@distilled.cloud/stackit 1.0.0-rc.14 → 1.0.0-rc.16

package/src/services/service_account.ts

@@ -1,12 +1,15 @@
 import * as API from "@distilled.cloud/core/api";
 import * as C from "@distilled.cloud/core/category";
 // AUTO-GENERATED by scripts/generate.ts from .generated-specs (specs/spec-mirror-stackit). Do not edit.
-import * as S from "@distilled.cloud/core/schema";
-import * as Redacted from "effect/Redacted";
+import * as S from "@distilled.cloud/core/schema-lite";
+import * as __L from "@distilled.cloud/core/schema-lite";
+import type * as Redacted from "effect/Redacted";
 import { UnknownStackitError } from "../errors.ts";
 import { StackitProtocol, type StackitOpError, type StackitOpContext } from "../protocol.ts";
 import * as Retry from "../retry.ts";
 import * as T from "../traits.ts";
+// Schema table, filled on first reach (see __S at the end).
+const __s: any[] = [];
 
 export type { StackitOpError, StackitOpContext };
 
@@ -54,23 +57,9 @@ export interface CreateFederatedIdentityProviderRequestAssertionsItem {
   /** Value which the item is compared to */
   value?: string;
 }
-export const CreateFederatedIdentityProviderRequestAssertionsItem = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    item: S.optional(S.String),
-    operator: S.optional(S.String),
-    value: S.optional(S.String),
-  }),
-).annotate({
-  identifier: "CreateFederatedIdentityProviderRequestAssertionsItem",
-}) as any as S.Schema<CreateFederatedIdentityProviderRequestAssertionsItem>;
-
 /** list of assertions of the federated identity provider */
 export type CreateFederatedIdentityProviderRequestAssertionsList =
   Array<CreateFederatedIdentityProviderRequestAssertionsItem>;
-export const CreateFederatedIdentityProviderRequestAssertionsList = /*@__PURE__*/ S.Array(
-  CreateFederatedIdentityProviderRequestAssertionsItem,
-) as any as S.Schema<CreateFederatedIdentityProviderRequestAssertionsList>;
-
 export interface CreateFederatedIdentityProviderRequest {
   /** The ID of the project. */
   projectId: string;
@@ -83,25 +72,6 @@ export interface CreateFederatedIdentityProviderRequest {
   /** Unique name used as identifier of the federated identity provider. */
   name: string;
 }
-export const CreateFederatedIdentityProviderRequest = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    projectId: S.String.pipe(T.Label()),
-    serviceAccountEmail: S.String.pipe(T.Label()),
-    assertions: S.optional(CreateFederatedIdentityProviderRequestAssertionsList),
-    issuer: S.String,
-    name: S.String,
-  }).pipe(
-    T.Http({
-      method: "POST",
-      uri: "/v2/projects/{projectId}/service-accounts/{serviceAccountEmail}/federations",
-      code: 200,
-      baseUrl: "https://service-account.api.stackit.cloud",
-    }),
-  ),
-).annotate({
-  identifier: "CreateFederatedIdentityProviderRequest",
-}) as any as S.Schema<CreateFederatedIdentityProviderRequest>;
-
 export interface FederatedIdentityProviderAssertionsItem {
   /** Item to compare */
   item: string;
@@ -110,23 +80,9 @@ export interface FederatedIdentityProviderAssertionsItem {
   /** Value which the item is compared to */
   value: string;
 }
-export const FederatedIdentityProviderAssertionsItem = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    item: S.String,
-    operator: S.String,
-    value: S.String,
-  }),
-).annotate({
-  identifier: "FederatedIdentityProviderAssertionsItem",
-}) as any as S.Schema<FederatedIdentityProviderAssertionsItem>;
-
 /** list of assertions of the federated identity provider */
 export type FederatedIdentityProviderAssertionsList =
   Array<FederatedIdentityProviderAssertionsItem>;
-export const FederatedIdentityProviderAssertionsList = /*@__PURE__*/ S.Array(
-  FederatedIdentityProviderAssertionsItem,
-) as any as S.Schema<FederatedIdentityProviderAssertionsList>;
-
 export interface FederatedIdentityProvider {
   /** list of assertions of the federated identity provider */
   assertions: FederatedIdentityProviderAssertionsList;
@@ -141,41 +97,12 @@ export interface FederatedIdentityProvider {
   /** Last update time of the federated identity provider. */
   updatedAt: string;
 }
-export const FederatedIdentityProvider = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    assertions: FederatedIdentityProviderAssertionsList,
-    createdAt: S.String,
-    id: S.optional(S.String),
-    issuer: S.String,
-    name: S.String,
-    updatedAt: S.String,
-  }),
-).annotate({
-  identifier: "FederatedIdentityProvider",
-}) as any as S.Schema<FederatedIdentityProvider>;
-
 export interface CreateServiceAccountRequest {
   /** The ID of the project. */
   projectId: string;
   /** The requested name of the service account. The service will generate a unique email from this name. */
   name: string;
 }
-export const CreateServiceAccountRequest = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    projectId: S.String.pipe(T.Label()),
-    name: S.String,
-  }).pipe(
-    T.Http({
-      method: "POST",
-      uri: "/v2/projects/{projectId}/service-accounts",
-      code: 200,
-      baseUrl: "https://service-account.api.stackit.cloud",
-    }),
-  ),
-).annotate({
-  identifier: "CreateServiceAccountRequest",
-}) as any as S.Schema<CreateServiceAccountRequest>;
-
 export interface ServiceAccount2 {
   /** Unique identifier of the service account in format of an email address generated by the service containing the prefix provided by the user during creation. */
   email: string;
@@ -186,19 +113,8 @@ export interface ServiceAccount2 {
   /** ID of the related project */
   projectId: string;
 }
-export const ServiceAccount2 = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    email: S.String,
-    id: S.String,
-    internal: S.Boolean,
-    projectId: S.String,
-  }),
-).annotate({ identifier: "ServiceAccount2" }) as any as S.Schema<ServiceAccount2>;
-
 /** Optional, key algorithm of the generated key-pair. Used only if publicKey attribute is not specified, otherwise the algorithm is derived from the public key. */
 export type CreateServiceAccountKeyRequestAlgorithm = "RSA_2048" | "RSA_4096";
-export const CreateServiceAccountKeyRequestAlgorithm = S.String;
-
 export interface CreateServiceAccountKeyRequest {
   /** The ID of the project. */
   projectId: string;
@@ -211,25 +127,6 @@ export interface CreateServiceAccountKeyRequest {
   /** Optional, date of key expiration. When omitted, key is valid until deleted */
