@distilled.cloud/stackit 1.0.0-rc.14 → 1.0.0-rc.16

package/lib/services/authorization.js

@@ -1,323 +1,76 @@
 import * as API from "@distilled.cloud/core/api";
 import * as C from "@distilled.cloud/core/category";
 // AUTO-GENERATED by scripts/generate.ts from .generated-specs (specs/spec-mirror-stackit). Do not edit.
-import * as S from "@distilled.cloud/core/schema";
+import * as S from "@distilled.cloud/core/schema-lite";
+import * as __L from "@distilled.cloud/core/schema-lite";
 import { UnknownStackitError } from "../errors.js";
 import { StackitProtocol } from "../protocol.js";
 import * as Retry from "../retry.js";
 import * as T from "../traits.js";
-export class BadRequest extends /*@__PURE__*/ /*@__PURE__*/ T.applyErrorMatchers(
-/*@__PURE__*/ S.TaggedError()("BadRequest", {
-    code: S.Number,
-    message: S.String,
-}).pipe(C.withBadRequestError), [{ status: 400 }]) {
-}
-export class Forbidden extends /*@__PURE__*/ /*@__PURE__*/ T.applyErrorMatchers(
-/*@__PURE__*/ S.TaggedError()("Forbidden", {
-    code: S.Number,
-    message: S.String,
-}).pipe(C.withAuthError), [{ status: 403 }]) {
-}
-export const Member = /*@__PURE__*/ S.suspend(() => S.Struct({
-    role: S.String,
-    subject: S.String,
-})).annotate({ identifier: "Member" });
-export const AddMembersRequestMembersList = /*@__PURE__*/ S.Array(Member);
-export const AddMembersRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
-    resourceId: S.String.pipe(T.Label()),
-    members: AddMembersRequestMembersList,
-    resourceType: S.String,
-}).pipe(T.Http({
-    method: "PATCH",
-    uri: "/v2/{resourceId}/members",
-    code: 200,
-    baseUrl: "https://authorization.api.stackit.cloud",
-}))).annotate({ identifier: "AddMembersRequest" });
-export const MembersResponseMembersList = /*@__PURE__*/ S.Array(Member);
-export const Zookie = /*@__PURE__*/ S.suspend(() => S.Struct({
-    zookie: S.optional(S.String),
-})).annotate({ identifier: "Zookie" });
-export const MembersResponse = /*@__PURE__*/ S.suspend(() => S.Struct({
-    members: MembersResponseMembersList,
-    resourceId: S.String,
-    resourceType: S.String,
-    writtenAt: S.optional(Zookie),
-})).annotate({ identifier: "MembersResponse" });
-export const PermissionRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
-    name: S.String,
-})).annotate({ identifier: "PermissionRequest" });
-export const AddRoleRequestPermissionsList = /*@__PURE__*/ S.Array(PermissionRequest);
-export const AddRoleRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
-    resourceType: S.String.pipe(T.Label()),
-    resourceId: S.String.pipe(T.Label()),
-    description: S.String,
-    name: S.String,
-    permissions: AddRoleRequestPermissionsList,
-}).pipe(T.Http({
-    method: "POST",
-    uri: "/v2/{resourceType}/{resourceId}/roles",
-    code: 200,
-    baseUrl: "https://authorization.api.stackit.cloud",
-}))).annotate({ identifier: "AddRoleRequest" });
-export const Permission = /*@__PURE__*/ S.suspend(() => S.Struct({
-    description: S.String,
-    name: S.String,
-})).annotate({ identifier: "Permission" });
-export const RolePermissionsList = /*@__PURE__*/ S.Array(Permission);
-export const Role = /*@__PURE__*/ S.suspend(() => S.Struct({
-    description: S.String,
-    etag: S.optional(S.String),
-    id: S.optional(S.String),
-    name: S.String,
-    permissions: RolePermissionsList,
-})).annotate({ identifier: "Role" });
-export const AddCustomRoleResponse = /*@__PURE__*/ S.suspend(() => S.Struct({
-    resourceId: S.String,
-    resourceType: S.String,
-    role: Role,
-})).annotate({ identifier: "AddCustomRoleResponse" });
-export const DeleteRoleRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
-    resourceType: S.String.pipe(T.Label()),
-    resourceId: S.String.pipe(T.Label()),
-    roleId: S.String.pipe(T.Label()),
-    etag: S.optional(S.String.pipe(T.Query())),
-}).pipe(T.Http({
-    method: "DELETE",
-    uri: "/v2/{resourceType}/{resourceId}/roles/{roleId}",
-    code: 200,
-    baseUrl: "https://authorization.api.stackit.cloud",
-}))).annotate({ identifier: "DeleteRoleRequest" });
-export const DeleteRoleResponse = /*@__PURE__*/ S.suspend(() => S.Struct({
-    writtenAt: Zookie,
-})).annotate({ identifier: "DeleteRoleResponse" });
-export const GetRoleRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
-    resourceType: S.String.pipe(T.Label()),
-    resourceId: S.String.pipe(T.Label()),
