-  }),
-).annotate({ identifier: "WAFUsage" }) as any as S.Schema<WAFUsage>;
-
 /** GetWAFResponse returns detailed information about the WAF, which includes the identifying name, references to MRS/CRG and usage. */
 export interface GetWAFResponse {
   /** Name of the CRG configuration for that WAF. */
@@ -527,159 +284,38 @@ export interface GetWAFResponse {
   name: string;
   usage?: WAFUsage;
 }
-export const GetWAFResponse = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    customRuleGroupName: S.optional(S.String),
-    labels: S.optional(GetWAFResponseLabelsMap),
-    managedRuleSetName: S.optional(S.String),
-    name: S.String,
-    usage: S.optional(WAFUsage),
-  }),
-).annotate({ identifier: "GetWAFResponse" }) as any as S.Schema<GetWAFResponse>;
-
 export interface DeleteCustomRuleGroupRequest {
   projectId: string;
   region: string;
   name: string;
 }
-export const DeleteCustomRuleGroupRequest = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    projectId: S.String.pipe(T.Label()),
-    region: S.String.pipe(T.Label()),
-    name: S.String.pipe(T.Label()),
-  }).pipe(
-    T.Http({
-      method: "DELETE",
-      uri: "/v1/projects/{projectId}/regions/{region}/custom-rule-groups/{name}",
-      code: 200,
-      baseUrl: "https://alb-waf.api.stackit.cloud",
-    }),
-  ),
-).annotate({
-  identifier: "DeleteCustomRuleGroupRequest",
-}) as any as S.Schema<DeleteCustomRuleGroupRequest>;
-
 export type DeleteCustomRuleGroupResponse2 = unknown;
-export const DeleteCustomRuleGroupResponse2 = /*@__PURE__*/ S.suspend(() =>
-  S.Unknown.pipe(T.RawResponseRoot()),
-).annotate({
-  identifier: "DeleteCustomRuleGroupResponse2",
-}) as any as S.Schema<DeleteCustomRuleGroupResponse2>;
-
 export interface DeleteManagedRuleSetRequest {
   projectId: string;
   region: string;
   name: string;
 }
-export const DeleteManagedRuleSetRequest = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    projectId: S.String.pipe(T.Label()),
-    region: S.String.pipe(T.Label()),
-    name: S.String.pipe(T.Label()),
-  }).pipe(
-    T.Http({
-      method: "DELETE",
-      uri: "/v1/projects/{projectId}/regions/{region}/managed-rule-sets/{name}",
-      code: 200,
-      baseUrl: "https://alb-waf.api.stackit.cloud",
-    }),
-  ),
-).annotate({
-  identifier: "DeleteManagedRuleSetRequest",
-}) as any as S.Schema<DeleteManagedRuleSetRequest>;
-
 export type DeleteManagedRuleSetResponse2 = unknown;
-export const DeleteManagedRuleSetResponse2 = /*@__PURE__*/ S.suspend(() =>
-  S.Unknown.pipe(T.RawResponseRoot()),
-).annotate({
-  identifier: "DeleteManagedRuleSetResponse2",
-}) as any as S.Schema<DeleteManagedRuleSetResponse2>;
-
 export interface DeleteWAFRequest {
   projectId: string;
   region: string;
   name: string;
 }
-export const DeleteWAFRequest = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    projectId: S.String.pipe(T.Label()),
-    region: S.String.pipe(T.Label()),
-    name: S.String.pipe(T.Label()),
-  }).pipe(
-    T.Http({
-      method: "DELETE",
-      uri: "/v1/projects/{projectId}/regions/{region}/wafs/{name}",
-      code: 200,
-      baseUrl: "https://alb-waf.api.stackit.cloud",
-    }),
-  ),
-).annotate({ identifier: "DeleteWAFRequest" }) as any as S.Schema<DeleteWAFRequest>;
-
 export type DeleteWAFResponse2 = unknown;
-export const DeleteWAFResponse2 = /*@__PURE__*/ S.suspend(() =>
-  S.Unknown.pipe(T.RawResponseRoot()),
-).annotate({ identifier: "DeleteWAFResponse2" }) as any as S.Schema<DeleteWAFResponse2>;
-
 export interface GetCustomRuleGroupRequest {
   projectId: string;
   region: string;
   name: string;
 }
-export const GetCustomRuleGroupRequest = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    projectId: S.String.pipe(T.Label()),
-    region: S.String.pipe(T.Label()),
-    name: S.String.pipe(T.Label()),
-  }).pipe(
-    T.Http({
-      method: "GET",
-      uri: "/v1/projects/{projectId}/regions/{region}/custom-rule-groups/{name}",
-      code: 200,
-      baseUrl: "https://alb-waf.api.stackit.cloud",
-    }),
-  ),
-).annotate({
-  identifier: "GetCustomRuleGroupRequest",
-}) as any as S.Schema<GetCustomRuleGroupRequest>;
-
 export interface GetManagedRuleSetRequest {
   projectId: string;
   region: string;
   name: string;
 }
-export const GetManagedRuleSetRequest = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    projectId: S.String.pipe(T.Label()),
-    region: S.String.pipe(T.Label()),
-    name: S.String.pipe(T.Label()),
-  }).pipe(
-    T.Http({
-      method: "GET",
-      uri: "/v1/projects/{projectId}/regions/{region}/managed-rule-sets/{name}",
-      code: 200,
-      baseUrl: "https://alb-waf.api.stackit.cloud",
-    }),
-  ),
-).annotate({ identifier: "GetManagedRuleSetRequest" }) as any as S.Schema<GetManagedRuleSetRequest>;
-
 export interface GetQuotaRequest {
   projectId: string;
   region: string;
 }
-export const GetQuotaRequest = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    projectId: S.String.pipe(T.Label()),
-    region: S.String.pipe(T.Label()),
-  }).pipe(
-    T.Http({
-      method: "GET",
-      uri: "/v1/projects/{projectId}/regions/{region}/quotas",
-      code: 200,
-      baseUrl: "https://alb-waf.api.stackit.cloud",
-    }),
-  ),
-).annotate({ identifier: "GetQuotaRequest" }) as any as S.Schema<GetQuotaRequest>;
-
 /** CRG quotas holds the limit and usage for CRG resources */
 export interface CRGConfigQuota {
   /** The maximum number of custom rule groups in this project. */