   validUntil?: string;
 }
-export const CreateServiceAccountKeyRequest = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    projectId: S.String.pipe(T.Label()),
-    serviceAccountEmail: S.String.pipe(T.Label()),
-    algorithm: S.optional(CreateServiceAccountKeyRequestAlgorithm),
-    publicKey: S.optional(S.String),
-    validUntil: S.optional(S.String),
-  }).pipe(
-    T.Http({
-      method: "POST",
-      uri: "/v2/projects/{projectId}/service-accounts/{serviceAccountEmail}/keys",
-      code: 200,
-      baseUrl: "https://service-account.api.stackit.cloud",
-    }),
-  ),
-).annotate({
-  identifier: "CreateServiceAccountKeyRequest",
-}) as any as S.Schema<CreateServiceAccountKeyRequest>;
-
 export interface CreateServiceAccountKeyResponseCredentials {
   /** Audience - service account API URL */
   aud: string;
@@ -244,28 +141,9 @@ export interface CreateServiceAccountKeyResponseCredentials {
   /** Endpoint used to obtain access tokens for the service account. */
   tokenEndpoint?: string;
 }
-export const CreateServiceAccountKeyResponseCredentials = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    aud: S.String,
-    iss: S.String,
-    kid: S.String,
-    privateKey: S.optional(S.String.pipe(T.SensitiveValue({}))),
-    sub: S.String,
-    tokenEndpoint: S.optional(S.String),
-  }),
-).annotate({
-  identifier: "CreateServiceAccountKeyResponseCredentials",
-}) as any as S.Schema<CreateServiceAccountKeyResponseCredentials>;
-
 export type CreateServiceAccountKeyResponseKeyAlgorithm = "RSA_2048" | "RSA_4096";
-export const CreateServiceAccountKeyResponseKeyAlgorithm = S.String;
-
 export type CreateServiceAccountKeyResponseKeyOrigin = "USER_PROVIDED" | "GENERATED";
-export const CreateServiceAccountKeyResponseKeyOrigin = S.String;
-
 export type CreateServiceAccountKeyResponseKeyType = "USER_MANAGED" | "SYSTEM_MANAGED";
-export const CreateServiceAccountKeyResponseKeyType = S.String;
-
 export interface CreateServiceAccountKeyResponse {
   active: boolean;
   /** Creation time of the key */
@@ -281,28 +159,10 @@ export interface CreateServiceAccountKeyResponse {
   /** If specified, the timestamp until the key is active. May be null */
   validUntil?: string;
 }
-export const CreateServiceAccountKeyResponse = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    active: S.Boolean,
-    createdAt: S.String,
-    credentials: CreateServiceAccountKeyResponseCredentials,
-    id: S.String,
-    keyAlgorithm: CreateServiceAccountKeyResponseKeyAlgorithm,
-    keyOrigin: CreateServiceAccountKeyResponseKeyOrigin,
-    keyType: CreateServiceAccountKeyResponseKeyType,
-    publicKey: S.String,
-    validUntil: S.optional(S.String),
-  }),
-).annotate({
-  identifier: "CreateServiceAccountKeyResponse",
-}) as any as S.Schema<CreateServiceAccountKeyResponse>;
-
 /** Always use URL encoded values. E.g. urn%3Aietf%3Aparams%3Aoauth%3Agrant-type%3Ajwt-bearer */
 export type CreateShortLivedAccessTokenRequestGrantType =
   | "urn:ietf:params:oauth:grant-type:jwt-bearer"
   | "refresh_token";
-export const CreateShortLivedAccessTokenRequestGrantType = S.String;
-
 export interface CreateShortLivedAccessTokenRequest {
   /** The self signed JWT. Must be given when grant_type is urn:ietf:params:oauth:grant-type:jwt-bearer */
   assertion?: string;
@@ -311,26 +171,7 @@ export interface CreateShortLivedAccessTokenRequest {
   /** Refresh token provided by a previous call with a self signed token. Must be given when grant_type is refresh_token */
   refresh_token?: string | Redacted.Redacted<string>;
 }
-export const CreateShortLivedAccessTokenRequest = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    assertion: S.optional(S.String),
-    grant_type: CreateShortLivedAccessTokenRequestGrantType,
-    refresh_token: S.optional(S.String.pipe(T.SensitiveValue({}))),
-  }).pipe(
-    T.Http({
-      method: "POST",
-      uri: "/token",
-      code: 200,
-      baseUrl: "https://service-account.api.stackit.cloud",
-    }),
-  ),
-).annotate({
-  identifier: "CreateShortLivedAccessTokenRequest",
-}) as any as S.Schema<CreateShortLivedAccessTokenRequest>;
-
 export type CreateShortLivedAccessTokenResponseTokenType = "Bearer";
-export const CreateShortLivedAccessTokenResponseTokenType = S.String;
-
 export interface CreateShortLivedAccessTokenResponse {
   /** The short lived token that can be used for API access */
   access_token: string | Redacted.Redacted<string>;
@@ -341,45 +182,13 @@ export interface CreateShortLivedAccessTokenResponse {
   scope: string;
   token_type: CreateShortLivedAccessTokenResponseTokenType;
 }
-export const CreateShortLivedAccessTokenResponse = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    access_token: S.String.pipe(T.SensitiveValue({})),
-    expires_in: S.Number,
-    refresh_token: S.String.pipe(T.SensitiveValue({})),
-    scope: S.String,
-    token_type: CreateShortLivedAccessTokenResponseTokenType,
-  }),
-).annotate({
-  identifier: "CreateShortLivedAccessTokenResponse",
-}) as any as S.Schema<CreateShortLivedAccessTokenResponse>;
-
 export interface DeleteServiceAccountRequest {
   /** The ID of the project. */
   projectId: string;
   /** The email of the Service Account. */
   serviceAccountEmail: string;
 }
-export const DeleteServiceAccountRequest = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    projectId: S.String.pipe(T.Label()),
-    serviceAccountEmail: S.String.pipe(T.Label()),
-  }).pipe(
-    T.Http({
-      method: "DELETE",
-      uri: "/v2/projects/{projectId}/service-accounts/{serviceAccountEmail}",
-      code: 200,
-      baseUrl: "https://service-account.api.stackit.cloud",
-    }),
-  ),
-).annotate({
-  identifier: "DeleteServiceAccountRequest",
-}) as any as S.Schema<DeleteServiceAccountRequest>;
-
 export interface DeleteServiceAccountResponse {}
-export const DeleteServiceAccountResponse = /*@__PURE__*/ S.suspend(() => S.Struct({})).annotate({
-  identifier: "DeleteServiceAccountResponse",
-}) as any as S.Schema<DeleteServiceAccountResponse>;
-
 export interface DeleteServiceAccountKeyRequest {
   /** The ID of the project. */
   projectId: string;
@@ -388,28 +197,7 @@ export interface DeleteServiceAccountKeyRequest {
   /** ID of the key. */
   keyId: string;
 }
-export const DeleteServiceAccountKeyRequest = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    projectId: S.String.pipe(T.Label()),