-    roleId: S.String.pipe(T.Label()),
-}).pipe(T.Http({
-    method: "GET",
-    uri: "/v2/{resourceType}/{resourceId}/roles/{roleId}",
-    code: 200,
-    baseUrl: "https://authorization.api.stackit.cloud",
-}))).annotate({ identifier: "GetRoleRequest" });
-export const GetRoleResponse = /*@__PURE__*/ S.suspend(() => S.Struct({
-    resourceId: S.String,
-    resourceType: S.String,
-    role: Role,
-})).annotate({ identifier: "GetRoleResponse" });
-export const ListMembersRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
-    resourceType: S.String.pipe(T.Label()),
-    resourceId: S.String.pipe(T.Label()),
-    subject: S.optional(S.String.pipe(T.Query())),
-}).pipe(T.Http({
-    method: "GET",
-    uri: "/v2/{resourceType}/{resourceId}/members",
-    code: 200,
-    baseUrl: "https://authorization.api.stackit.cloud",
-}))).annotate({ identifier: "ListMembersRequest" });
-export const ListMembersResponseMembersList = /*@__PURE__*/ S.Array(Member);
-export const ListMembersResponse = /*@__PURE__*/ S.suspend(() => S.Struct({
-    members: ListMembersResponseMembersList,
-    resourceId: S.String,
-    resourceType: S.String,
-})).annotate({ identifier: "ListMembersResponse" });
-export const ListPermissionsRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
-    resourceType: S.optional(S.String.pipe(T.Query())),
-}).pipe(T.Http({
-    method: "GET",
-    uri: "/v2/permissions",
-    code: 200,
-    baseUrl: "https://authorization.api.stackit.cloud",
-}))).annotate({ identifier: "ListPermissionsRequest" });
-export const ListPermissionsResponsePermissionsList = /*@__PURE__*/ S.Array(Permission);
-export const ListPermissionsResponse = /*@__PURE__*/ S.suspend(() => S.Struct({
-    permissions: ListPermissionsResponsePermissionsList,
-})).annotate({ identifier: "ListPermissionsResponse" });
-export const ListRolesRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
-    resourceType: S.String.pipe(T.Label()),
-    resourceId: S.String.pipe(T.Label()),
-}).pipe(T.Http({
-    method: "GET",
-    uri: "/v2/{resourceType}/{resourceId}/roles",
-    code: 200,
-    baseUrl: "https://authorization.api.stackit.cloud",
-}))).annotate({ identifier: "ListRolesRequest" });
-export const RolesResponseRolesList = /*@__PURE__*/ S.Array(Role);
-export const RolesResponse = /*@__PURE__*/ S.suspend(() => S.Struct({
-    resourceId: S.String,
-    resourceType: S.String,
-    roles: RolesResponseRolesList,
-})).annotate({ identifier: "RolesResponse" });
-export const ListUserMembershipsRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
-    email: S.String.pipe(T.Label()),
-    resourceType: S.optional(S.String.pipe(T.Query())),
-    resourceId: S.optional(S.String.pipe(T.Query())),
-    parentResourceId: S.optional(S.String.pipe(T.Query())),
-}).pipe(T.Http({
-    method: "GET",
-    uri: "/v2/users/{email}/memberships",
-    code: 200,
-    baseUrl: "https://authorization.api.stackit.cloud",
-}))).annotate({
-    identifier: "ListUserMembershipsRequest",
-});
-export const UserMembership = /*@__PURE__*/ S.suspend(() => S.Struct({
-    resourceId: S.String,
-    resourceType: S.String,
-    role: S.String,
-    subject: S.String,
-})).annotate({ identifier: "UserMembership" });
-export const ListUserMembershipsResponseItemsList = /*@__PURE__*/ S.Array(UserMembership);
-export const ListUserMembershipsResponse = /*@__PURE__*/ S.suspend(() => S.Struct({
-    items: ListUserMembershipsResponseItemsList,
-})).annotate({
-    identifier: "ListUserMembershipsResponse",
+const __0 = __L.at;
+const __1 = S.String;
+const __2 = S.Array;
+const __3 = T.Http;
+const __4 = T.Label;
+const __5 = T.Query;
+const __6 = S.optional;
+const __7 = S.Struct;
+const __8 = S.suspend;
+const __9 = S.Boolean;
+const __10 = S.Number;
+const __11 = S.TaggedError;
+const __12 = T.applyErrorMatchers;
+export const BadRequest = /*@__PURE__*/ API.error(function BadRequest(i) {
+  return API.newError(i, new.target, ['$5($4()("BadRequest",{code:$2,message:$3}).pipe($1),[{status:400}])', [__0, C.withBadRequestError, __10, __1, __11, __12]]);
 });
-export const ListUserPermissionsRequestPermissionsList = /*@__PURE__*/ S.Array(S.String);
-export const ListUserPermissionsRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
-    email: S.String.pipe(T.Label()),
-    resource: S.optional(S.String.pipe(T.Query())),
-    resourceType: S.optional(S.String.pipe(T.Query())),
