@distilled.cloud/stackit 1.0.0-rc.14 → 1.0.0-rc.16

package/src/services/secrets_manager.ts

@@ -1,12 +1,15 @@
 import * as API from "@distilled.cloud/core/api";
 import * as C from "@distilled.cloud/core/category";
 // AUTO-GENERATED by scripts/generate.ts from .generated-specs (specs/spec-mirror-stackit). Do not edit.
-import * as S from "@distilled.cloud/core/schema";
-import * as Redacted from "effect/Redacted";
+import * as S from "@distilled.cloud/core/schema-lite";
+import * as __L from "@distilled.cloud/core/schema-lite";
+import type * as Redacted from "effect/Redacted";
 import { UnknownStackitError } from "../errors.ts";
 import { StackitProtocol, type StackitOpError, type StackitOpContext } from "../protocol.ts";
 import * as Retry from "../retry.ts";
 import * as T from "../traits.ts";
+// Schema table, filled on first reach (see __S at the end).
+const __s: any[] = [];
 
 export type { StackitOpError, StackitOpContext };
 
@@ -45,34 +48,12 @@ export interface CreateACLRequest {
   /** The given IP/IP Range that is permitted to access. */
   cidr: string;
 }
-export const CreateACLRequest = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    projectId: S.String.pipe(T.Label()),
-    instanceId: S.String.pipe(T.Label()),
-    cidr: S.String,
-  }).pipe(
-    T.Http({
-      method: "POST",
-      uri: "/v1/projects/{projectId}/instances/{instanceId}/acls",
-      code: 200,
-      baseUrl: "https://secrets-manager.api.{region}stackit.cloud",
-    }),
-  ),
-).annotate({ identifier: "CreateACLRequest" }) as any as S.Schema<CreateACLRequest>;
-
 export interface ACL {
   /** The given IP/IP Range that is permitted to access. */
   cidr: string;
   /** A auto generated unique id which identifies the acl. */
   id: string;
 }
-export const ACL = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    cidr: S.String,
-    id: S.String,
-  }),
-).annotate({ identifier: "ACL" }) as any as S.Schema<ACL>;
-
 export interface CreateApproleRequest {
   /** The STACKIT portal project UUID the Secrets Manager instance is part of. */
   projectId: string;
@@ -86,24 +67,6 @@ export interface CreateApproleRequest {
   /** Is true if the approle has write access to the secrets engine. Is false for a read-only approle. */
   write?: boolean;
 }
-export const CreateApproleRequest = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    projectId: S.String.pipe(T.Label()),
-    instanceId: S.String.pipe(T.Label()),
-    description: S.optional(S.String),
-    secret_id_num_uses: S.optional(S.Number),
-    secret_id_ttl: S.optional(S.String),
-    write: S.optional(S.Boolean),
-  }).pipe(
-    T.Http({
-      method: "POST",
-      uri: "/v1/projects/{projectId}/instances/{instanceId}/approles",
-      code: 200,
-      baseUrl: "https://secrets-manager.api.{region}stackit.cloud",
-    }),
-  ),
-).annotate({ identifier: "CreateApproleRequest" }) as any as S.Schema<CreateApproleRequest>;
-
 export interface Approle {
   /** A user chosen description to differentiate between multiple approles. */
   description: string;
@@ -115,16 +78,6 @@ export interface Approle {
   /** Is true if the approle has write access to the secrets engine. Is false for a read-only approle. */
   write: boolean;
 }
-export const Approle = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    description: S.String,
-    role_id: S.String,
-    secret_id_num_uses: S.Number,
-    secret_id_ttl: S.String,
-    write: S.Boolean,
-  }),
-).annotate({ identifier: "Approle" }) as any as S.Schema<Approle>;
-
 export interface CreateApproleSecretIdRequest {
   /** The STACKIT portal project UUID the Secrets Manager instance is part of. */
   projectId: string;
@@ -135,24 +88,6 @@ export interface CreateApproleSecretIdRequest {
   /** A user chosen description to differentiate between multiple approle secrets. */
   description?: string;
 }
-export const CreateApproleSecretIdRequest = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    projectId: S.String.pipe(T.Label()),
-    instanceId: S.String.pipe(T.Label()),
-    roleId: S.String.pipe(T.Label()),
-    description: S.optional(S.String),
-  }).pipe(
-    T.Http({
-      method: "POST",
-      uri: "/v1/projects/{projectId}/instances/{instanceId}/approles/{roleId}/secretids",
-      code: 200,
-      baseUrl: "https://secrets-manager.api.{region}stackit.cloud",
-    }),
-  ),
-).annotate({
-  identifier: "CreateApproleSecretIdRequest",
-}) as any as S.Schema<CreateApproleSecretIdRequest>;
-
 export interface ApproleSecret {
   /** A user chosen description to differentiate between multiple approle secrets. */
   description: string;
@@ -164,16 +99,6 @@ export interface ApproleSecret {
   /** Accessor used for handling secrets */
   version: number;
 }
-export const ApproleSecret = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    description: S.String,
-    num_uses: S.Number,
-    secret_id: S.optional(S.String),
-    ttl: S.String,
-    version: S.Number,
-  }),
-).annotate({ identifier: "ApproleSecret" }) as any as S.Schema<ApproleSecret>;
-
 /** The key for secret encryption and decryption. */
 export interface KmsKeyPayload {
   /** The key UUID. */
@@ -185,15 +110,6 @@ export interface KmsKeyPayload {
   /** The Service account email that will consume the key. Must be in the same project as the Secrets Manager instance. */
   serviceAccountEmail: string;
 }
-export const KmsKeyPayload = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    keyId: S.String,
-    keyRingId: S.String,
-    keyVersion: S.Number,
-    serviceAccountEmail: S.String,
-  }),
-).annotate({ identifier: "KmsKeyPayload" }) as any as S.Schema<KmsKeyPayload>;
-
 export interface CreateInstanceRequest {
   /** The STACKIT portal project UUID the Secrets Manager instance is part of. */
   projectId: string;
@@ -201,21 +117,6 @@ export interface CreateInstanceRequest {
   /** A user chosen name to distinguish multiple secrets manager instances. */
   name: string;
 }
-export const CreateInstanceRequest = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    projectId: S.String.pipe(T.Label()),
-    kmsKey: S.optional(KmsKeyPayload),
-    name: S.String,
-  }).pipe(
-    T.Http({
-      method: "POST",
-      uri: "/v1/projects/{projectId}/instances",
-      code: 200,
-      baseUrl: "https://secrets-manager.api.{region}stackit.cloud",
-    }),
-  ),
-).annotate({ identifier: "CreateInstanceRequest" }) as any as S.Schema<CreateInstanceRequest>;
-
 export interface Instance {
   /** The API endpoint for connecting to the secrets engine. */
   apiUrl: string;
@@ -237,22 +138,6 @@ export interface Instance {
   updateFinishedDate?: string;
   updateStartDate?: string;
 }
-export const Instance = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    apiUrl: S.String,
-    creationFinishedDate: S.optional(S.String),
-    creationStartDate: S.String,
-    id: S.String,
-    kmsKey: S.optional(KmsKeyPayload),
-    name: S.String,
-    secretCount: S.Number,
-    secretsEngine: S.String,
-    state: S.String,
-    updateFinishedDate: S.optional(S.String),
-    updateStartDate: S.optional(S.String),
-  }),
-).annotate({ identifier: "Instance" }) as any as S.Schema<Instance>;