-    serviceAccountEmail: S.String.pipe(T.Label()),
-    keyId: S.String.pipe(T.Label()),
-  }).pipe(
-    T.Http({
-      method: "DELETE",
-      uri: "/v2/projects/{projectId}/service-accounts/{serviceAccountEmail}/keys/{keyId}",
-      code: 200,
-      baseUrl: "https://service-account.api.stackit.cloud",
-    }),
-  ),
-).annotate({
-  identifier: "DeleteServiceAccountKeyRequest",
-}) as any as S.Schema<DeleteServiceAccountKeyRequest>;
-
 export interface DeleteServiceAccountKeyResponse {}
-export const DeleteServiceAccountKeyResponse = /*@__PURE__*/ S.suspend(() => S.Struct({})).annotate(
-  { identifier: "DeleteServiceAccountKeyResponse" },
-) as any as S.Schema<DeleteServiceAccountKeyResponse>;
-
 export interface DeleteServiceFederatedIdentityProviderRequest {
   /** The ID of the project. */
   projectId: string;
@@ -418,30 +206,7 @@ export interface DeleteServiceFederatedIdentityProviderRequest {
   /** ID of the Federated Identity Provider. */
   federationId: string;
 }
-export const DeleteServiceFederatedIdentityProviderRequest = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    projectId: S.String.pipe(T.Label()),
-    serviceAccountEmail: S.String.pipe(T.Label()),
-    federationId: S.String.pipe(T.Label()),
-  }).pipe(
-    T.Http({
-      method: "DELETE",
-      uri: "/v2/projects/{projectId}/service-accounts/{serviceAccountEmail}/federations/{federationId}",
-      code: 200,
-      baseUrl: "https://service-account.api.stackit.cloud",
-    }),
-  ),
-).annotate({
-  identifier: "DeleteServiceFederatedIdentityProviderRequest",
-}) as any as S.Schema<DeleteServiceFederatedIdentityProviderRequest>;
-
 export interface DeleteServiceFederatedIdentityProviderResponse {}
-export const DeleteServiceFederatedIdentityProviderResponse = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({}),
-).annotate({
-  identifier: "DeleteServiceFederatedIdentityProviderResponse",
-}) as any as S.Schema<DeleteServiceFederatedIdentityProviderResponse>;
-
 export interface GetFederatedIdentityProviderRequest {
   /** The ID of the project. */
   projectId: string;
@@ -450,40 +215,10 @@ export interface GetFederatedIdentityProviderRequest {
   /** ID of the Federated Identity Provider. */
   federationId: string;
 }
-export const GetFederatedIdentityProviderRequest = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    projectId: S.String.pipe(T.Label()),
-    serviceAccountEmail: S.String.pipe(T.Label()),
-    federationId: S.String.pipe(T.Label()),
-  }).pipe(
-    T.Http({
-      method: "GET",
-      uri: "/v2/projects/{projectId}/service-accounts/{serviceAccountEmail}/federations/{federationId}",
-      code: 200,
-      baseUrl: "https://service-account.api.stackit.cloud",
-    }),
-  ),
-).annotate({
-  identifier: "GetFederatedIdentityProviderRequest",
-}) as any as S.Schema<GetFederatedIdentityProviderRequest>;
-
 export interface GetJWKSRequest {
   /** The email of the service account. */
   serviceAccountEmail: string;
 }
-export const GetJWKSRequest = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    serviceAccountEmail: S.String.pipe(T.Label()),
-  }).pipe(
-    T.Http({
-      method: "GET",
-      uri: "/v2/service-accounts/public/jwk/{serviceAccountEmail}",
-      code: 200,
-      baseUrl: "https://service-account.api.stackit.cloud",
-    }),
-  ),
-).annotate({ identifier: "GetJWKSRequest" }) as any as S.Schema<GetJWKSRequest>;
-
 /** JSON Web Key according to https://datatracker.ietf.org/doc/html/rfc7517#section-4 */
 export interface JWK {
   alg?: string;
@@ -498,37 +233,11 @@ export interface JWK {
   x5t256?: string;
   x5u?: string;
 }
-export const JWK = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    alg: S.optional(S.String),
-    e: S.String,
-    kid: S.optional(S.String),
-    ks: S.optional(S.String),
-    n: S.String,
-    ops: S.optional(S.String),
-    use: S.optional(S.String),
-    x5c: S.optional(S.String),
-    x5t: S.optional(S.String),
-    x5t256: S.optional(S.String),
-    x5u: S.optional(S.String),
-  }),
-).annotate({ identifier: "JWK" }) as any as S.Schema<JWK>;
-
 export type JWKSKeysList = Array<JWK>;
-export const JWKSKeysList = /*@__PURE__*/ S.Array(JWK) as any as S.Schema<JWKSKeysList>;
-
 export interface JWKS {
   keys: JWKSKeysList;
 }
-export const JWKS = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    keys: JWKSKeysList,
-  }),
-).annotate({ identifier: "JWKS" }) as any as S.Schema<JWKS>;
-
 export type GetServiceAccountKeyRequestFormat = "X509_PEM";
-export const GetServiceAccountKeyRequestFormat = S.String;
-
 export interface GetServiceAccountKeyRequest {
   /** The ID of the project. */
   projectId: string;
@@ -539,24 +248,6 @@ export interface GetServiceAccountKeyRequest {
   /** Requested format for the public key */
   format?: GetServiceAccountKeyRequestFormat | (string & {});
 }
-export const GetServiceAccountKeyRequest = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    projectId: S.String.pipe(T.Label()),
-    serviceAccountEmail: S.String.pipe(T.Label()),
-    keyId: S.String.pipe(T.Label()),
-    format: S.optional(GetServiceAccountKeyRequestFormat.pipe(T.Query())),
-  }).pipe(
-    T.Http({
-      method: "GET",
-      uri: "/v2/projects/{projectId}/service-accounts/{serviceAccountEmail}/keys/{keyId}",
-      code: 200,
-      baseUrl: "https://service-account.api.stackit.cloud",
-    }),
-  ),
-).annotate({
-  identifier: "GetServiceAccountKeyRequest",
-}) as any as S.Schema<GetServiceAccountKeyRequest>;
-
 export interface GetServiceAccountKeyResponseCredentials {
   /** Audience - service account API URL */
   aud: string;
@@ -567,26 +258,9 @@ export interface GetServiceAccountKeyResponseCredentials {
   /** Service account id */
   sub: string;
 }
-export const GetServiceAccountKeyResponseCredentials = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    aud: S.String,
-    iss: S.String,
-    kid: S.String,
-    sub: S.String,
-  }),
-).annotate({
-  identifier: "GetServiceAccountKeyResponseCredentials",
-}) as any as S.Schema<GetServiceAccountKeyResponseCredentials>;
-
 export type GetServiceAccountKeyResponseKeyAlgorithm = "RSA_2048" | "RSA_4096";
-export const GetServiceAccountKeyResponseKeyAlgorithm = S.String;
-
 export type GetServiceAccountKeyResponseKeyOrigin = "USER_PROVIDED" | "GENERATED";
-export const GetServiceAccountKeyResponseKeyOrigin = S.String;
-
