@distilled.cloud/stackit 1.0.0-rc.15 → 1.0.0-rc.16

package/src/services/authorization.ts

@@ -1,11 +1,14 @@
 import * as API from "@distilled.cloud/core/api";
 import * as C from "@distilled.cloud/core/category";
 // AUTO-GENERATED by scripts/generate.ts from .generated-specs (specs/spec-mirror-stackit). Do not edit.
-import * as S from "@distilled.cloud/core/schema";
+import * as S from "@distilled.cloud/core/schema-lite";
+import * as __L from "@distilled.cloud/core/schema-lite";
 import { UnknownStackitError } from "../errors.ts";
 import { StackitProtocol, type StackitOpError, type StackitOpContext } from "../protocol.ts";
 import * as Retry from "../retry.ts";
 import * as T from "../traits.ts";
+// Schema table, filled on first reach (see __S at the end).
+const __s: any[] = [];
 
 export type { StackitOpError, StackitOpContext };
 
@@ -31,81 +34,26 @@ export interface Member {
   role: string;
   subject: string;
 }
-export const Member = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    role: S.String,
-    subject: S.String,
-  }),
-).annotate({ identifier: "Member" }) as any as S.Schema<Member>;
-
 export type AddMembersRequestMembersList = Array<Member>;
-export const AddMembersRequestMembersList = /*@__PURE__*/ S.Array(
-  Member,
-) as any as S.Schema<AddMembersRequestMembersList>;
-
 export interface AddMembersRequest {
   resourceId: string;
   members: AddMembersRequestMembersList;
   resourceType: string;
 }
-export const AddMembersRequest = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    resourceId: S.String.pipe(T.Label()),
-    members: AddMembersRequestMembersList,
-    resourceType: S.String,
-  }).pipe(
-    T.Http({
-      method: "PATCH",
-      uri: "/v2/{resourceId}/members",
-      code: 200,
-      baseUrl: "https://authorization.api.stackit.cloud",
-    }),
-  ),
-).annotate({ identifier: "AddMembersRequest" }) as any as S.Schema<AddMembersRequest>;
-
 export type MembersResponseMembersList = Array<Member>;
-export const MembersResponseMembersList = /*@__PURE__*/ S.Array(
-  Member,
-) as any as S.Schema<MembersResponseMembersList>;
-
 export interface Zookie {
   zookie?: string;
 }
-export const Zookie = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    zookie: S.optional(S.String),
-  }),
-).annotate({ identifier: "Zookie" }) as any as S.Schema<Zookie>;
-
 export interface MembersResponse {
   members: MembersResponseMembersList;
   resourceId: string;
   resourceType: string;
   writtenAt?: Zookie;
 }
-export const MembersResponse = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    members: MembersResponseMembersList,
-    resourceId: S.String,
-    resourceType: S.String,
-    writtenAt: S.optional(Zookie),
-  }),
-).annotate({ identifier: "MembersResponse" }) as any as S.Schema<MembersResponse>;
-
 export interface PermissionRequest {
   name: string;
 }
-export const PermissionRequest = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    name: S.String,
-  }),
-).annotate({ identifier: "PermissionRequest" }) as any as S.Schema<PermissionRequest>;
-
 export type AddRoleRequestPermissionsList = Array<PermissionRequest>;
-export const AddRoleRequestPermissionsList = /*@__PURE__*/ S.Array(
-  PermissionRequest,
-) as any as S.Schema<AddRoleRequestPermissionsList>;
-
 export interface AddRoleRequest {
   resourceType: string;
   resourceId: string;
@@ -113,39 +61,11 @@ export interface AddRoleRequest {
   name: string;
   permissions: AddRoleRequestPermissionsList;
 }
-export const AddRoleRequest = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    resourceType: S.String.pipe(T.Label()),
-    resourceId: S.String.pipe(T.Label()),
-    description: S.String,
-    name: S.String,
-    permissions: AddRoleRequestPermissionsList,