-    permissions: S.optional(ListUserPermissionsRequestPermissionsList.pipe(T.Query())),
-}).pipe(T.Http({
-    method: "GET",
-    uri: "/v2/users/{email}/permissions",
-    code: 200,
-    baseUrl: "https://authorization.api.stackit.cloud",
-}))).annotate({
-    identifier: "ListUserPermissionsRequest",
+export const Forbidden = /*@__PURE__*/ API.error(function Forbidden(i) {
+  return API.newError(i, new.target, ['$5($4()("Forbidden",{code:$2,message:$3}).pipe($1),[{status:403}])', [__0, C.withAuthError, __10, __1, __11, __12]]);
 });
-export const ExistingPermission = Permission;
-export const UserPermissionPermissionsList = /*@__PURE__*/ S.Array(Permission);
-export const UserPermission = /*@__PURE__*/ S.suspend(() => S.Struct({
-    permissions: UserPermissionPermissionsList,
-    resourceId: S.String,
-    resourceType: S.String,
-})).annotate({ identifier: "UserPermission" });
-export const ListUserPermissionsResponseItemsList = /*@__PURE__*/ S.Array(UserPermission);
-export const ListUserPermissionsResponse = /*@__PURE__*/ S.suspend(() => S.Struct({
-    items: ListUserPermissionsResponseItemsList,
-})).annotate({
-    identifier: "ListUserPermissionsResponse",
-});
-export const RemoveMembersRequestMembersList = /*@__PURE__*/ S.Array(Member);
-export const RemoveMembersRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
-    resourceId: S.String.pipe(T.Label()),
-    forceRemove: S.optional(S.Boolean),
-    members: RemoveMembersRequestMembersList,
-    resourceType: S.String,
-}).pipe(T.Http({
-    method: "POST",
-    uri: "/v2/{resourceId}/members/remove",
-    code: 200,
-    baseUrl: "https://authorization.api.stackit.cloud",
-}))).annotate({ identifier: "RemoveMembersRequest" });
-export const UpdateRoleRequestPermissionsList = /*@__PURE__*/ S.Array(PermissionRequest);
-export const UpdateRoleRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
-    resourceType: S.String.pipe(T.Label()),
-    resourceId: S.String.pipe(T.Label()),
-    roleId: S.String.pipe(T.Label()),
-    description: S.String,
-    etag: S.optional(S.String),
-    name: S.String,
-    permissions: UpdateRoleRequestPermissionsList,
-}).pipe(T.Http({
-    method: "PUT",
-    uri: "/v2/{resourceType}/{resourceId}/roles/{roleId}",
-    code: 200,
-    baseUrl: "https://authorization.api.stackit.cloud",
-}))).annotate({ identifier: "UpdateRoleRequest" });
-export const UpdateRoleResponse = /*@__PURE__*/ S.suspend(() => S.Struct({
-    resourceId: S.String,
-    resourceType: S.String,
-    role: Role,
-})).annotate({ identifier: "UpdateRoleResponse" });
-/** Add members to a resource Add members to the given resource with specified roles. */
-export const addMembers = /*@__PURE__*/ API.make(() => ({
-    input: AddMembersRequest,
-    output: MembersResponse,
-    errors: [BadRequest, Forbidden, UnknownStackitError],
-    protocol: StackitProtocol,
-    retry: Retry.Retry,
-}));
-/** Add a new role Add new, user specified roles to a resource, and bind permissions to them. Permissions are predefined. */
-export const addRole = /*@__PURE__*/ API.make(() => ({
-    input: AddRoleRequest,
-    output: AddCustomRoleResponse,
-    errors: [BadRequest, Forbidden, UnknownStackitError],
-    protocol: StackitProtocol,
-    retry: Retry.Retry,
-}));
-/** Delete an existing role Delete a custom role by ID. */
-export const deleteRole = /*@__PURE__*/ API.make(() => ({
-    input: DeleteRoleRequest,
-    output: DeleteRoleResponse,
-    errors: [BadRequest, Forbidden, UnknownStackitError],
-    protocol: StackitProtocol,
-    retry: Retry.Retry,
-}));
-/** Get an existing role Get a custom role by ID. */
-export const getRole = /*@__PURE__*/ API.make(() => ({
-    input: GetRoleRequest,
-    output: GetRoleResponse,
-    errors: [BadRequest, Forbidden, UnknownStackitError],
-    protocol: StackitProtocol,
-    retry: Retry.Retry,
-}));
-/** Get members to a resource List members of the given resource. */
-export const listMembers = /*@__PURE__*/ API.make(() => ({
-    input: ListMembersRequest,
-    output: ListMembersResponse,
-    errors: [BadRequest, Forbidden, UnknownStackitError],
-    protocol: StackitProtocol,
-    retry: Retry.Retry,
-}));
-/** Get available permissions Get available permissions */
-export const listPermissions = /*@__PURE__*/ API.make(() => ({
-    input: ListPermissionsRequest,
-    output: ListPermissionsResponse,
-    errors: [BadRequest, Forbidden, UnknownStackitError],