@@ -687,13 +323,6 @@ export interface CRGConfigQuota {
   /** The number of custom rule groups that are currently existing in this project. */
   usage?: number;
 }
-export const CRGConfigQuota = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    limit: S.optional(S.Number),
-    usage: S.optional(S.Number),
-  }),
-).annotate({ identifier: "CRGConfigQuota" }) as any as S.Schema<CRGConfigQuota>;
-
 /** MRS Config quota holds the limit and usage for Managed Rule Set configuration resources */
 export interface MRSConfigQuota {
   /** The maximum number of Managed Rule Set configurations in this project. */
@@ -701,13 +330,6 @@ export interface MRSConfigQuota {
   /** The number of Managed Rule Set configurations that are currently existing in this project. */
   usage?: number;
 }
-export const MRSConfigQuota = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    limit: S.optional(S.Number),
-    usage: S.optional(S.Number),
-  }),
-).annotate({ identifier: "MRSConfigQuota" }) as any as S.Schema<MRSConfigQuota>;
-
 /** WAF Config quota holds the limit and usage for Web Application Firewall configuration resources */
 export interface WAFConfigQuota {
   /** The maximum number of Web Application Firewall configurations in this project. */
@@ -715,27 +337,12 @@ export interface WAFConfigQuota {
   /** The number of Web Application Firewall configurations that are currently existing in this project. */
   usage?: number;
 }
-export const WAFConfigQuota = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    limit: S.optional(S.Number),
-    usage: S.optional(S.Number),
-  }),
-).annotate({ identifier: "WAFConfigQuota" }) as any as S.Schema<WAFConfigQuota>;
-
 /** Quotas holds the specific quota elements for different resources */
 export interface Quotas {
   customRuleGroup: CRGConfigQuota;
   managedRuleSet: MRSConfigQuota;
   webApplicationFirewall: WAFConfigQuota;
 }
-export const Quotas = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    customRuleGroup: CRGConfigQuota,
-    managedRuleSet: MRSConfigQuota,
-    webApplicationFirewall: WAFConfigQuota,
-  }),
-).annotate({ identifier: "Quotas" }) as any as S.Schema<Quotas>;
-
 export interface GetQuotaResponse {
   /** Project identifier */
   projectId?: string;
@@ -743,34 +350,11 @@ export interface GetQuotaResponse {
   /** Region */
   region?: string;
 }
-export const GetQuotaResponse = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    projectId: S.optional(S.String),
-    quotas: Quotas,
-    region: S.optional(S.String),
-  }),
-).annotate({ identifier: "GetQuotaResponse" }) as any as S.Schema<GetQuotaResponse>;
-
 export interface GetWAFRequest {
   projectId: string;
   region: string;
   name: string;
 }
-export const GetWAFRequest = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    projectId: S.String.pipe(T.Label()),
-    region: S.String.pipe(T.Label()),
-    name: S.String.pipe(T.Label()),
-  }).pipe(
-    T.Http({
-      method: "GET",
-      uri: "/v1/projects/{projectId}/regions/{region}/wafs/{name}",
-      code: 200,
-      baseUrl: "https://alb-waf.api.stackit.cloud",
-    }),
-  ),
-).annotate({ identifier: "GetWAFRequest" }) as any as S.Schema<GetWAFRequest>;
-
 export interface ListCustomRuleGroupRequest {
   projectId: string;
   region: string;
@@ -779,44 +363,13 @@ export interface ListCustomRuleGroupRequest {
   /** page_id is a page identifier returned by the previous response and is used to request the next page */
   pageId?: string;
 }
-export const ListCustomRuleGroupRequest = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    projectId: S.String.pipe(T.Label()),
-    region: S.String.pipe(T.Label()),
-    pageSize: S.optional(S.String.pipe(T.Query())),
-    pageId: S.optional(S.String.pipe(T.Query())),
-  }).pipe(
-    T.Http({
-      method: "GET",
-      uri: "/v1/projects/{projectId}/regions/{region}/custom-rule-groups",
-      code: 200,
-      baseUrl: "https://alb-waf.api.stackit.cloud",
-    }),
-  ),
-).annotate({
-  identifier: "ListCustomRuleGroupRequest",
-}) as any as S.Schema<ListCustomRuleGroupRequest>;
-
 export type ListCustomRuleGroupResponseItemsList = Array<GetCustomRuleGroupResponse>;
-export const ListCustomRuleGroupResponseItemsList = /*@__PURE__*/ S.Array(
-  GetCustomRuleGroupResponse,
-) as any as S.Schema<ListCustomRuleGroupResponseItemsList>;
-
 /** ListCustomRuleGroupResponse returns a list of Custom Rule Group responses. */
 export interface ListCustomRuleGroupResponse {
   items?: ListCustomRuleGroupResponseItemsList;
   /** Continue token from the ListCustomRuleGroupResponse with Limit option */
   nextPageId?: string;
 }
-export const ListCustomRuleGroupResponse = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    items: S.optional(ListCustomRuleGroupResponseItemsList),
-    nextPageId: S.optional(S.String),
-  }),
-).annotate({
-  identifier: "ListCustomRuleGroupResponse",
-}) as any as S.Schema<ListCustomRuleGroupResponse>;
-
 export interface ListManagedRuleSetsRequest {
   projectId: string;
   region: string;
@@ -825,24 +378,6 @@ export interface ListManagedRuleSetsRequest {
   /** page_id is a page identifier returned by the previous response and is used to request the next page */
   pageId?: string;
 }
-export const ListManagedRuleSetsRequest = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    projectId: S.String.pipe(T.Label()),
-    region: S.String.pipe(T.Label()),