 export type GetServiceAccountKeyResponseKeyType = "USER_MANAGED" | "SYSTEM_MANAGED";
-export const GetServiceAccountKeyResponseKeyType = S.String;
-
 export interface GetServiceAccountKeyResponse {
   active: boolean;
   /** Creation time of the key */
@@ -602,98 +276,29 @@ export interface GetServiceAccountKeyResponse {
   /** If specified, the timestamp until the key is active. May be null */
   validUntil?: string;
 }
-export const GetServiceAccountKeyResponse = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    active: S.Boolean,
-    createdAt: S.String,
-    credentials: GetServiceAccountKeyResponseCredentials,
-    id: S.String,
-    keyAlgorithm: GetServiceAccountKeyResponseKeyAlgorithm,
-    keyOrigin: GetServiceAccountKeyResponseKeyOrigin,
-    keyType: GetServiceAccountKeyResponseKeyType,
-    publicKey: S.optional(S.String),
-    validUntil: S.optional(S.String),
-  }),
-).annotate({
-  identifier: "GetServiceAccountKeyResponse",
-}) as any as S.Schema<GetServiceAccountKeyResponse>;
-
 export interface ListFederatedIdentityProvidersRequest {
   /** The ID of the project. */
   projectId: string;
   /** The email of the service account. */
   serviceAccountEmail: string;
 }
-export const ListFederatedIdentityProvidersRequest = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    projectId: S.String.pipe(T.Label()),
-    serviceAccountEmail: S.String.pipe(T.Label()),
-  }).pipe(
-    T.Http({
-      method: "GET",
-      uri: "/v2/projects/{projectId}/service-accounts/{serviceAccountEmail}/federations",
-      code: 200,
-      baseUrl: "https://service-account.api.stackit.cloud",
-    }),
-  ),
-).annotate({
-  identifier: "ListFederatedIdentityProvidersRequest",
-}) as any as S.Schema<ListFederatedIdentityProvidersRequest>;
-
 export type FederatedListFederatedIdentityProvidersResponseResourcesList =
   Array<FederatedIdentityProvider>;
-export const FederatedListFederatedIdentityProvidersResponseResourcesList = /*@__PURE__*/ S.Array(
-  FederatedIdentityProvider,
-) as any as S.Schema<FederatedListFederatedIdentityProvidersResponseResourcesList>;
-
 export interface FederatedListFederatedIdentityProvidersResponse {
   itemsPerPage: number;
   resources: FederatedListFederatedIdentityProvidersResponseResourcesList;
   startIndex: number;
   totalResults: number;
 }
-export const FederatedListFederatedIdentityProvidersResponse = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    itemsPerPage: S.Number,
-    resources: FederatedListFederatedIdentityProvidersResponseResourcesList,
-    startIndex: S.Number,
-    totalResults: S.Number,
-  }),
-).annotate({
-  identifier: "FederatedListFederatedIdentityProvidersResponse",
-}) as any as S.Schema<FederatedListFederatedIdentityProvidersResponse>;
-
 export interface ListServiceAccountKeysRequest {
   /** The ID of the project. */
   projectId: string;
   /** The email of the service account. */
   serviceAccountEmail: string;
 }
-export const ListServiceAccountKeysRequest = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    projectId: S.String.pipe(T.Label()),
-    serviceAccountEmail: S.String.pipe(T.Label()),
-  }).pipe(
-    T.Http({
-      method: "GET",
-      uri: "/v2/projects/{projectId}/service-accounts/{serviceAccountEmail}/keys",
-      code: 200,
-      baseUrl: "https://service-account.api.stackit.cloud",
-    }),
-  ),
-).annotate({
-  identifier: "ListServiceAccountKeysRequest",
-}) as any as S.Schema<ListServiceAccountKeysRequest>;
-
 export type ServiceAccountKeyListResponseKeyAlgorithm = "RSA_2048" | "RSA_4096";
-export const ServiceAccountKeyListResponseKeyAlgorithm = S.String;
-
 export type ServiceAccountKeyListResponseKeyOrigin = "USER_PROVIDED" | "GENERATED";
-export const ServiceAccountKeyListResponseKeyOrigin = S.String;
-
 export type ServiceAccountKeyListResponseKeyType = "USER_MANAGED" | "SYSTEM_MANAGED";
-export const ServiceAccountKeyListResponseKeyType = S.String;
-
 export interface ServiceAccountKeyListResponse {
   active: boolean;
   /** Creation time of the key */
@@ -706,84 +311,23 @@ export interface ServiceAccountKeyListResponse {
   /** If specified, the timestamp until the key is active. May be null */
   validUntil?: string;
 }
-export const ServiceAccountKeyListResponse = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    active: S.Boolean,
-    createdAt: S.String,
-    id: S.String,
-    keyAlgorithm: ServiceAccountKeyListResponseKeyAlgorithm,
-    keyOrigin: ServiceAccountKeyListResponseKeyOrigin,
-    keyType: ServiceAccountKeyListResponseKeyType,
-    validUntil: S.optional(S.String),
-  }),
-).annotate({
-  identifier: "ServiceAccountKeyListResponse",
-}) as any as S.Schema<ServiceAccountKeyListResponse>;
-
 export type ListServiceAccountKeysResponseItemsList = Array<ServiceAccountKeyListResponse>;
-export const ListServiceAccountKeysResponseItemsList = /*@__PURE__*/ S.Array(
-  ServiceAccountKeyListResponse,
-) as any as S.Schema<ListServiceAccountKeysResponseItemsList>;
-
 export interface ListServiceAccountKeysResponse {
   items: ListServiceAccountKeysResponseItemsList;
 }
-export const ListServiceAccountKeysResponse = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    items: ListServiceAccountKeysResponseItemsList,
-  }),
-).annotate({
-  identifier: "ListServiceAccountKeysResponse",
-}) as any as S.Schema<ListServiceAccountKeysResponse>;
-
 export interface ListServiceAccountsRequest {
   /** The ID of the project. */
   projectId: string;
 }
-export const ListServiceAccountsRequest = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    projectId: S.String.pipe(T.Label()),
-  }).pipe(
-    T.Http({
-      method: "GET",
-      uri: "/v2/projects/{projectId}/service-accounts",
-      code: 200,
-      baseUrl: "https://service-account.api.stackit.cloud",
-    }),
-  ),
-).annotate({
-  identifier: "ListServiceAccountsRequest",
-}) as any as S.Schema<ListServiceAccountsRequest>;
-
 export type ListServiceAccountsResponseItemsList = Array<ServiceAccount2>;
-export const ListServiceAccountsResponseItemsList = /*@__PURE__*/ S.Array(
-  ServiceAccount2,
-) as any as S.Schema<ListServiceAccountsResponseItemsList>;
-
 export interface ListServiceAccountsResponse {
   items: ListServiceAccountsResponseItemsList;
 }
-export const ListServiceAccountsResponse = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    items: ListServiceAccountsResponseItemsList,
-  }),
-).annotate({
-  identifier: "ListServiceAccountsResponse",