-    protocol: StackitProtocol,
-    retry: Retry.Retry,
-}));
-/** Get roles and permissions of a resource Get roles and permissions of a resource */
-export const listRoles = /*@__PURE__*/ API.make(() => ({
-    input: ListRolesRequest,
-    output: RolesResponse,
-    errors: [BadRequest, Forbidden, UnknownStackitError],
-    protocol: StackitProtocol,
-    retry: Retry.Retry,
-}));
-/** List memberships of a user List memberships of a user. An administrative access is needed to list any user's memberships, while the user can do it on his/her own email. You can use filters to scope the request to a project/folder/organization. In this case -if caller is not the subject-, owner permissions are required. Because of hierarchical role bindings, the user might have permissions on more resources. */
-export const listUserMemberships = /*@__PURE__*/ API.make(() => ({
-    input: ListUserMembershipsRequest,
-    output: ListUserMembershipsResponse,
-    errors: [BadRequest, Forbidden, UnknownStackitError],
-    protocol: StackitProtocol,
-    retry: Retry.Retry,
-}));
-/** List permissions of a user List permissions of a user. An administrative access is needed to list any user's permissions, while the user can do it on his/her own email. Lists every resource of the given type where the user has any effective permissions. When requested, also lists why the permission is present. */
-export const listUserPermissions = /*@__PURE__*/ API.make(() => ({
-    input: ListUserPermissionsRequest,
-    output: ListUserPermissionsResponse,
-    errors: [BadRequest, Forbidden, UnknownStackitError],
-    protocol: StackitProtocol,
-    retry: Retry.Retry,
-}));
-/** Remove members from a resource Remove members from the given resource with specified roles. */
-export const removeMembers = /*@__PURE__*/ API.make(() => ({
-    input: RemoveMembersRequest,
-    output: MembersResponse,
-    errors: [BadRequest, Forbidden, UnknownStackitError],
-    protocol: StackitProtocol,
-    retry: Retry.Retry,
-}));
-/** Update an existing role Update a custom role by ID. */
-export const updateRole = /*@__PURE__*/ API.make(() => ({
-    input: UpdateRoleRequest,
-    output: UpdateRoleResponse,
-    errors: [BadRequest, Forbidden, UnknownStackitError],
-    protocol: StackitProtocol,
-    retry: Retry.Retry,
-}));
-//# sourceMappingURL=authorization.js.map
+
+export const addMembers = /*@__PURE__*/ API.op((i) => i === API.D ? ['{input:#1,output:#7:0,errors:[$8,$9,$10],protocol:$11,retry:$12};$6(>2)@"AddMembersRequest";$5({resourceId:$3.pipe($2()),members:#4:1,resourceType:$3}).pipe($1({method:"PATCH",uri:"/v2/{resourceId}/members",code:200,baseUrl:"https://authorization.api.stackit.cloud"}))', [__0, __3, __4, __1, __d2, __7, __8, __d0, BadRequest, Forbidden, UnknownStackitError, StackitProtocol, Retry.Retry]] : API.call(addMembers, i));
+
+export const addRole = /*@__PURE__*/ API.op((i) => i === API.D ? ['{input:#1,output:#7:0,errors:[$8,$9,$10],protocol:$11,retry:$12};$6(>2)@"AddRoleRequest";$5({resourceType:$3.pipe($2()),resourceId:$3.pipe($2()),description:$3,name:$3,permissions:#4:1}).pipe($1({method:"POST",uri:"/v2/{resourceType}/{resourceId}/roles",code:200,baseUrl:"https://authorization.api.stackit.cloud"}))', [__0, __3, __4, __1, __d3, __7, __8, __d4, BadRequest, Forbidden, UnknownStackitError, StackitProtocol, Retry.Retry]] : API.call(addRole, i));
+
+export const deleteRole = /*@__PURE__*/ API.op((i) => i === API.D ? ['{input:#1,output:#2,errors:[$9,$10,$11],protocol:$12,retry:$13};$7(>3)@"DeleteRoleRequest";$7(>4)@"DeleteRoleResponse";$6({resourceType:$3.pipe($2()),resourceId:$3.pipe($2()),roleId:$3.pipe($2()),etag:$5($3.pipe($4()))}).pipe($1({method:"DELETE",uri:"/v2/{resourceType}/{resourceId}/roles/{roleId}",code:200,baseUrl:"https://authorization.api.stackit.cloud"}));$6({writtenAt:#8:0})', [__0, __3, __4, __1, __5, __6, __7, __8, __d1, BadRequest, Forbidden, UnknownStackitError, StackitProtocol, Retry.Retry]] : API.call(deleteRole, i));
+
+export const getRole = /*@__PURE__*/ API.op((i) => i === API.D ? ['{input:#1,output:#6:0,errors:[$7,$8,$9],protocol:$10,retry:$11};$5(>2)@"GetRoleRequest";$4({resourceType:$3.pipe($2()),resourceId:$3.pipe($2()),roleId:$3.pipe($2())}).pipe($1({method:"GET",uri:"/v2/{resourceType}/{resourceId}/roles/{roleId}",code:200,baseUrl:"https://authorization.api.stackit.cloud"}))', [__0, __3, __4, __1, __7, __8, __d4, BadRequest, Forbidden, UnknownStackitError, StackitProtocol, Retry.Retry]] : API.call(getRole, i));