-    pageSize: S.optional(S.String.pipe(T.Query())),
-    pageId: S.optional(S.String.pipe(T.Query())),
-  }).pipe(
-    T.Http({
-      method: "GET",
-      uri: "/v1/projects/{projectId}/regions/{region}/managed-rule-sets",
-      code: 200,
-      baseUrl: "https://alb-waf.api.stackit.cloud",
-    }),
-  ),
-).annotate({
-  identifier: "ListManagedRuleSetsRequest",
-}) as any as S.Schema<ListManagedRuleSetsRequest>;
-
 export interface GetLimitedManagedRuleSetResponse {
   /** Managed rule set configuration name. */
   name: string;
@@ -851,37 +386,13 @@ export interface GetLimitedManagedRuleSetResponse {
   /** Managed rule set version. */
   version: string;
 }
-export const GetLimitedManagedRuleSetResponse = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    name: S.String,
-    type: Type,
-    usage: S.optional(MRSUsage),
-    version: S.String,
-  }),
-).annotate({
-  identifier: "GetLimitedManagedRuleSetResponse",
-}) as any as S.Schema<GetLimitedManagedRuleSetResponse>;
-
 export type ListManagedRuleSetResponseItemsList = Array<GetLimitedManagedRuleSetResponse>;
-export const ListManagedRuleSetResponseItemsList = /*@__PURE__*/ S.Array(
-  GetLimitedManagedRuleSetResponse,
-) as any as S.Schema<ListManagedRuleSetResponseItemsList>;
-
 /** ListManagedRuleSetResponse returns a list of rule configuration responses. */
 export interface ListManagedRuleSetResponse {
   items?: ListManagedRuleSetResponseItemsList;
   /** Continue token from the ListManagedRuleSetResponse with Limit option */
   nextPageId?: string;
 }
-export const ListManagedRuleSetResponse = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    items: S.optional(ListManagedRuleSetResponseItemsList),
-    nextPageId: S.optional(S.String),
-  }),
-).annotate({
-  identifier: "ListManagedRuleSetResponse",
-}) as any as S.Schema<ListManagedRuleSetResponse>;
-
 export interface ListWAFRequest {
   projectId: string;
   region: string;
@@ -890,71 +401,22 @@ export interface ListWAFRequest {
   /** page_id is a page identifier returned by the previous response and is used to request the next page */
   pageId?: string;
 }
-export const ListWAFRequest = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    projectId: S.String.pipe(T.Label()),
-    region: S.String.pipe(T.Label()),
-    pageSize: S.optional(S.String.pipe(T.Query())),
-    pageId: S.optional(S.String.pipe(T.Query())),
-  }).pipe(
-    T.Http({
-      method: "GET",
-      uri: "/v1/projects/{projectId}/regions/{region}/wafs",
-      code: 200,
-      baseUrl: "https://alb-waf.api.stackit.cloud",
-    }),
-  ),
-).annotate({ identifier: "ListWAFRequest" }) as any as S.Schema<ListWAFRequest>;
-
 export type ListWAFResponseItemsList = Array<GetWAFResponse>;
-export const ListWAFResponseItemsList = /*@__PURE__*/ S.Array(
-  GetWAFResponse,
-) as any as S.Schema<ListWAFResponseItemsList>;
-
 /** ListWAFResponse returns a list of WAF responses. */
 export interface ListWAFResponse {
   items?: ListWAFResponseItemsList;
   /** Continue token from the ListWAFResponse with Limit option */
   nextPageId?: string;
 }
-export const ListWAFResponse = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    items: S.optional(ListWAFResponseItemsList),
-    nextPageId: S.optional(S.String),
-  }),
-).annotate({ identifier: "ListWAFResponse" }) as any as S.Schema<ListWAFResponse>;
-
 export interface PatchMRSRule {
   mode?: Mode | (string & {});
 }
-export const PatchMRSRule = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    mode: S.optional(Mode),
-  }),
-).annotate({ identifier: "PatchMRSRule" }) as any as S.Schema<PatchMRSRule>;
-
 export type PatchMRSRuleGroupRulesMap = { [key: string]: PatchMRSRule | undefined };
-export const PatchMRSRuleGroupRulesMap = /*@__PURE__*/ S.Record(
-  S.String,
-  PatchMRSRule,
-) as any as S.Schema<PatchMRSRuleGroupRulesMap>;
-
 export interface PatchMRSRuleGroup {
   rules: PatchMRSRuleGroupRulesMap;
 }
-export const PatchMRSRuleGroup = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    rules: PatchMRSRuleGroupRulesMap,
-  }),
-).annotate({ identifier: "PatchMRSRuleGroup" }) as any as S.Schema<PatchMRSRuleGroup>;
-
 /** Map of Managed Rule Set groups to be patched. The key is the Group ID (e.g., 942 for SQL Injection). Only provided rules within the group will be updated; others remain unchanged. */
 export type PatchManagedRuleSetRequestGroupsMap = { [key: string]: PatchMRSRuleGroup | undefined };
-export const PatchManagedRuleSetRequestGroupsMap = /*@__PURE__*/ S.Record(
-  S.String,
-  PatchMRSRuleGroup,
-) as any as S.Schema<PatchManagedRuleSetRequestGroupsMap>;
-
 export interface PatchManagedRuleSetRequest {
   projectId: string;
   region: string;
@@ -962,30 +424,8 @@ export interface PatchManagedRuleSetRequest {
   /** Map of Managed Rule Set groups to be patched. The key is the Group ID (e.g., 942 for SQL Injection). Only provided rules within the group will be updated; others remain unchanged. */
   groups: PatchManagedRuleSetRequestGroupsMap;
 }
-export const PatchManagedRuleSetRequest = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    projectId: S.String.pipe(T.Label()),
-    region: S.String.pipe(T.Label()),
-    name: S.String.pipe(T.Label()),
-    groups: PatchManagedRuleSetRequestGroupsMap,
-  }).pipe(
-    T.Http({
-      method: "PATCH",
-      uri: "/v1/projects/{projectId}/regions/{region}/managed-rule-sets/{name}",
-      code: 200,