-
 export interface CreateUserRequest {
   /** The STACKIT portal project UUID the Secrets Manager instance is part of. */
   projectId: string;
@@ -263,22 +148,6 @@ export interface CreateUserRequest {
   /** Is true if the user has write access to the secrets engine. Is false for a read-only user. */
   write: boolean;
 }
-export const CreateUserRequest = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    projectId: S.String.pipe(T.Label()),
-    instanceId: S.String.pipe(T.Label()),
-    description: S.String,
-    write: S.Boolean,
-  }).pipe(
-    T.Http({
-      method: "POST",
-      uri: "/v1/projects/{projectId}/instances/{instanceId}/users",
-      code: 200,
-      baseUrl: "https://secrets-manager.api.{region}stackit.cloud",
-    }),
-  ),
-).annotate({ identifier: "CreateUserRequest" }) as any as S.Schema<CreateUserRequest>;
-
 export interface User {
   /** A user chosen description to differentiate between multiple users. */
   description: string;
@@ -291,16 +160,6 @@ export interface User {
   /** Is true if the user has write access to the secrets engine. Is false for a read-only user. */
   write: boolean;
 }
-export const User = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    description: S.String,
-    id: S.String,
-    password: S.String.pipe(T.SensitiveValue({})),
-    username: S.String,
-    write: S.Boolean,
-  }),
-).annotate({ identifier: "User" }) as any as S.Schema<User>;
-
 export interface DeleteACLRequest {
   /** The STACKIT portal project UUID the Secrets Manager instance is part of. */
   projectId: string;
@@ -309,26 +168,7 @@ export interface DeleteACLRequest {
   /** The acl UUID of the Secrets Manager instance. */
   aclId: string;
 }
-export const DeleteACLRequest = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    projectId: S.String.pipe(T.Label()),
-    instanceId: S.String.pipe(T.Label()),
-    aclId: S.String.pipe(T.Label()),
-  }).pipe(
-    T.Http({
-      method: "DELETE",
-      uri: "/v1/projects/{projectId}/instances/{instanceId}/acls/{aclId}",
-      code: 200,
-      baseUrl: "https://secrets-manager.api.{region}stackit.cloud",
-    }),
-  ),
-).annotate({ identifier: "DeleteACLRequest" }) as any as S.Schema<DeleteACLRequest>;
-
 export interface DeleteACLResponse {}
-export const DeleteACLResponse = /*@__PURE__*/ S.suspend(() => S.Struct({})).annotate({
-  identifier: "DeleteACLResponse",
-}) as any as S.Schema<DeleteACLResponse>;
-
 export interface DeleteApproleRequest {
   /** The STACKIT portal project UUID the Secrets Manager instance is part of. */
   projectId: string;
@@ -337,26 +177,7 @@ export interface DeleteApproleRequest {
   /** The approle with permissions on the Secrets Manager instance. */
   roleId: string;
 }
-export const DeleteApproleRequest = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    projectId: S.String.pipe(T.Label()),
-    instanceId: S.String.pipe(T.Label()),
-    roleId: S.String.pipe(T.Label()),
-  }).pipe(
-    T.Http({
-      method: "DELETE",
-      uri: "/v1/projects/{projectId}/instances/{instanceId}/approles/{roleId}",
-      code: 200,
-      baseUrl: "https://secrets-manager.api.{region}stackit.cloud",
-    }),
-  ),
-).annotate({ identifier: "DeleteApproleRequest" }) as any as S.Schema<DeleteApproleRequest>;
-
 export interface DeleteApproleResponse {}
-export const DeleteApproleResponse = /*@__PURE__*/ S.suspend(() => S.Struct({})).annotate({
-  identifier: "DeleteApproleResponse",
-}) as any as S.Schema<DeleteApproleResponse>;
-
 export interface DeleteApproleSecretIdRequest {
   /** The STACKIT portal project UUID the Secrets Manager instance is part of. */
   projectId: string;
@@ -367,54 +188,14 @@ export interface DeleteApproleSecretIdRequest {
   /** The version of the secret id. */
   secretIdVersion: number;
 }
-export const DeleteApproleSecretIdRequest = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    projectId: S.String.pipe(T.Label()),
-    instanceId: S.String.pipe(T.Label()),
-    roleId: S.String.pipe(T.Label()),
-    secretIdVersion: S.Number.pipe(T.Label()),
-  }).pipe(
-    T.Http({
-      method: "DELETE",
-      uri: "/v1/projects/{projectId}/instances/{instanceId}/approles/{roleId}/secretids/{secretIdVersion}",
-      code: 200,
-      baseUrl: "https://secrets-manager.api.{region}stackit.cloud",
-    }),
-  ),
-).annotate({
-  identifier: "DeleteApproleSecretIdRequest",
-}) as any as S.Schema<DeleteApproleSecretIdRequest>;
-
 export interface DeleteApproleSecretIdResponse {}
-export const DeleteApproleSecretIdResponse = /*@__PURE__*/ S.suspend(() => S.Struct({})).annotate({
-  identifier: "DeleteApproleSecretIdResponse",
-}) as any as S.Schema<DeleteApproleSecretIdResponse>;
-
 export interface DeleteInstanceRequest {
   /** The STACKIT portal project UUID the Secrets Manager instance is part of. */
   projectId: string;
   /** The Secrets Manager instance UUID. */
   instanceId: string;
 }
-export const DeleteInstanceRequest = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    projectId: S.String.pipe(T.Label()),
-    instanceId: S.String.pipe(T.Label()),
-  }).pipe(
-    T.Http({
-      method: "DELETE",
-      uri: "/v1/projects/{projectId}/instances/{instanceId}",
-      code: 200,
-      baseUrl: "https://secrets-manager.api.{region}stackit.cloud",
-    }),
-  ),
-).annotate({ identifier: "DeleteInstanceRequest" }) as any as S.Schema<DeleteInstanceRequest>;
-
 export interface DeleteInstanceResponse {}
-export const DeleteInstanceResponse = /*@__PURE__*/ S.suspend(() => S.Struct({})).annotate({
-  identifier: "DeleteInstanceResponse",
-}) as any as S.Schema<DeleteInstanceResponse>;
-
 export interface DeleteUserRequest {
   /** The STACKIT portal project UUID the Secrets Manager instance is part of. */
   projectId: string;
@@ -423,26 +204,7 @@ export interface DeleteUserRequest {
   /** The user UUID with permissions on the Secrets Manager instance. */
   userId: string;
 }
-export const DeleteUserRequest = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    projectId: S.String.pipe(T.Label()),
-    instanceId: S.String.pipe(T.Label()),
-    userId: S.String.pipe(T.Label()),
-  }).pipe(
-    T.Http({
-      method: "DELETE",
-      uri: "/v1/projects/{projectId}/instances/{instanceId}/users/{userId}",
-      code: 200,
-      baseUrl: "https://secrets-manager.api.{region}stackit.cloud",
-    }),
-  ),
-).annotate({ identifier: "DeleteUserRequest" }) as any as S.Schema<DeleteUserRequest>;
-
 export interface DeleteUserResponse {}
-export const DeleteUserResponse = /*@__PURE__*/ S.suspend(() => S.Struct({})).annotate({
-  identifier: "DeleteUserResponse",
-}) as any as S.Schema<DeleteUserResponse>;
-
 export interface GetACLRequest {
   /** The STACKIT portal project UUID the Secrets Manager instance is part of. */
   projectId: string;
@@ -451,21 +213,6 @@ export interface GetACLRequest {
   /** The acl UUID of the Secrets Manager instance. */
   aclId: string;
 }
-export const GetACLRequest = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    projectId: S.String.pipe(T.Label()),
-    instanceId: S.String.pipe(T.Label()),
-    aclId: S.String.pipe(T.Label()),