+
+export const listMembers = /*@__PURE__*/ API.op((i) => i === API.D ? ['{input:#1,output:#2,errors:[$9,$10,$11],protocol:$12,retry:$13};$7(>3)@"ListMembersRequest";$7(>4)@"ListMembersResponse";$6({resourceType:$3.pipe($2()),resourceId:$3.pipe($2()),subject:$5($3.pipe($4()))}).pipe($1({method:"GET",uri:"/v2/{resourceType}/{resourceId}/members",code:200,baseUrl:"https://authorization.api.stackit.cloud"}));$6({members:#8:1,resourceId:$3,resourceType:$3})', [__0, __3, __4, __1, __5, __6, __7, __8, __d2, BadRequest, Forbidden, UnknownStackitError, StackitProtocol, Retry.Retry]] : API.call(listMembers, i));
+
+export const listPermissions = /*@__PURE__*/ API.op((i) => i === API.D ? ['{input:#1,output:#2,errors:[$8,$9,$10],protocol:$11,retry:$12};$6(>3)@"ListPermissionsRequest";$6(>4)@"ListPermissionsResponse";$5({resourceType:$4($3.pipe($2()))}).pipe($1({method:"GET",uri:"/v2/permissions",code:200,baseUrl:"https://authorization.api.stackit.cloud"}));$5({permissions:#7:1})', [__0, __3, __5, __1, __6, __7, __8, __d5, BadRequest, Forbidden, UnknownStackitError, StackitProtocol, Retry.Retry]] : API.call(listPermissions, i));
+
+export const listRoles = /*@__PURE__*/ API.op((i) => i === API.D ? ['{input:#1,output:#3,errors:[$8,$9,$10],protocol:$11,retry:$12};$5(>4)@"ListRolesRequest";$7(#6:0);$5(>5)@"RolesResponse";$4({resourceType:$3.pipe($2()),resourceId:$3.pipe($2())}).pipe($1({method:"GET",uri:"/v2/{resourceType}/{resourceId}/roles",code:200,baseUrl:"https://authorization.api.stackit.cloud"}));$4({resourceId:$3,resourceType:$3,roles:#2})', [__0, __3, __4, __1, __7, __8, __d6, __2, BadRequest, Forbidden, UnknownStackitError, StackitProtocol, Retry.Retry]] : API.call(listRoles, i));
+
+export const listUserMemberships = /*@__PURE__*/ API.op((i) => i === API.D ? API.named("UserMembership", '{input:#1,output:#4,errors:[$9,$10,$11],protocol:$12,retry:$13};$7(>5)@"List%sRequest";$7(>6)@"%";$8(#2);$7(>7)@"List%sResponse";$6({email:$3.pipe($2()),resourceType:$5($3.pipe($4())),resourceId:$5($3.pipe($4())),parentResourceId:$5($3.pipe($4()))}).pipe($1({method:"GET",uri:"/v2/users/{email}/memberships",code:200,baseUrl:"https://authorization.api.stackit.cloud"}));$6({resourceId:$3,resourceType:$3,role:$3,subject:$3});$6({items:#3})', [__0, __3, __4, __1, __5, __6, __7, __8, __2, BadRequest, Forbidden, UnknownStackitError, StackitProtocol, Retry.Retry]) : API.call(listUserMemberships, i));
+
+export const listUserPermissions = /*@__PURE__*/ API.op((i) => i === API.D ? API.named("UserPermission", '{input:#2,output:#5,errors:[$10,$11,$12],protocol:$13,retry:$14};$2($1);$8(>6)@"List%sRequest";$8(>7)@"%";$2(#3);$8(>8)@"List%sResponse";$7({email:$1.pipe($4()),resource:$6($1.pipe($5())),resourceType:$6($1.pipe($5())),permissions:$6(#1.pipe($5()))}).pipe($3({method:"GET",uri:"/v2/users/{email}/permissions",code:200,baseUrl:"https://authorization.api.stackit.cloud"}));$7({permissions:#9:1,resourceId:$1,resourceType:$1});$7({items:#4})', [__0, __1, __2, __3, __4, __5, __6, __7, __8, __d5, BadRequest, Forbidden, UnknownStackitError, StackitProtocol, Retry.Retry]) : API.call(listUserPermissions, i));
+
+export const removeMembers = /*@__PURE__*/ API.op((i) => i === API.D ? ['{input:#1,output:#9:0,errors:[$10,$11,$12],protocol:$13,retry:$14};$8(>2)@"RemoveMembersRequest";$7({resourceId:$3.pipe($2()),forceRemove:$5($4),members:#6:1,resourceType:$3}).pipe($1({method:"POST",uri:"/v2/{resourceId}/members/remove",code:200,baseUrl:"https://authorization.api.stackit.cloud"}))', [__0, __3, __4, __1, __9, __6, __d2, __7, __8, __d0, BadRequest, Forbidden, UnknownStackitError, StackitProtocol, Retry.Retry]] : API.call(removeMembers, i));
+
+export const updateRole = /*@__PURE__*/ API.op((i) => i === API.D ? ['{input:#1,output:#8:0,errors:[$9,$10,$11],protocol:$12,retry:$13};$7(>2)@"UpdateRoleRequest";$6({resourceType:$3.pipe($2()),resourceId:$3.pipe($2()),roleId:$3.pipe($2()),description:$3,etag:$4($3),name:$3,permissions:#5:1}).pipe($1({method:"PUT",uri:"/v2/{resourceType}/{resourceId}/roles/{roleId}",code:200,baseUrl:"https://authorization.api.stackit.cloud"}))', [__0, __3, __4, __1, __6, __d3, __7, __8, __d4, BadRequest, Forbidden, UnknownStackitError, StackitProtocol, Retry.Retry]] : API.call(updateRole, i));
+// Schema builders: each runs one schema initializer, on that schema's first use.