-      baseUrl: "https://alb-waf.api.stackit.cloud",
-    }),
-  ),
-).annotate({
-  identifier: "PatchManagedRuleSetRequest",
-}) as any as S.Schema<PatchManagedRuleSetRequest>;
-
 /** The collection of custom rule group SecLang parameters forming this execution group. Replaces the existing rules atomically. */
 export type UpdateCustomRuleGroupRequestRulesList = Array<CreateCustomRule>;
-export const UpdateCustomRuleGroupRequestRulesList = /*@__PURE__*/ S.Array(
-  CreateCustomRule,
-) as any as S.Schema<UpdateCustomRuleGroupRequestRulesList>;
-
 export interface UpdateCustomRuleGroupRequest {
   projectId: string;
   region: string;
@@ -993,31 +433,8 @@ export interface UpdateCustomRuleGroupRequest {
   /** The collection of custom rule group SecLang parameters forming this execution group. Replaces the existing rules atomically. */
   rules: UpdateCustomRuleGroupRequestRulesList;
 }
-export const UpdateCustomRuleGroupRequest = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    projectId: S.String.pipe(T.Label()),
-    region: S.String.pipe(T.Label()),
-    name: S.String.pipe(T.Label()),
-    rules: UpdateCustomRuleGroupRequestRulesList,
-  }).pipe(
-    T.Http({
-      method: "PUT",
-      uri: "/v1/projects/{projectId}/regions/{region}/custom-rule-groups/{name}",
-      code: 200,
-      baseUrl: "https://alb-waf.api.stackit.cloud",
-    }),
-  ),
-).annotate({
-  identifier: "UpdateCustomRuleGroupRequest",
-}) as any as S.Schema<UpdateCustomRuleGroupRequest>;
-
 /** Labels represent user-defined metadata as key-value pairs. Label count should not exceed 64 per WAF. **Key Formatting Rules:** Length: 1-63 characters. Characters: Must begin and end with [a-zA-Z0-9]. May contain dashes (-), underscores (_), dots (.), and alphanumerics in between. Keys starting with 'stackit-' are system-reserved; users MUST NOT manage them. **Value Formatting Rules:** Length: 0-63 characters (empty string explicitly allowed). Characters (for non-empty values): Must begin and end with [a-zA-Z0-9]. May contain dashes (-), underscores (_), dots (.), and alphanumerics in between. */
 export type UpdateWAFRequestLabelsMap = { [key: string]: string | undefined };
-export const UpdateWAFRequestLabelsMap = /*@__PURE__*/ S.Record(
-  S.String,
-  S.String,
-) as any as S.Schema<UpdateWAFRequestLabelsMap>;
-
 export interface UpdateWAFRequest {
   projectId: string;
   region: string;
@@ -1029,24 +446,6 @@ export interface UpdateWAFRequest {
   /** Name of the managed rule set configuration for that WAF. */
   managedRuleSetName?: string;
 }
-export const UpdateWAFRequest = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    projectId: S.String.pipe(T.Label()),
-    region: S.String.pipe(T.Label()),
-    name: S.String.pipe(T.Label()),
-    customRuleGroupName: S.optional(S.String),
-    labels: S.optional(UpdateWAFRequestLabelsMap),
-    managedRuleSetName: S.optional(S.String),
-  }).pipe(
-    T.Http({
-      method: "PUT",
-      uri: "/v1/projects/{projectId}/regions/{region}/wafs/{name}",
-      code: 200,
-      baseUrl: "https://alb-waf.api.stackit.cloud",
-    }),
-  ),
-).annotate({ identifier: "UpdateWAFRequest" }) as any as S.Schema<UpdateWAFRequest>;
-
 export type CreateCustomRuleGroupError = BadRequest | Forbidden | StackitOpError;
 /** Create a CRG configuration Creates a structured rule configuration using the abstract CRG. It can be referenced by any number of WAF configurations in the same project. */
 export const createCustomRuleGroup: API.OperationMethod<
@@ -1055,8 +454,8 @@ export const createCustomRuleGroup: API.OperationMethod<
   CreateCustomRuleGroupError,
   StackitOpContext
 > = /*@__PURE__*/ API.make(() => ({
-  input: CreateCustomRuleGroupRequest,
-  output: GetCustomRuleGroupResponse,
+  input: __S(80, __c10, 0) as any as S.Schema<CreateCustomRuleGroupRequest>,
+  output: __S(95, __c11, 7) as any as S.Schema<GetCustomRuleGroupResponse>,
   errors: [BadRequest, Forbidden, UnknownStackitError],
   protocol: StackitProtocol,
   retry: Retry.Retry,
@@ -1070,8 +469,8 @@ export const createManagedRuleSet: API.OperationMethod<
   CreateManagedRuleSetError,
   StackitOpContext
 > = /*@__PURE__*/ API.make(() => ({
-  input: CreateManagedRuleSetRequest,
-  output: GetManagedRuleSetResponse,
+  input: __S(120, __c15, 0) as any as S.Schema<CreateManagedRuleSetRequest>,
+  output: __S(132, __c16, 4) as any as S.Schema<GetManagedRuleSetResponse>,
   errors: [BadRequest, Forbidden, UnknownStackitError],
   protocol: StackitProtocol,
   retry: Retry.Retry,
@@ -1085,8 +484,8 @@ export const createWAF: API.OperationMethod<
   CreateWAFError,
   StackitOpContext
 > = /*@__PURE__*/ API.make(() => ({
-  input: CreateWAFRequest,
-  output: GetWAFResponse,
+  input: __S(136, __c17, 0) as any as S.Schema<CreateWAFRequest>,
+  output: __S(148, __c18, 4) as any as S.Schema<GetWAFResponse>,
   errors: [BadRequest, Forbidden, UnknownStackitError],
   protocol: StackitProtocol,
   retry: Retry.Retry,
@@ -1100,8 +499,8 @@ export const deleteCustomRuleGroup: API.OperationMethod<
   DeleteCustomRuleGroupError,
   StackitOpContext
 > = /*@__PURE__*/ API.make(() => ({
-  input: DeleteCustomRuleGroupRequest,
-  output: DeleteCustomRuleGroupResponse2,
+  input: __S(152, __c19, 0) as any as S.Schema<DeleteCustomRuleGroupRequest>,
+  output: __S(160, __c20, 0) as any as S.Schema<DeleteCustomRuleGroupResponse2>,
   errors: [BadRequest, Forbidden, UnknownStackitError],
   protocol: StackitProtocol,