-  }).pipe(
-    T.Http({
-      method: "POST",
-      uri: "/v2/{resourceType}/{resourceId}/roles",
-      code: 200,
-      baseUrl: "https://authorization.api.stackit.cloud",
-    }),
-  ),
-).annotate({ identifier: "AddRoleRequest" }) as any as S.Schema<AddRoleRequest>;
-
 export interface Permission {
   description: string;
   name: string;
 }
-export const Permission = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    description: S.String,
-    name: S.String,
-  }),
-).annotate({ identifier: "Permission" }) as any as S.Schema<Permission>;
-
 export type RolePermissionsList = Array<Permission>;
-export const RolePermissionsList = /*@__PURE__*/ S.Array(
-  Permission,
-) as any as S.Schema<RolePermissionsList>;
-
 export interface Role {
   description: string;
   etag?: string;
@@ -153,350 +73,100 @@ export interface Role {
   name: string;
   permissions: RolePermissionsList;
 }
-export const Role = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    description: S.String,
-    etag: S.optional(S.String),
-    id: S.optional(S.String),
-    name: S.String,
-    permissions: RolePermissionsList,
-  }),
-).annotate({ identifier: "Role" }) as any as S.Schema<Role>;
-
 export interface AddCustomRoleResponse {
   resourceId: string;
   resourceType: string;
   role: Role;
 }
-export const AddCustomRoleResponse = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    resourceId: S.String,
-    resourceType: S.String,
-    role: Role,
-  }),
-).annotate({ identifier: "AddCustomRoleResponse" }) as any as S.Schema<AddCustomRoleResponse>;
-
 export interface DeleteRoleRequest {
   resourceType: string;
   resourceId: string;
   roleId: string;
   etag?: string;
 }
-export const DeleteRoleRequest = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    resourceType: S.String.pipe(T.Label()),
-    resourceId: S.String.pipe(T.Label()),
-    roleId: S.String.pipe(T.Label()),
-    etag: S.optional(S.String.pipe(T.Query())),
-  }).pipe(
-    T.Http({
-      method: "DELETE",
-      uri: "/v2/{resourceType}/{resourceId}/roles/{roleId}",
-      code: 200,
-      baseUrl: "https://authorization.api.stackit.cloud",
-    }),
-  ),
-).annotate({ identifier: "DeleteRoleRequest" }) as any as S.Schema<DeleteRoleRequest>;
-
 export interface DeleteRoleResponse {
   writtenAt: Zookie;
 }
-export const DeleteRoleResponse = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    writtenAt: Zookie,
-  }),
-).annotate({ identifier: "DeleteRoleResponse" }) as any as S.Schema<DeleteRoleResponse>;
-
 export interface GetRoleRequest {
   resourceType: string;
   resourceId: string;
   roleId: string;
 }
-export const GetRoleRequest = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    resourceType: S.String.pipe(T.Label()),
-    resourceId: S.String.pipe(T.Label()),
-    roleId: S.String.pipe(T.Label()),
-  }).pipe(
-    T.Http({
-      method: "GET",
-      uri: "/v2/{resourceType}/{resourceId}/roles/{roleId}",
-      code: 200,
-      baseUrl: "https://authorization.api.stackit.cloud",
-    }),
-  ),
-).annotate({ identifier: "GetRoleRequest" }) as any as S.Schema<GetRoleRequest>;
-
 export interface GetRoleResponse {
   resourceId: string;
   resourceType: string;
   role: Role;
 }
-export const GetRoleResponse = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    resourceId: S.String,
-    resourceType: S.String,
-    role: Role,
-  }),
-).annotate({ identifier: "GetRoleResponse" }) as any as S.Schema<GetRoleResponse>;
-
 export interface ListMembersRequest {
   resourceType: string;
   resourceId: string;
   subject?: string;
 }
-export const ListMembersRequest = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    resourceType: S.String.pipe(T.Label()),