-  }).pipe(
-    T.Http({
-      method: "GET",
-      uri: "/v1/projects/{projectId}/instances/{instanceId}/acls/{aclId}",
-      code: 200,
-      baseUrl: "https://secrets-manager.api.{region}stackit.cloud",
-    }),
-  ),
-).annotate({ identifier: "GetACLRequest" }) as any as S.Schema<GetACLRequest>;
-
 export interface GetApproleRequest {
   /** The STACKIT portal project UUID the Secrets Manager instance is part of. */
   projectId: string;
@@ -474,55 +221,16 @@ export interface GetApproleRequest {
   /** The approle with permissions on the Secrets Manager instance. */
   roleId: string;
 }
-export const GetApproleRequest = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    projectId: S.String.pipe(T.Label()),
-    instanceId: S.String.pipe(T.Label()),
-    roleId: S.String.pipe(T.Label()),
-  }).pipe(
-    T.Http({
-      method: "GET",
-      uri: "/v1/projects/{projectId}/instances/{instanceId}/approles/{roleId}",
-      code: 200,
-      baseUrl: "https://secrets-manager.api.{region}stackit.cloud",
-    }),
-  ),
-).annotate({ identifier: "GetApproleRequest" }) as any as S.Schema<GetApproleRequest>;
-
 export interface GetApprolesRequest {
   /** The STACKIT portal project UUID the Secrets Manager instance is part of. */
   projectId: string;
   /** The Secrets Manager instance UUID. */
   instanceId: string;
 }
-export const GetApprolesRequest = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    projectId: S.String.pipe(T.Label()),
-    instanceId: S.String.pipe(T.Label()),
-  }).pipe(
-    T.Http({
-      method: "GET",
-      uri: "/v1/projects/{projectId}/instances/{instanceId}/approles",
-      code: 200,
-      baseUrl: "https://secrets-manager.api.{region}stackit.cloud",
-    }),
-  ),
-).annotate({ identifier: "GetApprolesRequest" }) as any as S.Schema<GetApprolesRequest>;
-
 export type ApproleListApprolesList = Array<Approle>;
-export const ApproleListApprolesList = /*@__PURE__*/ S.Array(
-  Approle,
-) as any as S.Schema<ApproleListApprolesList>;
-
 export interface ApproleList {
   approles: ApproleListApprolesList;
 }
-export const ApproleList = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    approles: ApproleListApprolesList,
-  }),
-).annotate({ identifier: "ApproleList" }) as any as S.Schema<ApproleList>;
-
 export interface GetApproleSecretIdRequest {
   /** The STACKIT portal project UUID the Secrets Manager instance is part of. */
   projectId: string;
@@ -533,44 +241,12 @@ export interface GetApproleSecretIdRequest {
   /** The version of the secret id. */
   secretIdVersion: number;
 }
-export const GetApproleSecretIdRequest = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    projectId: S.String.pipe(T.Label()),
-    instanceId: S.String.pipe(T.Label()),
-    roleId: S.String.pipe(T.Label()),
-    secretIdVersion: S.Number.pipe(T.Label()),
-  }).pipe(
-    T.Http({
-      method: "GET",
-      uri: "/v1/projects/{projectId}/instances/{instanceId}/approles/{roleId}/secretids/{secretIdVersion}",
-      code: 200,
-      baseUrl: "https://secrets-manager.api.{region}stackit.cloud",
-    }),
-  ),
-).annotate({
-  identifier: "GetApproleSecretIdRequest",
-}) as any as S.Schema<GetApproleSecretIdRequest>;
-
 export interface GetInstanceRequest {
   /** The STACKIT portal project UUID the Secrets Manager instance is part of. */
   projectId: string;
   /** The Secrets Manager instance UUID. */
   instanceId: string;
 }
-export const GetInstanceRequest = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    projectId: S.String.pipe(T.Label()),
-    instanceId: S.String.pipe(T.Label()),
-  }).pipe(
-    T.Http({
-      method: "GET",
-      uri: "/v1/projects/{projectId}/instances/{instanceId}",
-      code: 200,
-      baseUrl: "https://secrets-manager.api.{region}stackit.cloud",
-    }),
-  ),
-).annotate({ identifier: "GetInstanceRequest" }) as any as S.Schema<GetInstanceRequest>;
-
 export interface GetUserRequest {
   /** The STACKIT portal project UUID the Secrets Manager instance is part of. */
   projectId: string;
@@ -579,55 +255,16 @@ export interface GetUserRequest {
   /** The user UUID with permissions on the Secrets Manager instance. */
   userId: string;
 }
-export const GetUserRequest = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    projectId: S.String.pipe(T.Label()),
-    instanceId: S.String.pipe(T.Label()),
-    userId: S.String.pipe(T.Label()),
-  }).pipe(
-    T.Http({
-      method: "GET",
-      uri: "/v1/projects/{projectId}/instances/{instanceId}/users/{userId}",
-      code: 200,
-      baseUrl: "https://secrets-manager.api.{region}stackit.cloud",
-    }),
-  ),
-).annotate({ identifier: "GetUserRequest" }) as any as S.Schema<GetUserRequest>;
-
 export interface ListACLsRequest {
   /** The STACKIT portal project UUID the Secrets Manager instance is part of. */
   projectId: string;
   /** The Secrets Manager instance UUID. */
   instanceId: string;
 }
-export const ListACLsRequest = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    projectId: S.String.pipe(T.Label()),
-    instanceId: S.String.pipe(T.Label()),
-  }).pipe(
-    T.Http({
-      method: "GET",
-      uri: "/v1/projects/{projectId}/instances/{instanceId}/acls",
-      code: 200,
-      baseUrl: "https://secrets-manager.api.{region}stackit.cloud",
-    }),
-  ),
-).annotate({ identifier: "ListACLsRequest" }) as any as S.Schema<ListACLsRequest>;
-
 export type ListACLsResponseAclsList = Array<ACL>;
-export const ListACLsResponseAclsList = /*@__PURE__*/ S.Array(
-  ACL,
-) as any as S.Schema<ListACLsResponseAclsList>;
-
 export interface ListACLsResponse {
   acls: ListACLsResponseAclsList;
 }
-export const ListACLsResponse = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    acls: ListACLsResponseAclsList,
-  }),
-).annotate({ identifier: "ListACLsResponse" }) as any as S.Schema<ListACLsResponse>;
-
 export interface ListApproleSecretIdsRequest {
   /** The STACKIT portal project UUID the Secrets Manager instance is part of. */
   projectId: string;
@@ -636,102 +273,28 @@ export interface ListApproleSecretIdsRequest {
   /** The approle with permissions on the Secrets Manager instance. */
   roleId: string;
 }
-export const ListApproleSecretIdsRequest = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    projectId: S.String.pipe(T.Label()),
-    instanceId: S.String.pipe(T.Label()),
-    roleId: S.String.pipe(T.Label()),
-  }).pipe(
-    T.Http({
-      method: "GET",
-      uri: "/v1/projects/{projectId}/instances/{instanceId}/approles/{roleId}/secretids",
-      code: 200,
-      baseUrl: "https://secrets-manager.api.{region}stackit.cloud",
-    }),
-  ),
-).annotate({
-  identifier: "ListApproleSecretIdsRequest",
-}) as any as S.Schema<ListApproleSecretIdsRequest>;
-
 export type ApproleSecretListSecretIdsList = Array<ApproleSecret>;
-export const ApproleSecretListSecretIdsList = /*@__PURE__*/ S.Array(
-  ApproleSecret,
-) as any as S.Schema<ApproleSecretListSecretIdsList>;
-
 export interface ApproleSecretList {
   secretIds: ApproleSecretListSecretIdsList;
 }
-export const ApproleSecretList = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    secretIds: ApproleSecretListSecretIdsList,