   retry: Retry.Retry,
@@ -1115,8 +514,8 @@ export const deleteManagedRuleSet: API.OperationMethod<
   DeleteManagedRuleSetError,
   StackitOpContext
 > = /*@__PURE__*/ API.make(() => ({
-  input: DeleteManagedRuleSetRequest,
-  output: DeleteManagedRuleSetResponse2,
+  input: __S(168, __c21, 0) as any as S.Schema<DeleteManagedRuleSetRequest>,
+  output: __S(160, __c20, 0) as any as S.Schema<DeleteManagedRuleSetResponse2>,
   errors: [BadRequest, Forbidden, UnknownStackitError],
   protocol: StackitProtocol,
   retry: Retry.Retry,
@@ -1130,8 +529,8 @@ export const deleteWAF: API.OperationMethod<
   DeleteWAFError,
   StackitOpContext
 > = /*@__PURE__*/ API.make(() => ({
-  input: DeleteWAFRequest,
-  output: DeleteWAFResponse2,
+  input: __S(176, __c22, 0) as any as S.Schema<DeleteWAFRequest>,
+  output: __S(160, __c20, 0) as any as S.Schema<DeleteWAFResponse2>,
   errors: [BadRequest, Forbidden, UnknownStackitError],
   protocol: StackitProtocol,
   retry: Retry.Retry,
@@ -1145,8 +544,8 @@ export const getCustomRuleGroup: API.OperationMethod<
   GetCustomRuleGroupError,
   StackitOpContext
 > = /*@__PURE__*/ API.make(() => ({
-  input: GetCustomRuleGroupRequest,
-  output: GetCustomRuleGroupResponse,
+  input: __S(0, __c0, 0) as any as S.Schema<GetCustomRuleGroupRequest>,
+  output: __S(95, __c11, 7) as any as S.Schema<GetCustomRuleGroupResponse>,
   errors: [BadRequest, Forbidden, NotFound, UnknownStackitError],
   protocol: StackitProtocol,
   retry: Retry.Retry,
@@ -1160,8 +559,8 @@ export const getManagedRuleSet: API.OperationMethod<
   GetManagedRuleSetError,
   StackitOpContext
 > = /*@__PURE__*/ API.make(() => ({
-  input: GetManagedRuleSetRequest,
-  output: GetManagedRuleSetResponse,
+  input: __S(8, __c1, 0) as any as S.Schema<GetManagedRuleSetRequest>,
+  output: __S(132, __c16, 4) as any as S.Schema<GetManagedRuleSetResponse>,
   errors: [BadRequest, Forbidden, NotFound, UnknownStackitError],
   protocol: StackitProtocol,
   retry: Retry.Retry,
@@ -1175,8 +574,8 @@ export const getQuota: API.OperationMethod<
   GetQuotaError,
   StackitOpContext
 > = /*@__PURE__*/ API.make(() => ({
-  input: GetQuotaRequest,
-  output: GetQuotaResponse,
+  input: __S(16, __c2, 0) as any as S.Schema<GetQuotaRequest>,
+  output: __S(19, __c2, 3) as any as S.Schema<GetQuotaResponse>,
   errors: [BadRequest, Forbidden, UnknownStackitError],
   protocol: StackitProtocol,
   retry: Retry.Retry,
@@ -1190,8 +589,8 @@ export const getWAF: API.OperationMethod<
   GetWAFError,
   StackitOpContext
 > = /*@__PURE__*/ API.make(() => ({
-  input: GetWAFRequest,
-  output: GetWAFResponse,
+  input: __S(24, __c3, 0) as any as S.Schema<GetWAFRequest>,
+  output: __S(148, __c18, 4) as any as S.Schema<GetWAFResponse>,
   errors: [BadRequest, Forbidden, NotFound, UnknownStackitError],
   protocol: StackitProtocol,
   retry: Retry.Retry,
@@ -1205,8 +604,8 @@ export const listCustomRuleGroup: API.OperationMethod<
   ListCustomRuleGroupError,
   StackitOpContext
 > = /*@__PURE__*/ API.make(() => ({
-  input: ListCustomRuleGroupRequest,
-  output: ListCustomRuleGroupResponse,
+  input: __S(32, __c4, 0) as any as S.Schema<ListCustomRuleGroupRequest>,
+  output: __S(34, __c4, 2) as any as S.Schema<ListCustomRuleGroupResponse>,
   errors: [BadRequest, Forbidden, UnknownStackitError],
   protocol: StackitProtocol,
   retry: Retry.Retry,
@@ -1220,8 +619,8 @@ export const listManagedRuleSets: API.OperationMethod<
   ListManagedRuleSetsError,
   StackitOpContext
 > = /*@__PURE__*/ API.make(() => ({
-  input: ListManagedRuleSetsRequest,
-  output: ListManagedRuleSetResponse,
+  input: __S(40, __c5, 0) as any as S.Schema<ListManagedRuleSetsRequest>,
+  output: __S(43, __c5, 3) as any as S.Schema<ListManagedRuleSetResponse>,
   errors: [BadRequest, Forbidden, UnknownStackitError],
   protocol: StackitProtocol,
   retry: Retry.Retry,
@@ -1235,8 +634,8 @@ export const listWAF: API.OperationMethod<
   ListWAFError,
   StackitOpContext
 > = /*@__PURE__*/ API.make(() => ({
-  input: ListWAFRequest,
-  output: ListWAFResponse,
+  input: __S(48, __c6, 0) as any as S.Schema<ListWAFRequest>,
+  output: __S(50, __c6, 2) as any as S.Schema<ListWAFResponse>,
   errors: [BadRequest, Forbidden, UnknownStackitError],
   protocol: StackitProtocol,
   retry: Retry.Retry,
@@ -1250,8 +649,8 @@ export const patchManagedRuleSet: API.OperationMethod<
   PatchManagedRuleSetError,
   StackitOpContext
 > = /*@__PURE__*/ API.make(() => ({
-  input: PatchManagedRuleSetRequest,
-  output: GetManagedRuleSetResponse,
+  input: __S(60, __c7, 4) as any as S.Schema<PatchManagedRuleSetRequest>,
+  output: __S(132, __c16, 4) as any as S.Schema<GetManagedRuleSetResponse>,
   errors: [BadRequest, Forbidden, NotFound, UnknownStackitError],
   protocol: StackitProtocol,
   retry: Retry.Retry,
@@ -1265,8 +664,8 @@ export const updateCustomRuleGroup: API.OperationMethod<
   UpdateCustomRuleGroupError,
   StackitOpContext
 > = /*@__PURE__*/ API.make(() => ({
-  input: UpdateCustomRuleGroupRequest,
-  output: GetCustomRuleGroupResponse,
+  input: __S(64, __c8, 0) as any as S.Schema<UpdateCustomRuleGroupRequest>,
+  output: __S(95, __c11, 7) as any as S.Schema<GetCustomRuleGroupResponse>,
   errors: [BadRequest, Forbidden, UnknownStackitError],
   protocol: StackitProtocol,
   retry: Retry.Retry,
@@ -1280,9 +679,570 @@ export const updateWAF: API.OperationMethod<
   UpdateWAFError,
   StackitOpContext
 > = /*@__PURE__*/ API.make(() => ({