-    resourceId: S.String.pipe(T.Label()),
-    subject: S.optional(S.String.pipe(T.Query())),
-  }).pipe(
-    T.Http({
-      method: "GET",
-      uri: "/v2/{resourceType}/{resourceId}/members",
-      code: 200,
-      baseUrl: "https://authorization.api.stackit.cloud",
-    }),
-  ),
-).annotate({ identifier: "ListMembersRequest" }) as any as S.Schema<ListMembersRequest>;
-
 export type ListMembersResponseMembersList = Array<Member>;
-export const ListMembersResponseMembersList = /*@__PURE__*/ S.Array(
-  Member,
-) as any as S.Schema<ListMembersResponseMembersList>;
-
 export interface ListMembersResponse {
   members: ListMembersResponseMembersList;
   resourceId: string;
   resourceType: string;
 }
-export const ListMembersResponse = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    members: ListMembersResponseMembersList,
-    resourceId: S.String,
-    resourceType: S.String,
-  }),
-).annotate({ identifier: "ListMembersResponse" }) as any as S.Schema<ListMembersResponse>;
-
 export interface ListPermissionsRequest {
   resourceType?: string;
 }
-export const ListPermissionsRequest = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    resourceType: S.optional(S.String.pipe(T.Query())),
-  }).pipe(
-    T.Http({
-      method: "GET",
-      uri: "/v2/permissions",
-      code: 200,
-      baseUrl: "https://authorization.api.stackit.cloud",
-    }),
-  ),
-).annotate({ identifier: "ListPermissionsRequest" }) as any as S.Schema<ListPermissionsRequest>;
-
 export type ListPermissionsResponsePermissionsList = Array<Permission>;
-export const ListPermissionsResponsePermissionsList = /*@__PURE__*/ S.Array(
-  Permission,
-) as any as S.Schema<ListPermissionsResponsePermissionsList>;
-
 export interface ListPermissionsResponse {
   permissions: ListPermissionsResponsePermissionsList;
 }
-export const ListPermissionsResponse = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    permissions: ListPermissionsResponsePermissionsList,
-  }),
-).annotate({ identifier: "ListPermissionsResponse" }) as any as S.Schema<ListPermissionsResponse>;
-
 export interface ListRolesRequest {
   resourceType: string;
   resourceId: string;
 }
-export const ListRolesRequest = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    resourceType: S.String.pipe(T.Label()),
-    resourceId: S.String.pipe(T.Label()),
-  }).pipe(
-    T.Http({
-      method: "GET",
-      uri: "/v2/{resourceType}/{resourceId}/roles",
-      code: 200,
-      baseUrl: "https://authorization.api.stackit.cloud",
-    }),
-  ),
-).annotate({ identifier: "ListRolesRequest" }) as any as S.Schema<ListRolesRequest>;
-
 export type RolesResponseRolesList = Array<Role>;
-export const RolesResponseRolesList = /*@__PURE__*/ S.Array(
-  Role,
-) as any as S.Schema<RolesResponseRolesList>;
-
 export interface RolesResponse {
   resourceId: string;
   resourceType: string;
   roles: RolesResponseRolesList;
 }
-export const RolesResponse = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    resourceId: S.String,
-    resourceType: S.String,
-    roles: RolesResponseRolesList,
-  }),
-).annotate({ identifier: "RolesResponse" }) as any as S.Schema<RolesResponse>;
-
 export interface ListUserMembershipsRequest {
   email: string;
   resourceType?: string;
   resourceId?: string;
   parentResourceId?: string;
 }
-export const ListUserMembershipsRequest = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    email: S.String.pipe(T.Label()),
-    resourceType: S.optional(S.String.pipe(T.Query())),
-    resourceId: S.optional(S.String.pipe(T.Query())),
-    parentResourceId: S.optional(S.String.pipe(T.Query())),
-  }).pipe(
-    T.Http({
-      method: "GET",
-      uri: "/v2/users/{email}/memberships",