-  }),
-).annotate({ identifier: "ApproleSecretList" }) as any as S.Schema<ApproleSecretList>;
-
 export interface ListInstancesRequest {
   /** The STACKIT portal project UUID the Secrets Manager instance is part of. */
   projectId: string;
 }
-export const ListInstancesRequest = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    projectId: S.String.pipe(T.Label()),
-  }).pipe(
-    T.Http({
-      method: "GET",
-      uri: "/v1/projects/{projectId}/instances",
-      code: 200,
-      baseUrl: "https://secrets-manager.api.{region}stackit.cloud",
-    }),
-  ),
-).annotate({ identifier: "ListInstancesRequest" }) as any as S.Schema<ListInstancesRequest>;
-
 export type ListInstancesResponseInstancesList = Array<Instance>;
-export const ListInstancesResponseInstancesList = /*@__PURE__*/ S.Array(
-  Instance,
-) as any as S.Schema<ListInstancesResponseInstancesList>;
-
 export interface ListInstancesResponse {
   instances: ListInstancesResponseInstancesList;
 }
-export const ListInstancesResponse = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    instances: ListInstancesResponseInstancesList,
-  }),
-).annotate({ identifier: "ListInstancesResponse" }) as any as S.Schema<ListInstancesResponse>;
-
 export interface ListUsersRequest {
   /** The STACKIT portal project UUID the Secrets Manager instance is part of. */
   projectId: string;
   /** The Secrets Manager instance UUID. */
   instanceId: string;
 }
-export const ListUsersRequest = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    projectId: S.String.pipe(T.Label()),
-    instanceId: S.String.pipe(T.Label()),
-  }).pipe(
-    T.Http({
-      method: "GET",
-      uri: "/v1/projects/{projectId}/instances/{instanceId}/users",
-      code: 200,
-      baseUrl: "https://secrets-manager.api.{region}stackit.cloud",
-    }),
-  ),
-).annotate({ identifier: "ListUsersRequest" }) as any as S.Schema<ListUsersRequest>;
-
 export type ListUsersResponseUsersList = Array<User>;
-export const ListUsersResponseUsersList = /*@__PURE__*/ S.Array(
-  User,
-) as any as S.Schema<ListUsersResponseUsersList>;
-
 export interface ListUsersResponse {
   users: ListUsersResponseUsersList;
 }
-export const ListUsersResponse = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    users: ListUsersResponseUsersList,
-  }),
-).annotate({ identifier: "ListUsersResponse" }) as any as S.Schema<ListUsersResponse>;
-
 export interface UpdateACLRequest {
   /** The STACKIT portal project UUID the Secrets Manager instance is part of. */
   projectId: string;
@@ -742,42 +305,12 @@ export interface UpdateACLRequest {
   /** The given IP/IP Range that is permitted to access. */
   cidr: string;
 }
-export const UpdateACLRequest = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    projectId: S.String.pipe(T.Label()),
-    instanceId: S.String.pipe(T.Label()),
-    aclId: S.String.pipe(T.Label()),
-    cidr: S.String,
-  }).pipe(
-    T.Http({
-      method: "PUT",
-      uri: "/v1/projects/{projectId}/instances/{instanceId}/acls/{aclId}",
-      code: 200,
-      baseUrl: "https://secrets-manager.api.{region}stackit.cloud",
-    }),
-  ),
-).annotate({ identifier: "UpdateACLRequest" }) as any as S.Schema<UpdateACLRequest>;
-
 export interface UpdateACLResponse {}
-export const UpdateACLResponse = /*@__PURE__*/ S.suspend(() => S.Struct({})).annotate({
-  identifier: "UpdateACLResponse",
-}) as any as S.Schema<UpdateACLResponse>;
-
 export interface UpdateACLPayload {
   /** The given IP/IP Range that is permitted to access. */
   cidr: string;
 }
-export const UpdateACLPayload = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    cidr: S.String,
-  }),
-).annotate({ identifier: "UpdateACLPayload" }) as any as S.Schema<UpdateACLPayload>;
-
 export type UpdateACLsRequestCidrsList = Array<UpdateACLPayload>;
-export const UpdateACLsRequestCidrsList = /*@__PURE__*/ S.Array(
-  UpdateACLPayload,
-) as any as S.Schema<UpdateACLsRequestCidrsList>;
-
 export interface UpdateACLsRequest {
   /** The STACKIT portal project UUID the Secrets Manager instance is part of. */
   projectId: string;
@@ -785,26 +318,7 @@ export interface UpdateACLsRequest {
   instanceId: string;
   cidrs?: UpdateACLsRequestCidrsList;
 }
-export const UpdateACLsRequest = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    projectId: S.String.pipe(T.Label()),
-    instanceId: S.String.pipe(T.Label()),
-    cidrs: S.optional(UpdateACLsRequestCidrsList),
-  }).pipe(
-    T.Http({
-      method: "PUT",
-      uri: "/v1/projects/{projectId}/instances/{instanceId}/acls",
-      code: 200,
-      baseUrl: "https://secrets-manager.api.{region}stackit.cloud",
-    }),
-  ),
-).annotate({ identifier: "UpdateACLsRequest" }) as any as S.Schema<UpdateACLsRequest>;
-
 export interface UpdateACLsResponse {}
-export const UpdateACLsResponse = /*@__PURE__*/ S.suspend(() => S.Struct({})).annotate({
-  identifier: "UpdateACLsResponse",
-}) as any as S.Schema<UpdateACLsResponse>;
-
 export interface UpdateApproleRequest {
   /** The STACKIT portal project UUID the Secrets Manager instance is part of. */
   projectId: string;
@@ -820,25 +334,6 @@ export interface UpdateApproleRequest {
   /** Is true if the approle has write access to the secrets engine. Is false for a read-only approle. */
   write?: boolean;
 }
-export const UpdateApproleRequest = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    projectId: S.String.pipe(T.Label()),
-    instanceId: S.String.pipe(T.Label()),
-    roleId: S.String.pipe(T.Label()),
-    description: S.optional(S.String),
-    secret_id_num_uses: S.optional(S.Number),
-    secret_id_ttl: S.optional(S.String),
-    write: S.optional(S.Boolean),
-  }).pipe(
-    T.Http({
-      method: "PUT",
-      uri: "/v1/projects/{projectId}/instances/{instanceId}/approles/{roleId}",
-      code: 200,
-      baseUrl: "https://secrets-manager.api.{region}stackit.cloud",
-    }),
-  ),
-).annotate({ identifier: "UpdateApproleRequest" }) as any as S.Schema<UpdateApproleRequest>;
-
 export interface UpdateApproleSecretIdRequest {
   /** The STACKIT portal project UUID the Secrets Manager instance is part of. */
   projectId: string;
@@ -851,25 +346,6 @@ export interface UpdateApproleSecretIdRequest {
   /** A user chosen description to differentiate between multiple approle secrets. */
   description?: string;
 }
-export const UpdateApproleSecretIdRequest = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    projectId: S.String.pipe(T.Label()),
-    instanceId: S.String.pipe(T.Label()),
-    roleId: S.String.pipe(T.Label()),
-    secretIdVersion: S.Number.pipe(T.Label()),
-    description: S.optional(S.String),
-  }).pipe(
-    T.Http({
-      method: "PUT",
-      uri: "/v1/projects/{projectId}/instances/{instanceId}/approles/{roleId}/secretids/{secretIdVersion}",
-      code: 200,
-      baseUrl: "https://secrets-manager.api.{region}stackit.cloud",
-    }),
-  ),
-).annotate({
-  identifier: "UpdateApproleSecretIdRequest",
-}) as any as S.Schema<UpdateApproleSecretIdRequest>;
-
 export interface UpdateInstanceRequest {
   /** The STACKIT portal project UUID the Secrets Manager instance is part of. */
   projectId: string;