-  input: UpdateWAFRequest,
-  output: GetWAFResponse,
+  input: __S(72, __c9, 0) as any as S.Schema<UpdateWAFRequest>,
+  output: __S(148, __c18, 4) as any as S.Schema<GetWAFResponse>,
   errors: [BadRequest, Forbidden, Conflict, UnknownStackitError],
   protocol: StackitProtocol,
   retry: Retry.Retry,
 }));
+
+// Schema builders: each runs one schema initializer, on that schema's first use.
+function __c0(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          projectId: S.String.pipe(T.Label()),
+          region: S.String.pipe(T.Label()),
+          name: S.String.pipe(T.Label()),
+        }).pipe(
+          T.Http({
+            method: "GET",
+            uri: "/v1/projects/{projectId}/regions/{region}/custom-rule-groups/{name}",
+            code: 200,
+            baseUrl: "https://alb-waf.api.stackit.cloud",
+          }),
+        ),
+      ).annotate({ identifier: "GetCustomRuleGroupRequest" });
+  }
+}
+function __c1(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          projectId: S.String.pipe(T.Label()),
+          region: S.String.pipe(T.Label()),
+          name: S.String.pipe(T.Label()),
+        }).pipe(
+          T.Http({
+            method: "GET",
+            uri: "/v1/projects/{projectId}/regions/{region}/managed-rule-sets/{name}",
+            code: 200,
+            baseUrl: "https://alb-waf.api.stackit.cloud",
+          }),
+        ),
+      ).annotate({ identifier: "GetManagedRuleSetRequest" });
+  }
+}
+function __c2(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          projectId: S.String.pipe(T.Label()),
+          region: S.String.pipe(T.Label()),
+        }).pipe(
+          T.Http({
+            method: "GET",
+            uri: "/v1/projects/{projectId}/regions/{region}/quotas",
+            code: 200,
+            baseUrl: "https://alb-waf.api.stackit.cloud",
+          }),
+        ),
+      ).annotate({ identifier: "GetQuotaRequest" });
+    case 1:
+      return S.suspend(() =>
+        S.Struct({
+          limit: S.optional(S.Number),
+          usage: S.optional(S.Number),
+        }),
+      ).annotate({ identifier: "CRGConfigQuota" });
+    case 2:
+      return S.suspend(() =>
+        S.Struct({
+          customRuleGroup: __S(17, __c2, 1),
+          managedRuleSet: __S(17, __c2, 1),
+          webApplicationFirewall: __S(17, __c2, 1),
+        }),
+      ).annotate({ identifier: "Quotas" });
+    case 3:
+      return S.suspend(() =>
+        S.Struct({
+          projectId: S.optional(S.String),
+          quotas: __S(18, __c2, 2),
+          region: S.optional(S.String),
+        }),
+      ).annotate({ identifier: "GetQuotaResponse" });
+  }
+}
+function __c3(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          projectId: S.String.pipe(T.Label()),
+          region: S.String.pipe(T.Label()),
+          name: S.String.pipe(T.Label()),
+        }).pipe(
+          T.Http({
+            method: "GET",
+            uri: "/v1/projects/{projectId}/regions/{region}/wafs/{name}",
+            code: 200,
+            baseUrl: "https://alb-waf.api.stackit.cloud",
+          }),
+        ),
+      ).annotate({ identifier: "GetWAFRequest" });
+  }
+}
+function __c4(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          projectId: S.String.pipe(T.Label()),
+          region: S.String.pipe(T.Label()),
+          pageSize: S.optional(S.String.pipe(T.Query())),
+          pageId: S.optional(S.String.pipe(T.Query())),
+        }).pipe(
+          T.Http({
+            method: "GET",
+            uri: "/v1/projects/{projectId}/regions/{region}/custom-rule-groups",
+            code: 200,
+            baseUrl: "https://alb-waf.api.stackit.cloud",
+          }),
+        ),
+      ).annotate({ identifier: "ListCustomRuleGroupRequest" });
+    case 1:
+      return S.Array(__S(95, __c11, 7));
+    case 2:
+      return S.suspend(() =>
+        S.Struct({
+          items: S.optional(__S(33, __c4, 1)),
+          nextPageId: S.optional(S.String),
+        }),
+      ).annotate({ identifier: "ListCustomRuleGroupResponse" });
+  }
+}
+function __c5(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          projectId: S.String.pipe(T.Label()),
+          region: S.String.pipe(T.Label()),
+          pageSize: S.optional(S.String.pipe(T.Query())),
+          pageId: S.optional(S.String.pipe(T.Query())),
+        }).pipe(
+          T.Http({
+            method: "GET",
+            uri: "/v1/projects/{projectId}/regions/{region}/managed-rule-sets",
+            code: 200,
+            baseUrl: "https://alb-waf.api.stackit.cloud",
+          }),
+        ),
+      ).annotate({ identifier: "ListManagedRuleSetsRequest" });
+    case 1:
+      return S.suspend(() =>
+        S.Struct({
+          name: S.String,
+          type: S.String,
+          usage: S.optional(__S(104, __c13, 0)),
+          version: S.String,
+        }),
+      ).annotate({ identifier: "GetLimitedManagedRuleSetResponse" });
+    case 2:
+      return S.Array(__S(41, __c5, 1));
+    case 3:
+      return S.suspend(() =>
+        S.Struct({
+          items: S.optional(__S(42, __c5, 2)),
+          nextPageId: S.optional(S.String),
+        }),
+      ).annotate({ identifier: "ListManagedRuleSetResponse" });
+  }
+}
+function __c6(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          projectId: S.String.pipe(T.Label()),
+          region: S.String.pipe(T.Label()),
+          pageSize: S.optional(S.String.pipe(T.Query())),