-      code: 200,
-      baseUrl: "https://authorization.api.stackit.cloud",
-    }),
-  ),
-).annotate({
-  identifier: "ListUserMembershipsRequest",
-}) as any as S.Schema<ListUserMembershipsRequest>;
-
 export interface UserMembership {
   resourceId: string;
   resourceType: string;
   role: string;
   subject: string;
 }
-export const UserMembership = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    resourceId: S.String,
-    resourceType: S.String,
-    role: S.String,
-    subject: S.String,
-  }),
-).annotate({ identifier: "UserMembership" }) as any as S.Schema<UserMembership>;
-
 export type ListUserMembershipsResponseItemsList = Array<UserMembership>;
-export const ListUserMembershipsResponseItemsList = /*@__PURE__*/ S.Array(
-  UserMembership,
-) as any as S.Schema<ListUserMembershipsResponseItemsList>;
-
 export interface ListUserMembershipsResponse {
   items: ListUserMembershipsResponseItemsList;
 }
-export const ListUserMembershipsResponse = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    items: ListUserMembershipsResponseItemsList,
-  }),
-).annotate({
-  identifier: "ListUserMembershipsResponse",
-}) as any as S.Schema<ListUserMembershipsResponse>;
-
 export type ListUserPermissionsRequestPermissionsList = Array<string>;
-export const ListUserPermissionsRequestPermissionsList = /*@__PURE__*/ S.Array(
-  S.String,
-) as any as S.Schema<ListUserPermissionsRequestPermissionsList>;
-
 export interface ListUserPermissionsRequest {
   email: string;
   resource?: string;
   resourceType?: string;
   permissions?: ListUserPermissionsRequestPermissionsList;
 }
-export const ListUserPermissionsRequest = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    email: S.String.pipe(T.Label()),
-    resource: S.optional(S.String.pipe(T.Query())),
-    resourceType: S.optional(S.String.pipe(T.Query())),
-    permissions: S.optional(ListUserPermissionsRequestPermissionsList.pipe(T.Query())),
-  }).pipe(
-    T.Http({
-      method: "GET",
-      uri: "/v2/users/{email}/permissions",
-      code: 200,
-      baseUrl: "https://authorization.api.stackit.cloud",
-    }),
-  ),
-).annotate({
-  identifier: "ListUserPermissionsRequest",
-}) as any as S.Schema<ListUserPermissionsRequest>;
-
 export type ExistingPermission = Permission;
-export const ExistingPermission = Permission;
-
 export type UserPermissionPermissionsList = Array<Permission>;
-export const UserPermissionPermissionsList = /*@__PURE__*/ S.Array(
-  Permission,
-) as any as S.Schema<UserPermissionPermissionsList>;
-
 export interface UserPermission {
   permissions: UserPermissionPermissionsList;
   resourceId: string;
   resourceType: string;
 }
-export const UserPermission = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    permissions: UserPermissionPermissionsList,
-    resourceId: S.String,
-    resourceType: S.String,
-  }),
-).annotate({ identifier: "UserPermission" }) as any as S.Schema<UserPermission>;
-
 export type ListUserPermissionsResponseItemsList = Array<UserPermission>;
-export const ListUserPermissionsResponseItemsList = /*@__PURE__*/ S.Array(
-  UserPermission,
-) as any as S.Schema<ListUserPermissionsResponseItemsList>;
-
 export interface ListUserPermissionsResponse {
   items: ListUserPermissionsResponseItemsList;
 }
-export const ListUserPermissionsResponse = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    items: ListUserPermissionsResponseItemsList,
-  }),
-).annotate({
-  identifier: "ListUserPermissionsResponse",
-}) as any as S.Schema<ListUserPermissionsResponse>;
-
 export type RemoveMembersRequestMembersList = Array<Member>;
-export const RemoveMembersRequestMembersList = /*@__PURE__*/ S.Array(
-  Member,
-) as any as S.Schema<RemoveMembersRequestMembersList>;