@@ -879,27 +355,7 @@ export interface UpdateInstanceRequest {
   /** A user chosen name to distinguish multiple secrets manager instances. */
   name: string;
 }
-export const UpdateInstanceRequest = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    projectId: S.String.pipe(T.Label()),
-    instanceId: S.String.pipe(T.Label()),
-    kmsKey: S.optional(KmsKeyPayload),
-    name: S.String,
-  }).pipe(
-    T.Http({
-      method: "PUT",
-      uri: "/v1/projects/{projectId}/instances/{instanceId}",
-      code: 200,
-      baseUrl: "https://secrets-manager.api.{region}stackit.cloud",
-    }),
-  ),
-).annotate({ identifier: "UpdateInstanceRequest" }) as any as S.Schema<UpdateInstanceRequest>;
-
 export interface UpdateInstanceResponse {}
-export const UpdateInstanceResponse = /*@__PURE__*/ S.suspend(() => S.Struct({})).annotate({
-  identifier: "UpdateInstanceResponse",
-}) as any as S.Schema<UpdateInstanceResponse>;
-
 export interface UpdateUserRequest {
   /** The STACKIT portal project UUID the Secrets Manager instance is part of. */
   projectId: string;
@@ -912,28 +368,7 @@ export interface UpdateUserRequest {
   /** Is true if the user has write access to the secrets engine. Is false for a read-only user. */
   write?: boolean;
 }
-export const UpdateUserRequest = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    projectId: S.String.pipe(T.Label()),
-    instanceId: S.String.pipe(T.Label()),
-    userId: S.String.pipe(T.Label()),
-    description: S.optional(S.String),
-    write: S.optional(S.Boolean),
-  }).pipe(
-    T.Http({
-      method: "PUT",
-      uri: "/v1/projects/{projectId}/instances/{instanceId}/users/{userId}",
-      code: 200,
-      baseUrl: "https://secrets-manager.api.{region}stackit.cloud",
-    }),
-  ),
-).annotate({ identifier: "UpdateUserRequest" }) as any as S.Schema<UpdateUserRequest>;
-
 export interface UpdateUserResponse {}
-export const UpdateUserResponse = /*@__PURE__*/ S.suspend(() => S.Struct({})).annotate({
-  identifier: "UpdateUserResponse",
-}) as any as S.Schema<UpdateUserResponse>;
-
 export type CreateACLError = BadRequest | NotFound | Conflict | StackitOpError;
 /** Creates a new Secrets Manager acl within the project. */
 export const createACL: API.OperationMethod<
@@ -942,8 +377,8 @@ export const createACL: API.OperationMethod<
   CreateACLError,
   StackitOpContext
 > = /*@__PURE__*/ API.make(() => ({
-  input: CreateACLRequest,
-  output: ACL,
+  input: __S(76, __c19, 0) as any as S.Schema<CreateACLRequest>,
+  output: __S(80, __c20, 0) as any as S.Schema<ACL>,
   errors: [BadRequest, NotFound, Conflict, UnknownStackitError],
   protocol: StackitProtocol,
   retry: Retry.Retry,
@@ -957,8 +392,8 @@ export const createApprole: API.OperationMethod<
   CreateApproleError,
   StackitOpContext
 > = /*@__PURE__*/ API.make(() => ({
-  input: CreateApproleRequest,
-  output: Approle,
+  input: __S(84, __c21, 0) as any as S.Schema<CreateApproleRequest>,
+  output: __S(88, __c22, 0) as any as S.Schema<Approle>,
   errors: [BadRequest, NotFound, Conflict, UnknownStackitError],
   protocol: StackitProtocol,
   retry: Retry.Retry,
@@ -972,8 +407,8 @@ export const createApproleSecretId: API.OperationMethod<
   CreateApproleSecretIdError,
   StackitOpContext
 > = /*@__PURE__*/ API.make(() => ({
-  input: CreateApproleSecretIdRequest,
-  output: ApproleSecret,
+  input: __S(92, __c23, 0) as any as S.Schema<CreateApproleSecretIdRequest>,
+  output: __S(96, __c24, 0) as any as S.Schema<ApproleSecret>,
   errors: [BadRequest, NotFound, UnknownStackitError],
   protocol: StackitProtocol,
   retry: Retry.Retry,
@@ -987,8 +422,8 @@ export const createInstance: API.OperationMethod<
   CreateInstanceError,
   StackitOpContext
 > = /*@__PURE__*/ API.make(() => ({
-  input: CreateInstanceRequest,
-  output: Instance,
+  input: __S(100, __c25, 0) as any as S.Schema<CreateInstanceRequest>,
+  output: __S(104, __c26, 0) as any as S.Schema<Instance>,
   errors: [BadRequest, UnknownStackitError],
   protocol: StackitProtocol,
   retry: Retry.Retry,
@@ -1002,8 +437,8 @@ export const createUser: API.OperationMethod<
   CreateUserError,
   StackitOpContext
 > = /*@__PURE__*/ API.make(() => ({
-  input: CreateUserRequest,
-  output: User,
+  input: __S(112, __c28, 0) as any as S.Schema<CreateUserRequest>,
+  output: __S(116, __c29, 0) as any as S.Schema<User>,
   errors: [BadRequest, NotFound, Conflict, UnknownStackitError],
   protocol: StackitProtocol,
   retry: Retry.Retry,
@@ -1017,8 +452,8 @@ export const deleteACL: API.OperationMethod<
   DeleteACLError,
   StackitOpContext
 > = /*@__PURE__*/ API.make(() => ({
-  input: DeleteACLRequest,
-  output: DeleteACLResponse,
+  input: __S(120, __c30, 0) as any as S.Schema<DeleteACLRequest>,
+  output: __S(124, __c31, 0) as any as S.Schema<DeleteACLResponse>,
   errors: [BadRequest, NotFound, UnknownStackitError],
   protocol: StackitProtocol,
   retry: Retry.Retry,
@@ -1032,8 +467,8 @@ export const deleteApprole: API.OperationMethod<
   DeleteApproleError,
   StackitOpContext
 > = /*@__PURE__*/ API.make(() => ({
-  input: DeleteApproleRequest,
-  output: DeleteApproleResponse,
+  input: __S(128, __c32, 0) as any as S.Schema<DeleteApproleRequest>,
+  output: __S(124, __c31, 0) as any as S.Schema<DeleteApproleResponse>,
   errors: [BadRequest, NotFound, UnknownStackitError],
   protocol: StackitProtocol,
   retry: Retry.Retry,
@@ -1047,8 +482,8 @@ export const deleteApproleSecretId: API.OperationMethod<
   DeleteApproleSecretIdError,
   StackitOpContext
 > = /*@__PURE__*/ API.make(() => ({
-  input: DeleteApproleSecretIdRequest,
-  output: DeleteApproleSecretIdResponse,
+  input: __S(0, __c0, 0) as any as S.Schema<DeleteApproleSecretIdRequest>,
+  output: __S(124, __c31, 0) as any as S.Schema<DeleteApproleSecretIdResponse>,
   errors: [BadRequest, NotFound, UnknownStackitError],
   protocol: StackitProtocol,
   retry: Retry.Retry,
@@ -1062,8 +497,8 @@ export const deleteInstance: API.OperationMethod<
   DeleteInstanceError,
   StackitOpContext
 > = /*@__PURE__*/ API.make(() => ({
-  input: DeleteInstanceRequest,
-  output: DeleteInstanceResponse,
+  input: __S(4, __c1, 0) as any as S.Schema<DeleteInstanceRequest>,
+  output: __S(124, __c31, 0) as any as S.Schema<DeleteInstanceResponse>,
   errors: [BadRequest, NotFound, UnknownStackitError],
   protocol: StackitProtocol,
   retry: Retry.Retry,
@@ -1077,8 +512,8 @@ export const deleteUser: API.OperationMethod<
   DeleteUserError,
   StackitOpContext
 > = /*@__PURE__*/ API.make(() => ({
-  input: DeleteUserRequest,
-  output: DeleteUserResponse,
+  input: __S(8, __c2, 0) as any as S.Schema<DeleteUserRequest>,
+  output: __S(124, __c31, 0) as any as S.Schema<DeleteUserResponse>,
   errors: [BadRequest, NotFound, UnknownStackitError],
   protocol: StackitProtocol,
   retry: Retry.Retry,
@@ -1088,8 +523,8 @@ export type GetACLError = BadRequest | NotFound | StackitOpError;
 /** Returns the details for the given acl. */
 export const getACL: API.OperationMethod<GetACLRequest, ACL, GetACLError, StackitOpContext> =
   /*@__PURE__*/ API.make(() => ({
-    input: GetACLRequest,
-    output: ACL,
+    input: __S(12, __c3, 0) as any as S.Schema<GetACLRequest>,