+// Schema table: entry i is schema j of builder f, made on first reach.
+
+
+// Shared schema data (see `op` in core/api).
+function __d0() {
+  return ['$6(>1)@"MembersResponse";$5({members:#1:1,resourceId:$2,resourceType:$2,writtenAt:$4(#3:0)})', [__0, __d2, __1, __d1, __6, __7, __8]];
+}
+function __d1() {
+  return ['$4(>1)@"Zookie";$3({zookie:$2($1)})', [__0, __1, __6, __7, __8]];
+}
+function __d2() {
+  return ['$3(>2)@"Member";$4(#0);$2({role:$1,subject:$1})', [__0, __1, __7, __8, __2]];
+}
+function __d3() {
+  return ['$3(>2)@"PermissionRequest";$4(#0);$2({name:$1})', [__0, __1, __7, __8, __2]];
+}
+function __d4() {
+  return ['$4(>1)@"AddCustomRoleResponse";$3({resourceId:$1,resourceType:$1,role:#2:0})', [__0, __1, __d6, __7, __8]];
+}
+function __d5() {
+  return ['$3(>2)@"Permission";$4(#0);$2({description:$1,name:$1})', [__0, __1, __7, __8, __2]];
+}
+function __d6() {
+  return ['$5(>1)@"Role";$4({description:$1,etag:$2($1),id:$2($1),name:$1,permissions:#3:1})', [__0, __1, __6, __d5, __7, __8]];
+}

package/lib/services/automation.d.ts

@@ -1,31 +1,31 @@
 import * as API from "@distilled.cloud/core/api";
-import * as S from "@distilled.cloud/core/schema";
+import * as S from "@distilled.cloud/core/schema-lite";
 import { type StackitOpError, type StackitOpContext } from "../protocol.ts";
 export type { StackitOpError, StackitOpContext };
-declare const BadRequest_base: S.Class<BadRequest, S.TaggedStruct<"BadRequest", {
+declare const BadRequest_base: S.TaggedErrorClass<"BadRequest", {
     readonly code: any;
     readonly message: any;
-}>, import("effect/Cause").YieldableError> & (new (...args: any[]) => {
+}> & (new (...args: any[]) => {
     "@distilled.cloud/error/categories": {
         BadRequestError: true;
     };
 });
 export declare class BadRequest extends /*@__PURE__*/ BadRequest_base {
 }
-declare const Forbidden_base: S.Class<Forbidden, S.TaggedStruct<"Forbidden", {
+declare const Forbidden_base: S.TaggedErrorClass<"Forbidden", {
     readonly code: any;
     readonly message: any;
-}>, import("effect/Cause").YieldableError> & (new (...args: any[]) => {
+}> & (new (...args: any[]) => {
     "@distilled.cloud/error/categories": {
         AuthError: true;
     };
 });
 export declare class Forbidden extends /*@__PURE__*/ Forbidden_base {
 }
-declare const NotFound_base: S.Class<NotFound, S.TaggedStruct<"NotFound", {
+declare const NotFound_base: S.TaggedErrorClass<"NotFound", {
     readonly code: any;
     readonly message: any;
-}>, import("effect/Cause").YieldableError> & (new (...args: any[]) => {
+}> & (new (...args: any[]) => {
     "@distilled.cloud/error/categories": {
         BadRequestError: true;
     };
@@ -35,16 +35,13 @@ export declare class NotFound extends /*@__PURE__*/ NotFound_base {
 export interface VolumeAutomationInput {
     kind: string;
 }
-export declare const VolumeAutomationInput: S.Schema<VolumeAutomationInput>;
 export interface AutomationScheduleTrigger {
     /** An rrule (Recurrence Rule) is a standardized string format used in iCalendar (RFC 5545) to define repeating events, and you can generate one by using a dedicated library or by using online generator tools to specify parameters like frequency, interval, and end dates */
     rrule: string;
 }
-export declare const AutomationScheduleTrigger: S.Schema<AutomationScheduleTrigger>;
 export interface AutomationTriggers {
     schedule?: AutomationScheduleTrigger | null;
 }
-export declare const AutomationTriggers: S.Schema<AutomationTriggers>;
 export interface CreateVolumeAutomationRequest {
     /** project Id */
     projectId: string;
@@ -56,20 +53,15 @@ export interface CreateVolumeAutomationRequest {
     templateId: string;
     triggers?: AutomationTriggers | null;
 }
-export declare const CreateVolumeAutomationRequest: S.Schema<CreateVolumeAutomationRequest>;
 export type VolumeOutputStepResult = VolumeAutomationInput;
-export declare const VolumeOutputStepResult: S.Schema<VolumeAutomationInput>;
 export interface VolumeOutputStep {
     name: string;
     result?: VolumeAutomationInput;
 }
-export declare const VolumeOutputStep: S.Schema<VolumeOutputStep>;
 export type VolumeOutputStepsList = Array<VolumeOutputStep>;
-export declare const VolumeOutputStepsList: S.Schema<VolumeOutputStepsList>;
 export interface VolumeOutput {