-
 export interface RemoveMembersRequest {
   resourceId: string;
   forceRemove?: boolean;
   members: RemoveMembersRequestMembersList;
   resourceType: string;
 }
-export const RemoveMembersRequest = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    resourceId: S.String.pipe(T.Label()),
-    forceRemove: S.optional(S.Boolean),
-    members: RemoveMembersRequestMembersList,
-    resourceType: S.String,
-  }).pipe(
-    T.Http({
-      method: "POST",
-      uri: "/v2/{resourceId}/members/remove",
-      code: 200,
-      baseUrl: "https://authorization.api.stackit.cloud",
-    }),
-  ),
-).annotate({ identifier: "RemoveMembersRequest" }) as any as S.Schema<RemoveMembersRequest>;
-
 export type UpdateRoleRequestPermissionsList = Array<PermissionRequest>;
-export const UpdateRoleRequestPermissionsList = /*@__PURE__*/ S.Array(
-  PermissionRequest,
-) as any as S.Schema<UpdateRoleRequestPermissionsList>;
-
 export interface UpdateRoleRequest {
   resourceType: string;
   resourceId: string;
@@ -506,38 +176,11 @@ export interface UpdateRoleRequest {
   name: string;
   permissions: UpdateRoleRequestPermissionsList;
 }
-export const UpdateRoleRequest = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    resourceType: S.String.pipe(T.Label()),
-    resourceId: S.String.pipe(T.Label()),
-    roleId: S.String.pipe(T.Label()),
-    description: S.String,
-    etag: S.optional(S.String),
-    name: S.String,
-    permissions: UpdateRoleRequestPermissionsList,
-  }).pipe(
-    T.Http({
-      method: "PUT",
-      uri: "/v2/{resourceType}/{resourceId}/roles/{roleId}",
-      code: 200,
-      baseUrl: "https://authorization.api.stackit.cloud",
-    }),
-  ),
-).annotate({ identifier: "UpdateRoleRequest" }) as any as S.Schema<UpdateRoleRequest>;
-
 export interface UpdateRoleResponse {
   resourceId: string;
   resourceType: string;
   role: Role;
 }
-export const UpdateRoleResponse = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    resourceId: S.String,
-    resourceType: S.String,
-    role: Role,
-  }),
-).annotate({ identifier: "UpdateRoleResponse" }) as any as S.Schema<UpdateRoleResponse>;
-
 export type AddMembersError = BadRequest | Forbidden | StackitOpError;
 /** Add members to a resource Add members to the given resource with specified roles. */
 export const addMembers: API.OperationMethod<
@@ -546,8 +189,8 @@ export const addMembers: API.OperationMethod<
   AddMembersError,
   StackitOpContext
 > = /*@__PURE__*/ API.make(() => ({
-  input: AddMembersRequest,
-  output: MembersResponse,
+  input: __S(24, __c3, 0) as any as S.Schema<AddMembersRequest>,
+  output: __S(32, __c4, 0) as any as S.Schema<MembersResponse>,
   errors: [BadRequest, Forbidden, UnknownStackitError],
   protocol: StackitProtocol,
   retry: Retry.Retry,
@@ -561,8 +204,8 @@ export const addRole: API.OperationMethod<
   AddRoleError,
   StackitOpContext
 > = /*@__PURE__*/ API.make(() => ({
-  input: AddRoleRequest,
-  output: AddCustomRoleResponse,
+  input: __S(56, __c7, 0) as any as S.Schema<AddRoleRequest>,
+  output: __S(72, __c9, 0) as any as S.Schema<AddCustomRoleResponse>,
   errors: [BadRequest, Forbidden, UnknownStackitError],
   protocol: StackitProtocol,
   retry: Retry.Retry,
@@ -576,8 +219,8 @@ export const deleteRole: API.OperationMethod<
   DeleteRoleError,
   StackitOpContext
 > = /*@__PURE__*/ API.make(() => ({
-  input: DeleteRoleRequest,
-  output: DeleteRoleResponse,
+  input: __S(96, __c12, 0) as any as S.Schema<DeleteRoleRequest>,
+  output: __S(97, __c12, 1) as any as S.Schema<DeleteRoleResponse>,
   errors: [BadRequest, Forbidden, UnknownStackitError],
   protocol: StackitProtocol,
   retry: Retry.Retry,
@@ -591,8 +234,8 @@ export const getRole: API.OperationMethod<