+    output: __S(80, __c20, 0) as any as S.Schema<ACL>,
     errors: [BadRequest, NotFound, UnknownStackitError],
     protocol: StackitProtocol,
     retry: Retry.Retry,
@@ -1103,8 +538,8 @@ export const getApprole: API.OperationMethod<
   GetApproleError,
   StackitOpContext
 > = /*@__PURE__*/ API.make(() => ({
-  input: GetApproleRequest,
-  output: Approle,
+  input: __S(16, __c4, 0) as any as S.Schema<GetApproleRequest>,
+  output: __S(88, __c22, 0) as any as S.Schema<Approle>,
   errors: [BadRequest, NotFound, UnknownStackitError],
   protocol: StackitProtocol,
   retry: Retry.Retry,
@@ -1118,8 +553,8 @@ export const getApproles: API.OperationMethod<
   GetApprolesError,
   StackitOpContext
 > = /*@__PURE__*/ API.make(() => ({
-  input: GetApprolesRequest,
-  output: ApproleList,
+  input: __S(20, __c5, 0) as any as S.Schema<GetApprolesRequest>,
+  output: __S(22, __c5, 2) as any as S.Schema<ApproleList>,
   errors: [BadRequest, NotFound, UnknownStackitError],
   protocol: StackitProtocol,
   retry: Retry.Retry,
@@ -1133,8 +568,8 @@ export const getApproleSecretId: API.OperationMethod<
   GetApproleSecretIdError,
   StackitOpContext
 > = /*@__PURE__*/ API.make(() => ({
-  input: GetApproleSecretIdRequest,
-  output: ApproleSecret,
+  input: __S(24, __c6, 0) as any as S.Schema<GetApproleSecretIdRequest>,
+  output: __S(96, __c24, 0) as any as S.Schema<ApproleSecret>,
   errors: [BadRequest, NotFound, UnknownStackitError],
   protocol: StackitProtocol,
   retry: Retry.Retry,
@@ -1148,8 +583,8 @@ export const getInstance: API.OperationMethod<
   GetInstanceError,
   StackitOpContext
 > = /*@__PURE__*/ API.make(() => ({
-  input: GetInstanceRequest,
-  output: Instance,
+  input: __S(28, __c7, 0) as any as S.Schema<GetInstanceRequest>,
+  output: __S(104, __c26, 0) as any as S.Schema<Instance>,
   errors: [BadRequest, NotFound, UnknownStackitError],
   protocol: StackitProtocol,
   retry: Retry.Retry,
@@ -1159,8 +594,8 @@ export type GetUserError = BadRequest | NotFound | StackitOpError;
 /** Returns the details for the given user. */
 export const getUser: API.OperationMethod<GetUserRequest, User, GetUserError, StackitOpContext> =
   /*@__PURE__*/ API.make(() => ({
-    input: GetUserRequest,
-    output: User,
+    input: __S(32, __c8, 0) as any as S.Schema<GetUserRequest>,
+    output: __S(116, __c29, 0) as any as S.Schema<User>,
     errors: [BadRequest, NotFound, UnknownStackitError],
     protocol: StackitProtocol,
     retry: Retry.Retry,
@@ -1174,8 +609,8 @@ export const listACLs: API.OperationMethod<
   ListACLsError,
   StackitOpContext
 > = /*@__PURE__*/ API.make(() => ({
-  input: ListACLsRequest,
-  output: ListACLsResponse,
+  input: __S(36, __c9, 0) as any as S.Schema<ListACLsRequest>,
+  output: __S(38, __c9, 2) as any as S.Schema<ListACLsResponse>,
   errors: [BadRequest, NotFound, UnknownStackitError],
   protocol: StackitProtocol,
   retry: Retry.Retry,
@@ -1189,8 +624,8 @@ export const listApproleSecretIds: API.OperationMethod<
   ListApproleSecretIdsError,
   StackitOpContext
 > = /*@__PURE__*/ API.make(() => ({
-  input: ListApproleSecretIdsRequest,
-  output: ApproleSecretList,
+  input: __S(40, __c10, 0) as any as S.Schema<ListApproleSecretIdsRequest>,
+  output: __S(42, __c10, 2) as any as S.Schema<ApproleSecretList>,
   errors: [BadRequest, NotFound, UnknownStackitError],
   protocol: StackitProtocol,
   retry: Retry.Retry,
@@ -1204,8 +639,8 @@ export const listInstances: API.OperationMethod<
   ListInstancesError,
   StackitOpContext
 > = /*@__PURE__*/ API.make(() => ({
-  input: ListInstancesRequest,
-  output: ListInstancesResponse,
+  input: __S(44, __c11, 0) as any as S.Schema<ListInstancesRequest>,
+  output: __S(46, __c11, 2) as any as S.Schema<ListInstancesResponse>,
   errors: [BadRequest, UnknownStackitError],
   protocol: StackitProtocol,
   retry: Retry.Retry,
@@ -1219,8 +654,8 @@ export const listUsers: API.OperationMethod<
   ListUsersError,
   StackitOpContext
 > = /*@__PURE__*/ API.make(() => ({
-  input: ListUsersRequest,
-  output: ListUsersResponse,
+  input: __S(48, __c12, 0) as any as S.Schema<ListUsersRequest>,
+  output: __S(50, __c12, 2) as any as S.Schema<ListUsersResponse>,
   errors: [BadRequest, NotFound, UnknownStackitError],
   protocol: StackitProtocol,
   retry: Retry.Retry,
@@ -1234,8 +669,8 @@ export const updateACL: API.OperationMethod<
   UpdateACLError,
   StackitOpContext
 > = /*@__PURE__*/ API.make(() => ({
-  input: UpdateACLRequest,
-  output: UpdateACLResponse,
+  input: __S(52, __c13, 0) as any as S.Schema<UpdateACLRequest>,
+  output: __S(124, __c31, 0) as any as S.Schema<UpdateACLResponse>,
   errors: [BadRequest, NotFound, UnknownStackitError],
   protocol: StackitProtocol,
   retry: Retry.Retry,
@@ -1249,8 +684,8 @@ export const updateACLs: API.OperationMethod<
   UpdateACLsError,
   StackitOpContext
 > = /*@__PURE__*/ API.make(() => ({
-  input: UpdateACLsRequest,
-  output: UpdateACLsResponse,
+  input: __S(58, __c14, 2) as any as S.Schema<UpdateACLsRequest>,
+  output: __S(124, __c31, 0) as any as S.Schema<UpdateACLsResponse>,
   errors: [BadRequest, NotFound, Conflict, UnknownStackitError],
   protocol: StackitProtocol,
   retry: Retry.Retry,
@@ -1264,8 +699,8 @@ export const updateApprole: API.OperationMethod<
   UpdateApproleError,
   StackitOpContext
 > = /*@__PURE__*/ API.make(() => ({
-  input: UpdateApproleRequest,
-  output: Approle,
+  input: __S(60, __c15, 0) as any as S.Schema<UpdateApproleRequest>,
+  output: __S(88, __c22, 0) as any as S.Schema<Approle>,
   errors: [BadRequest, NotFound, UnknownStackitError],
   protocol: StackitProtocol,
   retry: Retry.Retry,
@@ -1279,8 +714,8 @@ export const updateApproleSecretId: API.OperationMethod<
   UpdateApproleSecretIdError,
   StackitOpContext
 > = /*@__PURE__*/ API.make(() => ({
-  input: UpdateApproleSecretIdRequest,
-  output: ApproleSecret,
+  input: __S(64, __c16, 0) as any as S.Schema<UpdateApproleSecretIdRequest>,
+  output: __S(96, __c24, 0) as any as S.Schema<ApproleSecret>,
   errors: [BadRequest, NotFound, UnknownStackitError],
   protocol: StackitProtocol,
   retry: Retry.Retry,
@@ -1294,8 +729,8 @@ export const updateInstance: API.OperationMethod<
   UpdateInstanceError,
   StackitOpContext
 > = /*@__PURE__*/ API.make(() => ({
-  input: UpdateInstanceRequest,
-  output: UpdateInstanceResponse,
+  input: __S(68, __c17, 0) as any as S.Schema<UpdateInstanceRequest>,
+  output: __S(124, __c31, 0) as any as S.Schema<UpdateInstanceResponse>,
   errors: [BadRequest, NotFound, UnknownStackitError],
   protocol: StackitProtocol,
   retry: Retry.Retry,
@@ -1309,9 +744,659 @@ export const updateUser: API.OperationMethod<
   UpdateUserError,
   StackitOpContext
 > = /*@__PURE__*/ API.make(() => ({
-  input: UpdateUserRequest,
-  output: UpdateUserResponse,
+  input: __S(72, __c18, 0) as any as S.Schema<UpdateUserRequest>,
+  output: __S(124, __c31, 0) as any as S.Schema<UpdateUserResponse>,
   errors: [BadRequest, NotFound, UnknownStackitError],
   protocol: StackitProtocol,
   retry: Retry.Retry,
 }));
+
+// Schema builders: each runs one schema initializer, on that schema's first use.