     steps?: VolumeOutputStepsList;
 }
-export declare const VolumeOutput: S.Schema<VolumeOutput>;
 export interface VolumeAutomation {
     createTime: string;
     description?: string;
@@ -81,7 +73,6 @@ export interface VolumeAutomation {
     triggers?: AutomationTriggers | null;
     updateTime: string;
 }
-export declare const VolumeAutomation: S.Schema<VolumeAutomation>;
 export interface CreateVolumeExecutionRequest {
     /** project Id */
     projectId: string;
@@ -90,7 +81,6 @@ export interface CreateVolumeExecutionRequest {
     /** automation Id */
     automationId: string;
 }
-export declare const CreateVolumeExecutionRequest: S.Schema<CreateVolumeExecutionRequest>;
 export interface VolumeExecutionAutomation {
     createTime: string;
     description?: string;
@@ -101,29 +91,22 @@ export interface VolumeExecutionAutomation {
     triggers?: AutomationTriggers | null;
     updateTime: string;
 }
-export declare const VolumeExecutionAutomation: S.Schema<VolumeExecutionAutomation>;
 export type VolumeExecutionOutputStepStatus = "PENDING" | "RUNNING" | "FAILED" | "SUCCESSFUL";
-export declare const VolumeExecutionOutputStepStatus: any;
 export interface VolumeExecutionOutputStep {
     message?: string;
     name: string;
     result?: VolumeAutomationInput;
     status: VolumeExecutionOutputStepStatus;
 }
-export declare const VolumeExecutionOutputStep: S.Schema<VolumeExecutionOutputStep>;
 export type VolumeExecutionOutputStepsList = Array<VolumeExecutionOutputStep>;
-export declare const VolumeExecutionOutputStepsList: S.Schema<VolumeExecutionOutputStepsList>;
 export interface VolumeExecutionOutput {
     steps?: VolumeExecutionOutputStepsList;
 }
-export declare const VolumeExecutionOutput: S.Schema<VolumeExecutionOutput>;
 export interface VolumeExecutionDetails {
     config: VolumeExecutionAutomation;
     output?: VolumeExecutionOutput;
 }
-export declare const VolumeExecutionDetails: S.Schema<VolumeExecutionDetails>;
 export type VolumeExecutionResponseStatus = "PENDING" | "RUNNING" | "COMPLETED" | "FAILED" | "TERMINATED";
-export declare const VolumeExecutionResponseStatus: any;
 export interface VolumeExecutionResponse {
     automation?: VolumeExecutionDetails;
     createTime: string;
@@ -131,7 +114,6 @@ export interface VolumeExecutionResponse {
     id: string;
     status: VolumeExecutionResponseStatus;
 }
-export declare const VolumeExecutionResponse: S.Schema<VolumeExecutionResponse>;
 export interface DeleteVolumeAutomationRequest {
     /** project Id */
     projectId: string;
@@ -140,10 +122,8 @@ export interface DeleteVolumeAutomationRequest {
     /** automation Id */
     automationId: string;
 }
-export declare const DeleteVolumeAutomationRequest: S.Schema<DeleteVolumeAutomationRequest>;
 export interface DeleteVolumeAutomationResponse {
 }
-export declare const DeleteVolumeAutomationResponse: S.Schema<DeleteVolumeAutomationResponse>;
 export interface GetVolumeAutomationRequest {
     /** project Id */
     projectId: string;
@@ -152,7 +132,6 @@ export interface GetVolumeAutomationRequest {
     /** automation Id */
     automationId: string;
 }
-export declare const GetVolumeAutomationRequest: S.Schema<GetVolumeAutomationRequest>;
 export interface GetVolumeExecutionRequest {
     /** project Id */
     projectId: string;
@@ -163,7 +142,6 @@ export interface GetVolumeExecutionRequest {
     /** execution Id */
     executionId: string;
 }
-export declare const GetVolumeExecutionRequest: S.Schema<GetVolumeExecutionRequest>;
 export interface GetVolumeTemplateRequest {
     /** project Id */
     projectId: string;
@@ -172,13 +150,10 @@ export interface GetVolumeTemplateRequest {
     /** templateId Id */
     templateId: string;
 }
-export declare const GetVolumeTemplateRequest: S.Schema<GetVolumeTemplateRequest>;
 export type VolumeTemplateAutomationInputKind = "VolumeRecoveryPointManagement";
-export declare const VolumeTemplateAutomationInputKind: any;
 export interface VolumeTemplateAutomationInput {
     kind: VolumeTemplateAutomationInputKind;
 }
-export declare const VolumeTemplateAutomationInput: S.Schema<VolumeTemplateAutomationInput>;
 export interface GetVolumeTemplateResponse {
     createTime: string;
     description: string;
@@ -187,7 +162,6 @@ export interface GetVolumeTemplateResponse {
     name: string;