   GetRoleError,
   StackitOpContext
 > = /*@__PURE__*/ API.make(() => ({
-  input: GetRoleRequest,
-  output: GetRoleResponse,
+  input: __S(104, __c13, 0) as any as S.Schema<GetRoleRequest>,
+  output: __S(72, __c9, 0) as any as S.Schema<GetRoleResponse>,
   errors: [BadRequest, Forbidden, UnknownStackitError],
   protocol: StackitProtocol,
   retry: Retry.Retry,
@@ -606,8 +249,8 @@ export const listMembers: API.OperationMethod<
   ListMembersError,
   StackitOpContext
 > = /*@__PURE__*/ API.make(() => ({
-  input: ListMembersRequest,
-  output: ListMembersResponse,
+  input: __S(112, __c14, 0) as any as S.Schema<ListMembersRequest>,
+  output: __S(113, __c14, 1) as any as S.Schema<ListMembersResponse>,
   errors: [BadRequest, Forbidden, UnknownStackitError],
   protocol: StackitProtocol,
   retry: Retry.Retry,
@@ -621,8 +264,8 @@ export const listPermissions: API.OperationMethod<
   ListPermissionsError,
   StackitOpContext
 > = /*@__PURE__*/ API.make(() => ({
-  input: ListPermissionsRequest,
-  output: ListPermissionsResponse,
+  input: __S(120, __c15, 0) as any as S.Schema<ListPermissionsRequest>,
+  output: __S(121, __c15, 1) as any as S.Schema<ListPermissionsResponse>,
   errors: [BadRequest, Forbidden, UnknownStackitError],
   protocol: StackitProtocol,
   retry: Retry.Retry,
@@ -636,8 +279,8 @@ export const listRoles: API.OperationMethod<
   ListRolesError,
   StackitOpContext
 > = /*@__PURE__*/ API.make(() => ({
-  input: ListRolesRequest,
-  output: RolesResponse,
+  input: __S(128, __c16, 0) as any as S.Schema<ListRolesRequest>,
+  output: __S(130, __c16, 2) as any as S.Schema<RolesResponse>,
   errors: [BadRequest, Forbidden, UnknownStackitError],
   protocol: StackitProtocol,
   retry: Retry.Retry,
@@ -651,8 +294,8 @@ export const listUserMemberships: API.OperationMethod<
   ListUserMembershipsError,
   StackitOpContext
 > = /*@__PURE__*/ API.make(() => ({
-  input: ListUserMembershipsRequest,
-  output: ListUserMembershipsResponse,
+  input: __S(136, __c17, 0) as any as S.Schema<ListUserMembershipsRequest>,
+  output: __S(139, __c17, 3) as any as S.Schema<ListUserMembershipsResponse>,
   errors: [BadRequest, Forbidden, UnknownStackitError],
   protocol: StackitProtocol,
   retry: Retry.Retry,
@@ -666,8 +309,8 @@ export const listUserPermissions: API.OperationMethod<
   ListUserPermissionsError,
   StackitOpContext
 > = /*@__PURE__*/ API.make(() => ({
-  input: ListUserPermissionsRequest,
-  output: ListUserPermissionsResponse,
+  input: __S(1, __c0, 1) as any as S.Schema<ListUserPermissionsRequest>,
+  output: __S(4, __c0, 4) as any as S.Schema<ListUserPermissionsResponse>,
   errors: [BadRequest, Forbidden, UnknownStackitError],
   protocol: StackitProtocol,
   retry: Retry.Retry,
@@ -681,8 +324,8 @@ export const removeMembers: API.OperationMethod<
   RemoveMembersError,
   StackitOpContext
 > = /*@__PURE__*/ API.make(() => ({
-  input: RemoveMembersRequest,
-  output: MembersResponse,
+  input: __S(8, __c1, 0) as any as S.Schema<RemoveMembersRequest>,
+  output: __S(32, __c4, 0) as any as S.Schema<MembersResponse>,
   errors: [BadRequest, Forbidden, UnknownStackitError],
   protocol: StackitProtocol,
   retry: Retry.Retry,
@@ -696,9 +339,383 @@ export const updateRole: API.OperationMethod<
   UpdateRoleError,
   StackitOpContext
 > = /*@__PURE__*/ API.make(() => ({
-  input: UpdateRoleRequest,
-  output: UpdateRoleResponse,
+  input: __S(16, __c2, 0) as any as S.Schema<UpdateRoleRequest>,
+  output: __S(72, __c9, 0) as any as S.Schema<UpdateRoleResponse>,
   errors: [BadRequest, Forbidden, UnknownStackitError],
   protocol: StackitProtocol,
   retry: Retry.Retry,
 }));
+
+// Schema builders: each runs one schema initializer, on that schema's first use.