-}) as any as S.Schema<ListServiceAccountsResponse>;
-
 export type PartialUpdateServiceAccountFederatedIdentityProviderRequestAssertionsItem =
   CreateFederatedIdentityProviderRequestAssertionsItem;
-export const PartialUpdateServiceAccountFederatedIdentityProviderRequestAssertionsItem =
-  CreateFederatedIdentityProviderRequestAssertionsItem;
-
 /** list of assertions of the federated identity provider */
 export type PartialUpdateServiceAccountFederatedIdentityProviderRequestAssertionsList =
   Array<CreateFederatedIdentityProviderRequestAssertionsItem>;
-export const PartialUpdateServiceAccountFederatedIdentityProviderRequestAssertionsList =
-  /*@__PURE__*/ S.Array(
-    CreateFederatedIdentityProviderRequestAssertionsItem,
-  ) as any as S.Schema<PartialUpdateServiceAccountFederatedIdentityProviderRequestAssertionsList>;
-
 export interface PartialUpdateServiceAccountFederatedIdentityProviderRequest {
   /** The ID of the project. */
   projectId: string;
@@ -798,29 +342,6 @@ export interface PartialUpdateServiceAccountFederatedIdentityProviderRequest {
   /** Unique name used as identifier of the federated identity provider. */
   name: string;
 }
-export const PartialUpdateServiceAccountFederatedIdentityProviderRequest = /*@__PURE__*/ S.suspend(
-  () =>
-    S.Struct({
-      projectId: S.String.pipe(T.Label()),
-      serviceAccountEmail: S.String.pipe(T.Label()),
-      federationId: S.String.pipe(T.Label()),
-      assertions: S.optional(
-        PartialUpdateServiceAccountFederatedIdentityProviderRequestAssertionsList,
-      ),
-      issuer: S.String,
-      name: S.String,
-    }).pipe(
-      T.Http({
-        method: "PATCH",
-        uri: "/v2/projects/{projectId}/service-accounts/{serviceAccountEmail}/federations/{federationId}",
-        code: 200,
-        baseUrl: "https://service-account.api.stackit.cloud",
-      }),
-    ),
-).annotate({
-  identifier: "PartialUpdateServiceAccountFederatedIdentityProviderRequest",
-}) as any as S.Schema<PartialUpdateServiceAccountFederatedIdentityProviderRequest>;
-
 export interface PartialUpdateServiceAccountKeyRequest {
   /** The ID of the project. */
   projectId: string;
@@ -833,34 +354,9 @@ export interface PartialUpdateServiceAccountKeyRequest {
   /** Optional, date of key expiration. To disable, set time to "9999-01-01T01:01:01Z" */
   validUntil?: string;
 }
-export const PartialUpdateServiceAccountKeyRequest = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    projectId: S.String.pipe(T.Label()),
-    serviceAccountEmail: S.String.pipe(T.Label()),
-    keyId: S.String.pipe(T.Label()),
-    active: S.optional(S.Boolean),
-    validUntil: S.optional(S.String),
-  }).pipe(
-    T.Http({
-      method: "PATCH",
-      uri: "/v2/projects/{projectId}/service-accounts/{serviceAccountEmail}/keys/{keyId}",
-      code: 200,
-      baseUrl: "https://service-account.api.stackit.cloud",
-    }),
-  ),
-).annotate({
-  identifier: "PartialUpdateServiceAccountKeyRequest",
-}) as any as S.Schema<PartialUpdateServiceAccountKeyRequest>;
-
 export type PartialUpdateServiceAccountKeyResponseKeyAlgorithm = "RSA_2048" | "RSA_4096";
-export const PartialUpdateServiceAccountKeyResponseKeyAlgorithm = S.String;
-
 export type PartialUpdateServiceAccountKeyResponseKeyOrigin = "USER_PROVIDED" | "GENERATED";
-export const PartialUpdateServiceAccountKeyResponseKeyOrigin = S.String;
-
 export type PartialUpdateServiceAccountKeyResponseKeyType = "USER_MANAGED" | "SYSTEM_MANAGED";
-export const PartialUpdateServiceAccountKeyResponseKeyType = S.String;
-
 export interface PartialUpdateServiceAccountKeyResponse {
   active: boolean;
   /** Creation time of the key */
@@ -873,20 +369,6 @@ export interface PartialUpdateServiceAccountKeyResponse {
   /** If specified, the timestamp until the key is active. May be null */
   validUntil?: string;
 }
-export const PartialUpdateServiceAccountKeyResponse = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    active: S.Boolean,
-    createdAt: S.String,
-    id: S.String,
-    keyAlgorithm: PartialUpdateServiceAccountKeyResponseKeyAlgorithm,
-    keyOrigin: PartialUpdateServiceAccountKeyResponseKeyOrigin,
-    keyType: PartialUpdateServiceAccountKeyResponseKeyType,
-    validUntil: S.optional(S.String),
-  }),
-).annotate({
-  identifier: "PartialUpdateServiceAccountKeyResponse",
-}) as any as S.Schema<PartialUpdateServiceAccountKeyResponse>;
-
 export type CreateFederatedIdentityProviderError =
   | BadRequest
   | Forbidden
@@ -899,8 +381,8 @@ export const createFederatedIdentityProvider: API.OperationMethod<
   CreateFederatedIdentityProviderError,
   StackitOpContext
 > = /*@__PURE__*/ API.make(() => ({
-  input: CreateFederatedIdentityProviderRequest,
-  output: FederatedIdentityProvider,
+  input: __S(40, __c10, 0) as any as S.Schema<CreateFederatedIdentityProviderRequest>,
+  output: __S(46, __c11, 2) as any as S.Schema<FederatedIdentityProvider>,
   errors: [BadRequest, Forbidden, Conflict, UnknownStackitError],
   protocol: StackitProtocol,
   retry: Retry.Retry,
@@ -914,8 +396,8 @@ export const createServiceAccount: API.OperationMethod<
   CreateServiceAccountError,
   StackitOpContext
 > = /*@__PURE__*/ API.make(() => ({
-  input: CreateServiceAccountRequest,
-  output: ServiceAccount2,
+  input: __S(52, __c13, 0) as any as S.Schema<CreateServiceAccountRequest>,
+  output: __S(56, __c14, 0) as any as S.Schema<ServiceAccount2>,
   errors: [BadRequest, Forbidden, Conflict, UnknownStackitError],
   protocol: StackitProtocol,
   retry: Retry.Retry,
@@ -929,8 +411,8 @@ export const createServiceAccountKey: API.OperationMethod<
   CreateServiceAccountKeyError,
   StackitOpContext
 > = /*@__PURE__*/ API.make(() => ({
-  input: CreateServiceAccountKeyRequest,
-  output: CreateServiceAccountKeyResponse,
+  input: __S(60, __c15, 0) as any as S.Schema<CreateServiceAccountKeyRequest>,
+  output: __S(62, __c15, 2) as any as S.Schema<CreateServiceAccountKeyResponse>,
   errors: [BadRequest, Forbidden, Conflict, UnknownStackitError],
   protocol: StackitProtocol,
   retry: Retry.Retry,
@@ -944,8 +426,8 @@ export const createShortLivedAccessToken: API.OperationMethod<
   CreateShortLivedAccessTokenError,
   StackitOpContext
 > = /*@__PURE__*/ API.make(() => ({
-  input: CreateShortLivedAccessTokenRequest,
-  output: CreateShortLivedAccessTokenResponse,
+  input: __S(64, __c16, 0) as any as S.Schema<CreateShortLivedAccessTokenRequest>,