+          pageId: S.optional(S.String.pipe(T.Query())),
+        }).pipe(
+          T.Http({
+            method: "GET",
+            uri: "/v1/projects/{projectId}/regions/{region}/wafs",
+            code: 200,
+            baseUrl: "https://alb-waf.api.stackit.cloud",
+          }),
+        ),
+      ).annotate({ identifier: "ListWAFRequest" });
+    case 1:
+      return S.Array(__S(148, __c18, 4));
+    case 2:
+      return S.suspend(() =>
+        S.Struct({
+          items: S.optional(__S(49, __c6, 1)),
+          nextPageId: S.optional(S.String),
+        }),
+      ).annotate({ identifier: "ListWAFResponse" });
+  }
+}
+function __c7(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          mode: S.optional(S.String),
+        }),
+      ).annotate({ identifier: "PatchMRSRule" });
+    case 1:
+      return S.Record(S.String, __S(56, __c7, 0));
+    case 2:
+      return S.suspend(() =>
+        S.Struct({
+          rules: __S(57, __c7, 1),
+        }),
+      ).annotate({ identifier: "PatchMRSRuleGroup" });
+    case 3:
+      return S.Record(S.String, __S(58, __c7, 2));
+    case 4:
+      return S.suspend(() =>
+        S.Struct({
+          projectId: S.String.pipe(T.Label()),
+          region: S.String.pipe(T.Label()),
+          name: S.String.pipe(T.Label()),
+          groups: __S(59, __c7, 3),
+        }).pipe(
+          T.Http({
+            method: "PATCH",
+            uri: "/v1/projects/{projectId}/regions/{region}/managed-rule-sets/{name}",
+            code: 200,
+            baseUrl: "https://alb-waf.api.stackit.cloud",
+          }),
+        ),
+      ).annotate({ identifier: "PatchManagedRuleSetRequest" });
+  }
+}
+function __c8(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          projectId: S.String.pipe(T.Label()),
+          region: S.String.pipe(T.Label()),
+          name: S.String.pipe(T.Label()),
+          rules: __S(98, __c12, 2),
+        }).pipe(
+          T.Http({
+            method: "PUT",
+            uri: "/v1/projects/{projectId}/regions/{region}/custom-rule-groups/{name}",
+            code: 200,
+            baseUrl: "https://alb-waf.api.stackit.cloud",
+          }),
+        ),
+      ).annotate({ identifier: "UpdateCustomRuleGroupRequest" });
+  }
+}
+function __c9(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          projectId: S.String.pipe(T.Label()),
+          region: S.String.pipe(T.Label()),
+          name: S.String.pipe(T.Label()),
+          customRuleGroupName: S.optional(S.String),
+          labels: S.optional(__S(144, __c18, 0)),
+          managedRuleSetName: S.optional(S.String),
+        }).pipe(
+          T.Http({
+            method: "PUT",
+            uri: "/v1/projects/{projectId}/regions/{region}/wafs/{name}",
+            code: 200,
+            baseUrl: "https://alb-waf.api.stackit.cloud",
+          }),
+        ),
+      ).annotate({ identifier: "UpdateWAFRequest" });
+  }
+}
+function __c10(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          projectId: S.String.pipe(T.Label()),
+          region: S.String.pipe(T.Label()),
+          name: S.String,
+          rules: __S(98, __c12, 2),
+        }).pipe(
+          T.Http({
+            method: "POST",
+            uri: "/v1/projects/{projectId}/regions/{region}/custom-rule-groups",
+            code: 200,
+            baseUrl: "https://alb-waf.api.stackit.cloud",
+          }),
+        ),
+      ).annotate({ identifier: "CreateCustomRuleGroupRequest" });
+  }
+}
+function __c11(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          type: S.String,
+          value: S.optional(S.String),
+        }),
+      ).annotate({ identifier: "ConditionOperator" });
+    case 1:
+      return S.Array(S.String);
+    case 2:
+      return S.suspend(() =>
+        S.Struct({
+          operator: __S(88, __c11, 0),
+          transformations: S.optional(__S(89, __c11, 1)),
+          variable: __S(88, __c11, 0),
+        }),
+      ).annotate({ identifier: "Condition" });
+    case 3:
+      return S.Array(__S(90, __c11, 2));
+    case 4:
+      return S.suspend(() =>
+        S.Struct({
+          action: S.String,
+          log: S.Boolean,
+          logMsg: S.optional(S.String),
+          severity: S.String,
+        }),
+      ).annotate({ identifier: "GetBehavior" });
+    case 5:
+      return S.suspend(() =>
+        S.Struct({
+          behavior: __S(92, __c11, 4),
+          conditions: __S(91, __c11, 3),
+          description: S.optional(S.String),
+          id: S.Number,
+        }),
+      ).annotate({ identifier: "GetCustomRule" });
+    case 6:
+      return S.Array(__S(93, __c11, 5));
+    case 7:
+      return S.suspend(() =>
+        S.Struct({
+          name: S.String,
+          rules: __S(94, __c11, 6),
+          usage: S.optional(__S(104, __c13, 0)),
+        }),
+      ).annotate({ identifier: "GetCustomRuleGroupResponse" });
+  }
+}
+function __c12(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          action: S.String,
+          log: S.optional(S.Boolean),
+          logMsg: S.optional(S.String),
+        }),
+      ).annotate({ identifier: "Behavior" });
+    case 1:
+      return S.suspend(() =>
+        S.Struct({
+          behavior: __S(96, __c12, 0),
+          conditions: __S(91, __c11, 3),
+          description: S.optional(S.String),
+        }),
+      ).annotate({ identifier: "CreateCustomRule" });
+    case 2:
+      return S.Array(__S(97, __c12, 1));
+  }
+}
+function __c13(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          count: S.optional(S.Number),
+          items: S.optional(__S(112, __c14, 0)),
+        }),
+      ).annotate({ identifier: "CRGUsage" });
+  }
+}
+function __c14(j: number): any {
+  switch (j) {
+    case 0:
+      return S.Array(S.String);
+  }
+}
+function __c15(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          projectId: S.String.pipe(T.Label()),
+          region: S.String.pipe(T.Label()),
+          name: S.String,
+          type: S.String,
+        }).pipe(
+          T.Http({
+            method: "POST",
+            uri: "/v1/projects/{projectId}/regions/{region}/managed-rule-sets",
+            code: 200,
+            baseUrl: "https://alb-waf.api.stackit.cloud",
+          }),
+        ),
+      ).annotate({ identifier: "CreateManagedRuleSetRequest" });
+  }
+}
+function __c16(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          description: S.String,
+          mode: S.String,
+          severity: S.String,
+        }),
+      ).annotate({ identifier: "MRSRule" });
+    case 1:
+      return S.Record(S.String, __S(128, __c16, 0));
+    case 2:
+      return S.suspend(() =>
+        S.Struct({
+          description: S.String,
+          groupName: S.String,
+          rules: S.optional(__S(129, __c16, 1)),
+        }),
+      ).annotate({ identifier: "MRSRuleGroup" });
+    case 3:
+      return S.Record(S.String, __S(130, __c16, 2));
+    case 4:
+      return S.suspend(() =>
+        S.Struct({
+          groups: S.optional(__S(131, __c16, 3)),
+          name: S.String,
+          type: S.String,
+          usage: S.optional(__S(104, __c13, 0)),
+          version: S.String,
+        }),
+      ).annotate({ identifier: "GetManagedRuleSetResponse" });
+  }
+}
+function __c17(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          projectId: S.String.pipe(T.Label()),
+          region: S.String.pipe(T.Label()),
+          customRuleGroupName: S.optional(S.String),
+          labels: S.optional(__S(144, __c18, 0)),
+          managedRuleSetName: S.optional(S.String),
+          name: S.String,
+        }).pipe(
+          T.Http({
+            method: "POST",
+            uri: "/v1/projects/{projectId}/regions/{region}/wafs",
+            code: 200,
+            baseUrl: "https://alb-waf.api.stackit.cloud",
+          }),
+        ),
+      ).annotate({ identifier: "CreateWAFRequest" });
+  }
+}
+function __c18(j: number): any {
+  switch (j) {
+    case 0:
+      return S.Record(S.String, S.String);
+    case 1:
+      return S.suspend(() =>
+        S.Struct({
+          listenerNames: S.optional(__S(112, __c14, 0)),
+          loadBalancerName: S.String,
+        }),
+      ).annotate({ identifier: "WAFUsageItem" });
+    case 2:
+      return S.Array(__S(145, __c18, 1));
+    case 3:
+      return S.suspend(() =>
+        S.Struct({
+          count: S.optional(S.Number),
+          items: S.optional(__S(146, __c18, 2)),
+        }),
+      ).annotate({ identifier: "WAFUsage" });
+    case 4:
+      return S.suspend(() =>
+        S.Struct({
+          customRuleGroupName: S.optional(S.String),
+          labels: S.optional(__S(144, __c18, 0)),
+          managedRuleSetName: S.optional(S.String),
+          name: S.String,
+          usage: S.optional(__S(147, __c18, 3)),
+        }),
+      ).annotate({ identifier: "GetWAFResponse" });
+  }
+}
+function __c19(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          projectId: S.String.pipe(T.Label()),
+          region: S.String.pipe(T.Label()),
+          name: S.String.pipe(T.Label()),
+        }).pipe(
+          T.Http({
+            method: "DELETE",
+            uri: "/v1/projects/{projectId}/regions/{region}/custom-rule-groups/{name}",
+            code: 200,
+            baseUrl: "https://alb-waf.api.stackit.cloud",
+          }),
+        ),
+      ).annotate({ identifier: "DeleteCustomRuleGroupRequest" });
+  }
+}
+function __c20(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() => S.Unknown.pipe(T.RawResponseRoot())).annotate({
+        identifier: "DeleteCustomRuleGroupResponse2",
+      });
+  }
+}
+function __c21(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          projectId: S.String.pipe(T.Label()),
+          region: S.String.pipe(T.Label()),
+          name: S.String.pipe(T.Label()),
+        }).pipe(
+          T.Http({
+            method: "DELETE",
+            uri: "/v1/projects/{projectId}/regions/{region}/managed-rule-sets/{name}",
+            code: 200,
+            baseUrl: "https://alb-waf.api.stackit.cloud",
+          }),
+        ),
+      ).annotate({ identifier: "DeleteManagedRuleSetRequest" });
+  }
+}
+function __c22(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          projectId: S.String.pipe(T.Label()),
+          region: S.String.pipe(T.Label()),
+          name: S.String.pipe(T.Label()),
+        }).pipe(
+          T.Http({
+            method: "DELETE",
+            uri: "/v1/projects/{projectId}/regions/{region}/wafs/{name}",
+            code: 200,
+            baseUrl: "https://alb-waf.api.stackit.cloud",
+          }),
+        ),
+      ).annotate({ identifier: "DeleteWAFRequest" });
+  }
+}
+// Schema table: entry i is schema j of builder f, made on first reach.
+function __S(i: number, f: (j: number) => unknown, j: number): any {
+  return (__s[i] ??= __L.at(f, j));
+}