+function __c0(j: number): any {
+  switch (j) {
+    case 0:
+      return S.Array(S.String);
+    case 1:
+      return S.suspend(() =>
+        S.Struct({
+          email: S.String.pipe(T.Label()),
+          resource: S.optional(S.String.pipe(T.Query())),
+          resourceType: S.optional(S.String.pipe(T.Query())),
+          permissions: S.optional(__S(0, __c0, 0).pipe(T.Query())),
+        }).pipe(
+          T.Http({
+            method: "GET",
+            uri: "/v2/users/{email}/permissions",
+            code: 200,
+            baseUrl: "https://authorization.api.stackit.cloud",
+          }),
+        ),
+      ).annotate({ identifier: "ListUserPermissionsRequest" });
+    case 2:
+      return S.suspend(() =>
+        S.Struct({
+          permissions: __S(81, __c10, 1),
+          resourceId: S.String,
+          resourceType: S.String,
+        }),
+      ).annotate({ identifier: "UserPermission" });
+    case 3:
+      return S.Array(__S(2, __c0, 2));
+    case 4:
+      return S.suspend(() =>
+        S.Struct({
+          items: __S(3, __c0, 3),
+        }),
+      ).annotate({ identifier: "ListUserPermissionsResponse" });
+  }
+}
+function __c1(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          resourceId: S.String.pipe(T.Label()),
+          forceRemove: S.optional(S.Boolean),
+          members: __S(49, __c6, 1),
+          resourceType: S.String,
+        }).pipe(
+          T.Http({
+            method: "POST",
+            uri: "/v2/{resourceId}/members/remove",
+            code: 200,
+            baseUrl: "https://authorization.api.stackit.cloud",
+          }),
+        ),
+      ).annotate({ identifier: "RemoveMembersRequest" });
+  }
+}
+function __c2(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          resourceType: S.String.pipe(T.Label()),
+          resourceId: S.String.pipe(T.Label()),
+          roleId: S.String.pipe(T.Label()),
+          description: S.String,
+          etag: S.optional(S.String),
+          name: S.String,
+          permissions: __S(65, __c8, 1),
+        }).pipe(
+          T.Http({
+            method: "PUT",
+            uri: "/v2/{resourceType}/{resourceId}/roles/{roleId}",
+            code: 200,
+            baseUrl: "https://authorization.api.stackit.cloud",
+          }),
+        ),
+      ).annotate({ identifier: "UpdateRoleRequest" });
+  }
+}
+function __c3(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          resourceId: S.String.pipe(T.Label()),
+          members: __S(49, __c6, 1),
+          resourceType: S.String,
+        }).pipe(
+          T.Http({
+            method: "PATCH",
+            uri: "/v2/{resourceId}/members",
+            code: 200,
+            baseUrl: "https://authorization.api.stackit.cloud",
+          }),
+        ),
+      ).annotate({ identifier: "AddMembersRequest" });
+  }
+}
+function __c4(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          members: __S(49, __c6, 1),
+          resourceId: S.String,
+          resourceType: S.String,
+          writtenAt: S.optional(__S(40, __c5, 0)),
+        }),
+      ).annotate({ identifier: "MembersResponse" });
+  }
+}
+function __c5(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          zookie: S.optional(S.String),
+        }),
+      ).annotate({ identifier: "Zookie" });
+  }
+}
+function __c6(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          role: S.String,
+          subject: S.String,
+        }),
+      ).annotate({ identifier: "Member" });
+    case 1:
+      return S.Array(__S(48, __c6, 0));
+  }
+}
+function __c7(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          resourceType: S.String.pipe(T.Label()),
+          resourceId: S.String.pipe(T.Label()),
+          description: S.String,
+          name: S.String,
+          permissions: __S(65, __c8, 1),
+        }).pipe(
+          T.Http({
+            method: "POST",
+            uri: "/v2/{resourceType}/{resourceId}/roles",
+            code: 200,
+            baseUrl: "https://authorization.api.stackit.cloud",
+          }),
+        ),
+      ).annotate({ identifier: "AddRoleRequest" });
+  }
+}
+function __c8(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          name: S.String,
+        }),
+      ).annotate({ identifier: "PermissionRequest" });
+    case 1:
+      return S.Array(__S(64, __c8, 0));
+  }
+}
+function __c9(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          resourceId: S.String,
+          resourceType: S.String,
+          role: __S(88, __c11, 0),
+        }),
+      ).annotate({ identifier: "AddCustomRoleResponse" });
+  }
+}
+function __c10(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          description: S.String,
+          name: S.String,
+        }),
+      ).annotate({ identifier: "Permission" });
+    case 1:
+      return S.Array(__S(80, __c10, 0));
+  }
+}
+function __c11(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          description: S.String,