     output?: VolumeOutput;
 }
-export declare const GetVolumeTemplateResponse: S.Schema<GetVolumeTemplateResponse>;
 export interface ListVolumeAutomationsRequest {
     /** project Id */
     projectId: string;
@@ -198,7 +172,6 @@ export interface ListVolumeAutomationsRequest {
     /** A page token, received from a previous list call. Provide this to retrieve the subsequent page. */
     pageToken?: string;
 }
-export declare const ListVolumeAutomationsRequest: S.Schema<ListVolumeAutomationsRequest>;
 export interface ListAutomationsItem {
     createTime: string;
     description?: string;
@@ -208,15 +181,12 @@ export interface ListAutomationsItem {
     triggers?: AutomationTriggers | null;
     updateTime: string;
 }
-export declare const ListAutomationsItem: S.Schema<ListAutomationsItem>;
 export type ListAutomationsResponseItemsList = Array<ListAutomationsItem>;
-export declare const ListAutomationsResponseItemsList: S.Schema<ListAutomationsResponseItemsList>;
 export interface ListAutomationsResponse {
     items: ListAutomationsResponseItemsList;
     /** A token that can be sent as `page_token` to retrieve the next page. If this field is omitted, there are no subsequent pages. */
     nextPageToken?: string;
 }
-export declare const ListAutomationsResponse: S.Schema<ListAutomationsResponse>;
 export interface ListVolumeExecutionsRequest {
     /** project Id */
     projectId: string;
@@ -229,24 +199,19 @@ export interface ListVolumeExecutionsRequest {
     /** A page token, received from a previous list call. Provide this to retrieve the subsequent page. */
     pageToken?: string;
 }
-export declare const ListVolumeExecutionsRequest: S.Schema<ListVolumeExecutionsRequest>;
 export type ListExecutionsItemStatus = "PENDING" | "RUNNING" | "COMPLETED" | "FAILED" | "TERMINATED";
-export declare const ListExecutionsItemStatus: any;
 export interface ListExecutionsItem {
     createTime: string;
     endTime?: string;
     id: string;
     status: ListExecutionsItemStatus;
 }
-export declare const ListExecutionsItem: S.Schema<ListExecutionsItem>;
 export type ListExecutionsResponseItemsList = Array<ListExecutionsItem>;
-export declare const ListExecutionsResponseItemsList: S.Schema<ListExecutionsResponseItemsList>;
 export interface ListExecutionsResponse {
     items: ListExecutionsResponseItemsList;
     /** A token that can be sent as `page_token` to retrieve the next page. If this field is omitted, there are no subsequent pages. */
     nextPageToken?: string;
 }
-export declare const ListExecutionsResponse: S.Schema<ListExecutionsResponse>;
 export interface ListVolumeTemplatesRequest {
     /** project Id */
     projectId: string;
@@ -257,22 +222,18 @@ export interface ListVolumeTemplatesRequest {
     /** A page token, received from a previous list call. Provide this to retrieve the subsequent page. */
     pageToken?: string;
 }
-export declare const ListVolumeTemplatesRequest: S.Schema<ListVolumeTemplatesRequest>;
 export interface Template {
     createTime: string;
     description: string;
     id: string;
     name: string;
 }
-export declare const Template: S.Schema<Template>;
 export type ListTemplatesResponseItemsList = Array<Template>;
-export declare const ListTemplatesResponseItemsList: S.Schema<ListTemplatesResponseItemsList>;
 export interface ListTemplatesResponse {
     items: ListTemplatesResponseItemsList;
     /** A token that can be sent as `pageToken` to retrieve the next page. If this field is omitted, there are no subsequent pages. */
     nextPageToken?: string;
 }
-export declare const ListTemplatesResponse: S.Schema<ListTemplatesResponse>;
 export interface PartialUpdateVolumeAutomationRequest {
     /** project Id */
     projectId: string;
@@ -287,7 +248,6 @@ export interface PartialUpdateVolumeAutomationRequest {
     name?: string | null;
     triggers?: AutomationTriggers | null;
 }
-export declare const PartialUpdateVolumeAutomationRequest: S.Schema<PartialUpdateVolumeAutomationRequest>;
 export type CreateVolumeAutomationError = BadRequest | Forbidden | NotFound | StackitOpError;
 /** Create volume automation Creates a new volume automation */
 export declare const createVolumeAutomation: API.OperationMethod<CreateVolumeAutomationRequest, VolumeAutomation, CreateVolumeAutomationError, StackitOpContext>;