+  output: __S(65, __c16, 1) as any as S.Schema<CreateShortLivedAccessTokenResponse>,
   errors: [BadRequest, Forbidden, UnknownStackitError],
   protocol: StackitProtocol,
   retry: Retry.Retry,
@@ -959,8 +441,8 @@ export const deleteServiceAccount: API.OperationMethod<
   DeleteServiceAccountError,
   StackitOpContext
 > = /*@__PURE__*/ API.make(() => ({
-  input: DeleteServiceAccountRequest,
-  output: DeleteServiceAccountResponse,
+  input: __S(68, __c17, 0) as any as S.Schema<DeleteServiceAccountRequest>,
+  output: __S(72, __c18, 0) as any as S.Schema<DeleteServiceAccountResponse>,
   errors: [BadRequest, Forbidden, NotFound, UnknownStackitError],
   protocol: StackitProtocol,
   retry: Retry.Retry,
@@ -974,8 +456,8 @@ export const deleteServiceAccountKey: API.OperationMethod<
   DeleteServiceAccountKeyError,
   StackitOpContext
 > = /*@__PURE__*/ API.make(() => ({
-  input: DeleteServiceAccountKeyRequest,
-  output: DeleteServiceAccountKeyResponse,
+  input: __S(76, __c19, 0) as any as S.Schema<DeleteServiceAccountKeyRequest>,
+  output: __S(72, __c18, 0) as any as S.Schema<DeleteServiceAccountKeyResponse>,
   errors: [BadRequest, Forbidden, UnknownStackitError],
   protocol: StackitProtocol,
   retry: Retry.Retry,
@@ -989,8 +471,8 @@ export const deleteServiceFederatedIdentityProvider: API.OperationMethod<
   DeleteServiceFederatedIdentityProviderError,
   StackitOpContext
 > = /*@__PURE__*/ API.make(() => ({
-  input: DeleteServiceFederatedIdentityProviderRequest,
-  output: DeleteServiceFederatedIdentityProviderResponse,
+  input: __S(0, __c0, 0) as any as S.Schema<DeleteServiceFederatedIdentityProviderRequest>,
+  output: __S(72, __c18, 0) as any as S.Schema<DeleteServiceFederatedIdentityProviderResponse>,
   errors: [BadRequest, Forbidden, UnknownStackitError],
   protocol: StackitProtocol,
   retry: Retry.Retry,
@@ -1004,8 +486,8 @@ export const getFederatedIdentityProvider: API.OperationMethod<
   GetFederatedIdentityProviderError,
   StackitOpContext
 > = /*@__PURE__*/ API.make(() => ({
-  input: GetFederatedIdentityProviderRequest,
-  output: FederatedIdentityProvider,
+  input: __S(4, __c1, 0) as any as S.Schema<GetFederatedIdentityProviderRequest>,
+  output: __S(46, __c11, 2) as any as S.Schema<FederatedIdentityProvider>,
   errors: [BadRequest, Forbidden, NotFound, UnknownStackitError],
   protocol: StackitProtocol,
   retry: Retry.Retry,
@@ -1015,8 +497,8 @@ export type GetJWKSError = StackitOpError;
 /** Get JSON Web Key set of the service account Get JSON Web Key set of the service account */
 export const getJWKS: API.OperationMethod<GetJWKSRequest, JWKS, GetJWKSError, StackitOpContext> =
   /*@__PURE__*/ API.make(() => ({
-    input: GetJWKSRequest,
-    output: JWKS,
+    input: __S(8, __c2, 0) as any as S.Schema<GetJWKSRequest>,
+    output: __S(11, __c2, 3) as any as S.Schema<JWKS>,
     errors: [UnknownStackitError],
     protocol: StackitProtocol,
     retry: Retry.Retry,
@@ -1030,8 +512,8 @@ export const getServiceAccountKey: API.OperationMethod<
   GetServiceAccountKeyError,
   StackitOpContext
 > = /*@__PURE__*/ API.make(() => ({
-  input: GetServiceAccountKeyRequest,
-  output: GetServiceAccountKeyResponse,
+  input: __S(12, __c3, 0) as any as S.Schema<GetServiceAccountKeyRequest>,
+  output: __S(14, __c3, 2) as any as S.Schema<GetServiceAccountKeyResponse>,
   errors: [BadRequest, Forbidden, UnknownStackitError],
   protocol: StackitProtocol,
   retry: Retry.Retry,
@@ -1045,8 +527,8 @@ export const listFederatedIdentityProviders: API.OperationMethod<
   ListFederatedIdentityProvidersError,
   StackitOpContext
 > = /*@__PURE__*/ API.make(() => ({
-  input: ListFederatedIdentityProvidersRequest,
-  output: FederatedListFederatedIdentityProvidersResponse,
+  input: __S(16, __c4, 0) as any as S.Schema<ListFederatedIdentityProvidersRequest>,
+  output: __S(18, __c4, 2) as any as S.Schema<FederatedListFederatedIdentityProvidersResponse>,
   errors: [BadRequest, Forbidden, UnknownStackitError],
   protocol: StackitProtocol,
   retry: Retry.Retry,
@@ -1060,8 +542,8 @@ export const listServiceAccountKeys: API.OperationMethod<
   ListServiceAccountKeysError,
   StackitOpContext
 > = /*@__PURE__*/ API.make(() => ({
-  input: ListServiceAccountKeysRequest,
-  output: ListServiceAccountKeysResponse,
+  input: __S(20, __c5, 0) as any as S.Schema<ListServiceAccountKeysRequest>,
+  output: __S(22, __c5, 2) as any as S.Schema<ListServiceAccountKeysResponse>,
   errors: [BadRequest, Forbidden, UnknownStackitError],
   protocol: StackitProtocol,
   retry: Retry.Retry,
@@ -1075,8 +557,8 @@ export const listServiceAccounts: API.OperationMethod<
   ListServiceAccountsError,
   StackitOpContext
 > = /*@__PURE__*/ API.make(() => ({
-  input: ListServiceAccountsRequest,
-  output: ListServiceAccountsResponse,
+  input: __S(28, __c7, 0) as any as S.Schema<ListServiceAccountsRequest>,
+  output: __S(30, __c7, 2) as any as S.Schema<ListServiceAccountsResponse>,
   errors: [BadRequest, Forbidden, UnknownStackitError],
   protocol: StackitProtocol,
   retry: Retry.Retry,
@@ -1094,8 +576,12 @@ export const partialUpdateServiceAccountFederatedIdentityProvider: API.Operation
   PartialUpdateServiceAccountFederatedIdentityProviderError,
   StackitOpContext
 > = /*@__PURE__*/ API.make(() => ({
-  input: PartialUpdateServiceAccountFederatedIdentityProviderRequest,
-  output: FederatedIdentityProvider,
+  input: __S(
+    32,
+    __c8,
+    0,
+  ) as any as S.Schema<PartialUpdateServiceAccountFederatedIdentityProviderRequest>,
+  output: __S(46, __c11, 2) as any as S.Schema<FederatedIdentityProvider>,
   errors: [BadRequest, Forbidden, Conflict, UnknownStackitError],
   protocol: StackitProtocol,
   retry: Retry.Retry,
@@ -1113,9 +599,485 @@ export const partialUpdateServiceAccountKey: API.OperationMethod<
   PartialUpdateServiceAccountKeyError,
   StackitOpContext
 > = /*@__PURE__*/ API.make(() => ({
-  input: PartialUpdateServiceAccountKeyRequest,
-  output: PartialUpdateServiceAccountKeyResponse,
+  input: __S(36, __c9, 0) as any as S.Schema<PartialUpdateServiceAccountKeyRequest>,
+  output: __S(24, __c6, 0) as any as S.Schema<PartialUpdateServiceAccountKeyResponse>,
   errors: [BadRequest, Forbidden, Conflict, UnknownStackitError],
   protocol: StackitProtocol,
   retry: Retry.Retry,
 }));
+
+// Schema builders: each runs one schema initializer, on that schema's first use.