+          etag: S.optional(S.String),
+          id: S.optional(S.String),
+          name: S.String,
+          permissions: __S(81, __c10, 1),
+        }),
+      ).annotate({ identifier: "Role" });
+  }
+}
+function __c12(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          resourceType: S.String.pipe(T.Label()),
+          resourceId: S.String.pipe(T.Label()),
+          roleId: S.String.pipe(T.Label()),
+          etag: S.optional(S.String.pipe(T.Query())),
+        }).pipe(
+          T.Http({
+            method: "DELETE",
+            uri: "/v2/{resourceType}/{resourceId}/roles/{roleId}",
+            code: 200,
+            baseUrl: "https://authorization.api.stackit.cloud",
+          }),
+        ),
+      ).annotate({ identifier: "DeleteRoleRequest" });
+    case 1:
+      return S.suspend(() =>
+        S.Struct({
+          writtenAt: __S(40, __c5, 0),
+        }),
+      ).annotate({ identifier: "DeleteRoleResponse" });
+  }
+}
+function __c13(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          resourceType: S.String.pipe(T.Label()),
+          resourceId: S.String.pipe(T.Label()),
+          roleId: S.String.pipe(T.Label()),
+        }).pipe(
+          T.Http({
+            method: "GET",
+            uri: "/v2/{resourceType}/{resourceId}/roles/{roleId}",
+            code: 200,
+            baseUrl: "https://authorization.api.stackit.cloud",
+          }),
+        ),
+      ).annotate({ identifier: "GetRoleRequest" });
+  }
+}
+function __c14(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          resourceType: S.String.pipe(T.Label()),
+          resourceId: S.String.pipe(T.Label()),
+          subject: S.optional(S.String.pipe(T.Query())),
+        }).pipe(
+          T.Http({
+            method: "GET",
+            uri: "/v2/{resourceType}/{resourceId}/members",
+            code: 200,
+            baseUrl: "https://authorization.api.stackit.cloud",
+          }),
+        ),
+      ).annotate({ identifier: "ListMembersRequest" });
+    case 1:
+      return S.suspend(() =>
+        S.Struct({
+          members: __S(49, __c6, 1),
+          resourceId: S.String,
+          resourceType: S.String,
+        }),
+      ).annotate({ identifier: "ListMembersResponse" });
+  }
+}
+function __c15(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          resourceType: S.optional(S.String.pipe(T.Query())),
+        }).pipe(
+          T.Http({
+            method: "GET",
+            uri: "/v2/permissions",
+            code: 200,
+            baseUrl: "https://authorization.api.stackit.cloud",
+          }),
+        ),
+      ).annotate({ identifier: "ListPermissionsRequest" });
+    case 1:
+      return S.suspend(() =>
+        S.Struct({
+          permissions: __S(81, __c10, 1),
+        }),
+      ).annotate({ identifier: "ListPermissionsResponse" });
+  }
+}
+function __c16(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          resourceType: S.String.pipe(T.Label()),
+          resourceId: S.String.pipe(T.Label()),
+        }).pipe(
+          T.Http({
+            method: "GET",
+            uri: "/v2/{resourceType}/{resourceId}/roles",
+            code: 200,
+            baseUrl: "https://authorization.api.stackit.cloud",
+          }),
+        ),
+      ).annotate({ identifier: "ListRolesRequest" });
+    case 1:
+      return S.Array(__S(88, __c11, 0));
+    case 2:
+      return S.suspend(() =>
+        S.Struct({
+          resourceId: S.String,
+          resourceType: S.String,
+          roles: __S(129, __c16, 1),
+        }),
+      ).annotate({ identifier: "RolesResponse" });
+  }
+}
+function __c17(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          email: S.String.pipe(T.Label()),
+          resourceType: S.optional(S.String.pipe(T.Query())),
+          resourceId: S.optional(S.String.pipe(T.Query())),
+          parentResourceId: S.optional(S.String.pipe(T.Query())),
+        }).pipe(
+          T.Http({
+            method: "GET",
+            uri: "/v2/users/{email}/memberships",
+            code: 200,
+            baseUrl: "https://authorization.api.stackit.cloud",
+          }),
+        ),
+      ).annotate({ identifier: "ListUserMembershipsRequest" });
+    case 1:
+      return S.suspend(() =>
+        S.Struct({
+          resourceId: S.String,
+          resourceType: S.String,
+          role: S.String,
+          subject: S.String,
+        }),
+      ).annotate({ identifier: "UserMembership" });
+    case 2:
+      return S.Array(__S(137, __c17, 1));
+    case 3:
+      return S.suspend(() =>
+        S.Struct({
+          items: __S(138, __c17, 2),
+        }),
+      ).annotate({ identifier: "ListUserMembershipsResponse" });
+  }
+}
+// Schema table: entry i is schema j of builder f, made on first reach.
+function __S(i: number, f: (j: number) => unknown, j: number): any {
+  return (__s[i] ??= __L.at(f, j));
+}