+function __c0(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          projectId: S.String.pipe(T.Label()),
+          instanceId: S.String.pipe(T.Label()),
+          roleId: S.String.pipe(T.Label()),
+          secretIdVersion: S.Number.pipe(T.Label()),
+        }).pipe(
+          T.Http({
+            method: "DELETE",
+            uri: "/v1/projects/{projectId}/instances/{instanceId}/approles/{roleId}/secretids/{secretIdVersion}",
+            code: 200,
+            baseUrl: "https://secrets-manager.api.{region}stackit.cloud",
+          }),
+        ),
+      ).annotate({ identifier: "DeleteApproleSecretIdRequest" });
+  }
+}
+function __c1(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          projectId: S.String.pipe(T.Label()),
+          instanceId: S.String.pipe(T.Label()),
+        }).pipe(
+          T.Http({
+            method: "DELETE",
+            uri: "/v1/projects/{projectId}/instances/{instanceId}",
+            code: 200,
+            baseUrl: "https://secrets-manager.api.{region}stackit.cloud",
+          }),
+        ),
+      ).annotate({ identifier: "DeleteInstanceRequest" });
+  }
+}
+function __c2(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          projectId: S.String.pipe(T.Label()),
+          instanceId: S.String.pipe(T.Label()),
+          userId: S.String.pipe(T.Label()),
+        }).pipe(
+          T.Http({
+            method: "DELETE",
+            uri: "/v1/projects/{projectId}/instances/{instanceId}/users/{userId}",
+            code: 200,
+            baseUrl: "https://secrets-manager.api.{region}stackit.cloud",
+          }),
+        ),
+      ).annotate({ identifier: "DeleteUserRequest" });
+  }
+}
+function __c3(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          projectId: S.String.pipe(T.Label()),
+          instanceId: S.String.pipe(T.Label()),
+          aclId: S.String.pipe(T.Label()),
+        }).pipe(
+          T.Http({
+            method: "GET",
+            uri: "/v1/projects/{projectId}/instances/{instanceId}/acls/{aclId}",
+            code: 200,
+            baseUrl: "https://secrets-manager.api.{region}stackit.cloud",
+          }),
+        ),
+      ).annotate({ identifier: "GetACLRequest" });
+  }
+}
+function __c4(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          projectId: S.String.pipe(T.Label()),
+          instanceId: S.String.pipe(T.Label()),
+          roleId: S.String.pipe(T.Label()),
+        }).pipe(
+          T.Http({
+            method: "GET",
+            uri: "/v1/projects/{projectId}/instances/{instanceId}/approles/{roleId}",
+            code: 200,
+            baseUrl: "https://secrets-manager.api.{region}stackit.cloud",
+          }),
+        ),
+      ).annotate({ identifier: "GetApproleRequest" });
+  }
+}
+function __c5(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          projectId: S.String.pipe(T.Label()),
+          instanceId: S.String.pipe(T.Label()),
+        }).pipe(
+          T.Http({
+            method: "GET",
+            uri: "/v1/projects/{projectId}/instances/{instanceId}/approles",
+            code: 200,
+            baseUrl: "https://secrets-manager.api.{region}stackit.cloud",
+          }),
+        ),
+      ).annotate({ identifier: "GetApprolesRequest" });
+    case 1:
+      return S.Array(__S(88, __c22, 0));
+    case 2:
+      return S.suspend(() =>
+        S.Struct({
+          approles: __S(21, __c5, 1),
+        }),
+      ).annotate({ identifier: "ApproleList" });
+  }
+}
+function __c6(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          projectId: S.String.pipe(T.Label()),
+          instanceId: S.String.pipe(T.Label()),
+          roleId: S.String.pipe(T.Label()),
+          secretIdVersion: S.Number.pipe(T.Label()),
+        }).pipe(
+          T.Http({
+            method: "GET",
+            uri: "/v1/projects/{projectId}/instances/{instanceId}/approles/{roleId}/secretids/{secretIdVersion}",
+            code: 200,
+            baseUrl: "https://secrets-manager.api.{region}stackit.cloud",
+          }),
+        ),
+      ).annotate({ identifier: "GetApproleSecretIdRequest" });
+  }
+}
+function __c7(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          projectId: S.String.pipe(T.Label()),
+          instanceId: S.String.pipe(T.Label()),
+        }).pipe(
+          T.Http({
+            method: "GET",
+            uri: "/v1/projects/{projectId}/instances/{instanceId}",
+            code: 200,
+            baseUrl: "https://secrets-manager.api.{region}stackit.cloud",
+          }),
+        ),
+      ).annotate({ identifier: "GetInstanceRequest" });
+  }
+}
+function __c8(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          projectId: S.String.pipe(T.Label()),
+          instanceId: S.String.pipe(T.Label()),
+          userId: S.String.pipe(T.Label()),
+        }).pipe(
+          T.Http({
+            method: "GET",
+            uri: "/v1/projects/{projectId}/instances/{instanceId}/users/{userId}",
+            code: 200,
+            baseUrl: "https://secrets-manager.api.{region}stackit.cloud",
+          }),
+        ),
+      ).annotate({ identifier: "GetUserRequest" });
+  }
+}
+function __c9(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          projectId: S.String.pipe(T.Label()),
+          instanceId: S.String.pipe(T.Label()),
+        }).pipe(
+          T.Http({
+            method: "GET",
+            uri: "/v1/projects/{projectId}/instances/{instanceId}/acls",
+            code: 200,
+            baseUrl: "https://secrets-manager.api.{region}stackit.cloud",
+          }),
+        ),
+      ).annotate({ identifier: "ListACLsRequest" });
+    case 1:
+      return S.Array(__S(80, __c20, 0));
+    case 2:
+      return S.suspend(() =>
+        S.Struct({
+          acls: __S(37, __c9, 1),
+        }),
+      ).annotate({ identifier: "ListACLsResponse" });
+  }
+}
+function __c10(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          projectId: S.String.pipe(T.Label()),
+          instanceId: S.String.pipe(T.Label()),
+          roleId: S.String.pipe(T.Label()),
+        }).pipe(
+          T.Http({
+            method: "GET",
+            uri: "/v1/projects/{projectId}/instances/{instanceId}/approles/{roleId}/secretids",
+            code: 200,
+            baseUrl: "https://secrets-manager.api.{region}stackit.cloud",
+          }),
+        ),
+      ).annotate({ identifier: "ListApproleSecretIdsRequest" });
+    case 1:
+      return S.Array(__S(96, __c24, 0));
+    case 2:
+      return S.suspend(() =>
+        S.Struct({
+          secretIds: __S(41, __c10, 1),
+        }),
+      ).annotate({ identifier: "ApproleSecretList" });
+  }
+}
+function __c11(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          projectId: S.String.pipe(T.Label()),
+        }).pipe(
+          T.Http({
+            method: "GET",
+            uri: "/v1/projects/{projectId}/instances",
+            code: 200,
+            baseUrl: "https://secrets-manager.api.{region}stackit.cloud",
+          }),
+        ),
+      ).annotate({ identifier: "ListInstancesRequest" });
+    case 1:
+      return S.Array(__S(104, __c26, 0));
+    case 2:
+      return S.suspend(() =>
+        S.Struct({
+          instances: __S(45, __c11, 1),
+        }),
+      ).annotate({ identifier: "ListInstancesResponse" });
+  }
+}
+function __c12(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          projectId: S.String.pipe(T.Label()),
+          instanceId: S.String.pipe(T.Label()),
+        }).pipe(
+          T.Http({
+            method: "GET",
+            uri: "/v1/projects/{projectId}/instances/{instanceId}/users",
+            code: 200,
+            baseUrl: "https://secrets-manager.api.{region}stackit.cloud",
+          }),
+        ),
+      ).annotate({ identifier: "ListUsersRequest" });
+    case 1:
+      return S.Array(__S(116, __c29, 0));
+    case 2:
+      return S.suspend(() =>
+        S.Struct({
+          users: __S(49, __c12, 1),
+        }),
+      ).annotate({ identifier: "ListUsersResponse" });
+  }
+}
+function __c13(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          projectId: S.String.pipe(T.Label()),
+          instanceId: S.String.pipe(T.Label()),
+          aclId: S.String.pipe(T.Label()),
+          cidr: S.String,
+        }).pipe(
+          T.Http({
+            method: "PUT",
+            uri: "/v1/projects/{projectId}/instances/{instanceId}/acls/{aclId}",
+            code: 200,
+            baseUrl: "https://secrets-manager.api.{region}stackit.cloud",
+          }),
+        ),
+      ).annotate({ identifier: "UpdateACLRequest" });
+  }
+}
+function __c14(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          cidr: S.String,
+        }),
+      ).annotate({ identifier: "UpdateACLPayload" });
+    case 1:
+      return S.Array(__S(56, __c14, 0));
+    case 2:
+      return S.suspend(() =>
+        S.Struct({
+          projectId: S.String.pipe(T.Label()),
+          instanceId: S.String.pipe(T.Label()),
+          cidrs: S.optional(__S(57, __c14, 1)),
+        }).pipe(
+          T.Http({
+            method: "PUT",