+function __c0(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          projectId: S.String.pipe(T.Label()),
+          serviceAccountEmail: S.String.pipe(T.Label()),
+          federationId: S.String.pipe(T.Label()),
+        }).pipe(
+          T.Http({
+            method: "DELETE",
+            uri: "/v2/projects/{projectId}/service-accounts/{serviceAccountEmail}/federations/{federationId}",
+            code: 200,
+            baseUrl: "https://service-account.api.stackit.cloud",
+          }),
+        ),
+      ).annotate({ identifier: "DeleteServiceFederatedIdentityProviderRequest" });
+  }
+}
+function __c1(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          projectId: S.String.pipe(T.Label()),
+          serviceAccountEmail: S.String.pipe(T.Label()),
+          federationId: S.String.pipe(T.Label()),
+        }).pipe(
+          T.Http({
+            method: "GET",
+            uri: "/v2/projects/{projectId}/service-accounts/{serviceAccountEmail}/federations/{federationId}",
+            code: 200,
+            baseUrl: "https://service-account.api.stackit.cloud",
+          }),
+        ),
+      ).annotate({ identifier: "GetFederatedIdentityProviderRequest" });
+  }
+}
+function __c2(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          serviceAccountEmail: S.String.pipe(T.Label()),
+        }).pipe(
+          T.Http({
+            method: "GET",
+            uri: "/v2/service-accounts/public/jwk/{serviceAccountEmail}",
+            code: 200,
+            baseUrl: "https://service-account.api.stackit.cloud",
+          }),
+        ),
+      ).annotate({ identifier: "GetJWKSRequest" });
+    case 1:
+      return S.suspend(() =>
+        S.Struct({
+          alg: S.optional(S.String),
+          e: S.String,
+          kid: S.optional(S.String),
+          ks: S.optional(S.String),
+          n: S.String,
+          ops: S.optional(S.String),
+          use: S.optional(S.String),
+          x5c: S.optional(S.String),
+          x5t: S.optional(S.String),
+          x5t256: S.optional(S.String),
+          x5u: S.optional(S.String),
+        }),
+      ).annotate({ identifier: "JWK" });
+    case 2:
+      return S.Array(__S(9, __c2, 1));
+    case 3:
+      return S.suspend(() =>
+        S.Struct({
+          keys: __S(10, __c2, 2),
+        }),
+      ).annotate({ identifier: "JWKS" });
+  }
+}
+function __c3(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          projectId: S.String.pipe(T.Label()),
+          serviceAccountEmail: S.String.pipe(T.Label()),
+          keyId: S.String.pipe(T.Label()),
+          format: S.optional(S.String.pipe(T.Query())),
+        }).pipe(
+          T.Http({
+            method: "GET",
+            uri: "/v2/projects/{projectId}/service-accounts/{serviceAccountEmail}/keys/{keyId}",
+            code: 200,
+            baseUrl: "https://service-account.api.stackit.cloud",
+          }),
+        ),
+      ).annotate({ identifier: "GetServiceAccountKeyRequest" });
+    case 1:
+      return S.suspend(() =>
+        S.Struct({
+          aud: S.String,
+          iss: S.String,
+          kid: S.String,
+          sub: S.String,
+        }),
+      ).annotate({ identifier: "GetServiceAccountKeyResponseCredentials" });
+    case 2:
+      return S.suspend(() =>
+        S.Struct({
+          active: S.Boolean,
+          createdAt: S.String,
+          credentials: __S(13, __c3, 1),
+          id: S.String,
+          keyAlgorithm: S.String,
+          keyOrigin: S.String,
+          keyType: S.String,
+          publicKey: S.optional(S.String),
+          validUntil: S.optional(S.String),
+        }),
+      ).annotate({ identifier: "GetServiceAccountKeyResponse" });
+  }
+}
+function __c4(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          projectId: S.String.pipe(T.Label()),
+          serviceAccountEmail: S.String.pipe(T.Label()),
+        }).pipe(
+          T.Http({
+            method: "GET",
+            uri: "/v2/projects/{projectId}/service-accounts/{serviceAccountEmail}/federations",
+            code: 200,
+            baseUrl: "https://service-account.api.stackit.cloud",
+          }),
+        ),
+      ).annotate({ identifier: "ListFederatedIdentityProvidersRequest" });
+    case 1:
+      return S.Array(__S(46, __c11, 2));
+    case 2:
+      return S.suspend(() =>
+        S.Struct({
+          itemsPerPage: S.Number,
+          resources: __S(17, __c4, 1),
+          startIndex: S.Number,
+          totalResults: S.Number,
+        }),
+      ).annotate({ identifier: "FederatedListFederatedIdentityProvidersResponse" });
+  }
+}
+function __c5(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          projectId: S.String.pipe(T.Label()),
+          serviceAccountEmail: S.String.pipe(T.Label()),
+        }).pipe(
+          T.Http({
+            method: "GET",
+            uri: "/v2/projects/{projectId}/service-accounts/{serviceAccountEmail}/keys",
+            code: 200,
+            baseUrl: "https://service-account.api.stackit.cloud",
+          }),
+        ),
+      ).annotate({ identifier: "ListServiceAccountKeysRequest" });
+    case 1:
+      return S.Array(__S(24, __c6, 0));
+    case 2:
+      return S.suspend(() =>
+        S.Struct({
+          items: __S(21, __c5, 1),
+        }),
+      ).annotate({ identifier: "ListServiceAccountKeysResponse" });
+  }
+}
+function __c6(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          active: S.Boolean,
+          createdAt: S.String,
+          id: S.String,
+          keyAlgorithm: S.String,
+          keyOrigin: S.String,
+          keyType: S.String,
+          validUntil: S.optional(S.String),
+        }),
+      ).annotate({ identifier: "ServiceAccountKeyListResponse" });
+  }
+}
+function __c7(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          projectId: S.String.pipe(T.Label()),
+        }).pipe(
+          T.Http({
+            method: "GET",
+            uri: "/v2/projects/{projectId}/service-accounts",
+            code: 200,
+            baseUrl: "https://service-account.api.stackit.cloud",
+          }),
+        ),
+      ).annotate({ identifier: "ListServiceAccountsRequest" });
+    case 1:
+      return S.Array(__S(56, __c14, 0));
+    case 2:
+      return S.suspend(() =>
+        S.Struct({
+          items: __S(29, __c7, 1),
+        }),
+      ).annotate({ identifier: "ListServiceAccountsResponse" });
+  }
+}
+function __c8(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          projectId: S.String.pipe(T.Label()),
+          serviceAccountEmail: S.String.pipe(T.Label()),
+          federationId: S.String.pipe(T.Label()),
+          assertions: S.optional(__S(49, __c12, 1)),
+          issuer: S.String,
+          name: S.String,
+        }).pipe(
+          T.Http({
+            method: "PATCH",
+            uri: "/v2/projects/{projectId}/service-accounts/{serviceAccountEmail}/federations/{federationId}",
+            code: 200,
+            baseUrl: "https://service-account.api.stackit.cloud",