+            uri: "/v1/projects/{projectId}/instances/{instanceId}/acls",
+            code: 200,
+            baseUrl: "https://secrets-manager.api.{region}stackit.cloud",
+          }),
+        ),
+      ).annotate({ identifier: "UpdateACLsRequest" });
+  }
+}
+function __c15(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          projectId: S.String.pipe(T.Label()),
+          instanceId: S.String.pipe(T.Label()),
+          roleId: S.String.pipe(T.Label()),
+          description: S.optional(S.String),
+          secret_id_num_uses: S.optional(S.Number),
+          secret_id_ttl: S.optional(S.String),
+          write: S.optional(S.Boolean),
+        }).pipe(
+          T.Http({
+            method: "PUT",
+            uri: "/v1/projects/{projectId}/instances/{instanceId}/approles/{roleId}",
+            code: 200,
+            baseUrl: "https://secrets-manager.api.{region}stackit.cloud",
+          }),
+        ),
+      ).annotate({ identifier: "UpdateApproleRequest" });
+  }
+}
+function __c16(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          projectId: S.String.pipe(T.Label()),
+          instanceId: S.String.pipe(T.Label()),
+          roleId: S.String.pipe(T.Label()),
+          secretIdVersion: S.Number.pipe(T.Label()),
+          description: S.optional(S.String),
+        }).pipe(
+          T.Http({
+            method: "PUT",
+            uri: "/v1/projects/{projectId}/instances/{instanceId}/approles/{roleId}/secretids/{secretIdVersion}",
+            code: 200,
+            baseUrl: "https://secrets-manager.api.{region}stackit.cloud",
+          }),
+        ),
+      ).annotate({ identifier: "UpdateApproleSecretIdRequest" });
+  }
+}
+function __c17(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          projectId: S.String.pipe(T.Label()),
+          instanceId: S.String.pipe(T.Label()),
+          kmsKey: S.optional(__S(108, __c27, 0)),
+          name: S.String,
+        }).pipe(
+          T.Http({
+            method: "PUT",
+            uri: "/v1/projects/{projectId}/instances/{instanceId}",
+            code: 200,
+            baseUrl: "https://secrets-manager.api.{region}stackit.cloud",
+          }),
+        ),
+      ).annotate({ identifier: "UpdateInstanceRequest" });
+  }
+}
+function __c18(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          projectId: S.String.pipe(T.Label()),
+          instanceId: S.String.pipe(T.Label()),
+          userId: S.String.pipe(T.Label()),
+          description: S.optional(S.String),
+          write: S.optional(S.Boolean),
+        }).pipe(
+          T.Http({
+            method: "PUT",
+            uri: "/v1/projects/{projectId}/instances/{instanceId}/users/{userId}",
+            code: 200,
+            baseUrl: "https://secrets-manager.api.{region}stackit.cloud",
+          }),
+        ),
+      ).annotate({ identifier: "UpdateUserRequest" });
+  }
+}
+function __c19(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          projectId: S.String.pipe(T.Label()),
+          instanceId: S.String.pipe(T.Label()),
+          cidr: S.String,
+        }).pipe(
+          T.Http({
+            method: "POST",
+            uri: "/v1/projects/{projectId}/instances/{instanceId}/acls",
+            code: 200,
+            baseUrl: "https://secrets-manager.api.{region}stackit.cloud",
+          }),
+        ),
+      ).annotate({ identifier: "CreateACLRequest" });
+  }
+}
+function __c20(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          cidr: S.String,
+          id: S.String,
+        }),
+      ).annotate({ identifier: "ACL" });
+  }
+}
+function __c21(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          projectId: S.String.pipe(T.Label()),
+          instanceId: S.String.pipe(T.Label()),
+          description: S.optional(S.String),
+          secret_id_num_uses: S.optional(S.Number),
+          secret_id_ttl: S.optional(S.String),
+          write: S.optional(S.Boolean),
+        }).pipe(
+          T.Http({
+            method: "POST",
+            uri: "/v1/projects/{projectId}/instances/{instanceId}/approles",
+            code: 200,
+            baseUrl: "https://secrets-manager.api.{region}stackit.cloud",
+          }),
+        ),
+      ).annotate({ identifier: "CreateApproleRequest" });
+  }
+}
+function __c22(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          description: S.String,
+          role_id: S.String,
+          secret_id_num_uses: S.Number,
+          secret_id_ttl: S.String,
+          write: S.Boolean,
+        }),
+      ).annotate({ identifier: "Approle" });
+  }
+}
+function __c23(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          projectId: S.String.pipe(T.Label()),
+          instanceId: S.String.pipe(T.Label()),
+          roleId: S.String.pipe(T.Label()),
+          description: S.optional(S.String),
+        }).pipe(
+          T.Http({
+            method: "POST",
+            uri: "/v1/projects/{projectId}/instances/{instanceId}/approles/{roleId}/secretids",
+            code: 200,
+            baseUrl: "https://secrets-manager.api.{region}stackit.cloud",
+          }),
+        ),
+      ).annotate({ identifier: "CreateApproleSecretIdRequest" });
+  }
+}
+function __c24(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          description: S.String,
+          num_uses: S.Number,
+          secret_id: S.optional(S.String),
+          ttl: S.String,
+          version: S.Number,
+        }),
+      ).annotate({ identifier: "ApproleSecret" });
+  }
+}
+function __c25(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          projectId: S.String.pipe(T.Label()),
+          kmsKey: S.optional(__S(108, __c27, 0)),
+          name: S.String,
+        }).pipe(
+          T.Http({
+            method: "POST",
+            uri: "/v1/projects/{projectId}/instances",
+            code: 200,
+            baseUrl: "https://secrets-manager.api.{region}stackit.cloud",
+          }),
+        ),
+      ).annotate({ identifier: "CreateInstanceRequest" });
+  }
+}
+function __c26(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          apiUrl: S.String,
+          creationFinishedDate: S.optional(S.String),
+          creationStartDate: S.String,
+          id: S.String,
+          kmsKey: S.optional(__S(108, __c27, 0)),
+          name: S.String,
+          secretCount: S.Number,
+          secretsEngine: S.String,
+          state: S.String,
+          updateFinishedDate: S.optional(S.String),
+          updateStartDate: S.optional(S.String),
+        }),
+      ).annotate({ identifier: "Instance" });
+  }
+}
+function __c27(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          keyId: S.String,
+          keyRingId: S.String,
+          keyVersion: S.Number,
+          serviceAccountEmail: S.String,
+        }),
+      ).annotate({ identifier: "KmsKeyPayload" });
+  }
+}
+function __c28(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          projectId: S.String.pipe(T.Label()),
+          instanceId: S.String.pipe(T.Label()),
+          description: S.String,
+          write: S.Boolean,
+        }).pipe(
+          T.Http({
+            method: "POST",
+            uri: "/v1/projects/{projectId}/instances/{instanceId}/users",
+            code: 200,
+            baseUrl: "https://secrets-manager.api.{region}stackit.cloud",
+          }),
+        ),
+      ).annotate({ identifier: "CreateUserRequest" });
+  }
+}
+function __c29(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          description: S.String,
+          id: S.String,
+          password: S.String.pipe(T.SensitiveValue({})),
+          username: S.String,
+          write: S.Boolean,
+        }),
+      ).annotate({ identifier: "User" });
+  }
+}
+function __c30(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          projectId: S.String.pipe(T.Label()),
+          instanceId: S.String.pipe(T.Label()),
+          aclId: S.String.pipe(T.Label()),
+        }).pipe(
+          T.Http({
+            method: "DELETE",
+            uri: "/v1/projects/{projectId}/instances/{instanceId}/acls/{aclId}",
+            code: 200,
+            baseUrl: "https://secrets-manager.api.{region}stackit.cloud",
+          }),
+        ),
+      ).annotate({ identifier: "DeleteACLRequest" });
+  }
+}
+function __c31(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() => S.Struct({})).annotate({ identifier: "DeleteACLResponse" });
+  }
+}
+function __c32(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          projectId: S.String.pipe(T.Label()),
+          instanceId: S.String.pipe(T.Label()),
+          roleId: S.String.pipe(T.Label()),
+        }).pipe(
+          T.Http({
+            method: "DELETE",
+            uri: "/v1/projects/{projectId}/instances/{instanceId}/approles/{roleId}",
+            code: 200,
+            baseUrl: "https://secrets-manager.api.{region}stackit.cloud",
+          }),
+        ),
+      ).annotate({ identifier: "DeleteApproleRequest" });
+  }
+}
+// Schema table: entry i is schema j of builder f, made on first reach.
+function __S(i: number, f: (j: number) => unknown, j: number): any {
+  return (__s[i] ??= __L.at(f, j));
+}