+          }),
+        ),
+      ).annotate({ identifier: "PartialUpdateServiceAccountFederatedIdentityProviderRequest" });
+  }
+}
+function __c9(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          projectId: S.String.pipe(T.Label()),
+          serviceAccountEmail: S.String.pipe(T.Label()),
+          keyId: S.String.pipe(T.Label()),
+          active: S.optional(S.Boolean),
+          validUntil: S.optional(S.String),
+        }).pipe(
+          T.Http({
+            method: "PATCH",
+            uri: "/v2/projects/{projectId}/service-accounts/{serviceAccountEmail}/keys/{keyId}",
+            code: 200,
+            baseUrl: "https://service-account.api.stackit.cloud",
+          }),
+        ),
+      ).annotate({ identifier: "PartialUpdateServiceAccountKeyRequest" });
+  }
+}
+function __c10(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          projectId: S.String.pipe(T.Label()),
+          serviceAccountEmail: S.String.pipe(T.Label()),
+          assertions: S.optional(__S(49, __c12, 1)),
+          issuer: S.String,
+          name: S.String,
+        }).pipe(
+          T.Http({
+            method: "POST",
+            uri: "/v2/projects/{projectId}/service-accounts/{serviceAccountEmail}/federations",
+            code: 200,
+            baseUrl: "https://service-account.api.stackit.cloud",
+          }),
+        ),
+      ).annotate({ identifier: "CreateFederatedIdentityProviderRequest" });
+  }
+}
+function __c11(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          item: S.String,
+          operator: S.String,
+          value: S.String,
+        }),
+      ).annotate({ identifier: "FederatedIdentityProviderAssertionsItem" });
+    case 1:
+      return S.Array(__S(44, __c11, 0));
+    case 2:
+      return S.suspend(() =>
+        S.Struct({
+          assertions: __S(45, __c11, 1),
+          createdAt: S.String,
+          id: S.optional(S.String),
+          issuer: S.String,
+          name: S.String,
+          updatedAt: S.String,
+        }),
+      ).annotate({ identifier: "FederatedIdentityProvider" });
+  }
+}
+function __c12(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          item: S.optional(S.String),
+          operator: S.optional(S.String),
+          value: S.optional(S.String),
+        }),
+      ).annotate({ identifier: "CreateFederatedIdentityProviderRequestAssertionsItem" });
+    case 1:
+      return S.Array(__S(48, __c12, 0));
+  }
+}
+function __c13(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          projectId: S.String.pipe(T.Label()),
+          name: S.String,
+        }).pipe(
+          T.Http({
+            method: "POST",
+            uri: "/v2/projects/{projectId}/service-accounts",
+            code: 200,
+            baseUrl: "https://service-account.api.stackit.cloud",
+          }),
+        ),
+      ).annotate({ identifier: "CreateServiceAccountRequest" });
+  }
+}
+function __c14(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          email: S.String,
+          id: S.String,
+          internal: S.Boolean,
+          projectId: S.String,
+        }),
+      ).annotate({ identifier: "ServiceAccount2" });
+  }
+}
+function __c15(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          projectId: S.String.pipe(T.Label()),
+          serviceAccountEmail: S.String.pipe(T.Label()),
+          algorithm: S.optional(S.String),
+          publicKey: S.optional(S.String),
+          validUntil: S.optional(S.String),
+        }).pipe(
+          T.Http({
+            method: "POST",
+            uri: "/v2/projects/{projectId}/service-accounts/{serviceAccountEmail}/keys",
+            code: 200,
+            baseUrl: "https://service-account.api.stackit.cloud",
+          }),
+        ),
+      ).annotate({ identifier: "CreateServiceAccountKeyRequest" });
+    case 1:
+      return S.suspend(() =>
+        S.Struct({
+          aud: S.String,
+          iss: S.String,
+          kid: S.String,
+          privateKey: S.optional(S.String.pipe(T.SensitiveValue({}))),
+          sub: S.String,
+          tokenEndpoint: S.optional(S.String),
+        }),
+      ).annotate({ identifier: "CreateServiceAccountKeyResponseCredentials" });
+    case 2:
+      return S.suspend(() =>
+        S.Struct({
+          active: S.Boolean,
+          createdAt: S.String,
+          credentials: __S(61, __c15, 1),
+          id: S.String,
+          keyAlgorithm: S.String,
+          keyOrigin: S.String,
+          keyType: S.String,
+          publicKey: S.String,
+          validUntil: S.optional(S.String),
+        }),
+      ).annotate({ identifier: "CreateServiceAccountKeyResponse" });
+  }
+}
+function __c16(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          assertion: S.optional(S.String),
+          grant_type: S.String,
+          refresh_token: S.optional(S.String.pipe(T.SensitiveValue({}))),
+        }).pipe(
+          T.Http({
+            method: "POST",
+            uri: "/token",
+            code: 200,
+            baseUrl: "https://service-account.api.stackit.cloud",
+          }),
+        ),
+      ).annotate({ identifier: "CreateShortLivedAccessTokenRequest" });
+    case 1:
+      return S.suspend(() =>
+        S.Struct({
+          access_token: S.String.pipe(T.SensitiveValue({})),
+          expires_in: S.Number,
+          refresh_token: S.String.pipe(T.SensitiveValue({})),
+          scope: S.String,
+          token_type: S.String,
+        }),
+      ).annotate({ identifier: "CreateShortLivedAccessTokenResponse" });
+  }
+}
+function __c17(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          projectId: S.String.pipe(T.Label()),
+          serviceAccountEmail: S.String.pipe(T.Label()),
+        }).pipe(
+          T.Http({
+            method: "DELETE",
+            uri: "/v2/projects/{projectId}/service-accounts/{serviceAccountEmail}",
+            code: 200,
+            baseUrl: "https://service-account.api.stackit.cloud",
+          }),
+        ),
+      ).annotate({ identifier: "DeleteServiceAccountRequest" });
+  }
+}
+function __c18(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() => S.Struct({})).annotate({ identifier: "DeleteServiceAccountResponse" });
+  }
+}
+function __c19(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          projectId: S.String.pipe(T.Label()),
+          serviceAccountEmail: S.String.pipe(T.Label()),
+          keyId: S.String.pipe(T.Label()),
+        }).pipe(
+          T.Http({
+            method: "DELETE",
+            uri: "/v2/projects/{projectId}/service-accounts/{serviceAccountEmail}/keys/{keyId}",
+            code: 200,
+            baseUrl: "https://service-account.api.stackit.cloud",
+          }),
+        ),
+      ).annotate({ identifier: "DeleteServiceAccountKeyRequest" });
+  }
+}
+// Schema table: entry i is schema j of builder f, made on first reach.
+function __S(i: number, f: (j: number) => unknown, j: number): any {
+  return (__s[i] ??= __L.at(f, j));
+}