@distilled.cloud/stackit 1.0.0-rc.15 → 1.0.0-rc.16

package/src/services/vpn.ts

@@ -1,11 +1,14 @@
 import * as API from "@distilled.cloud/core/api";
 import * as C from "@distilled.cloud/core/category";
 // AUTO-GENERATED by scripts/generate.ts from .generated-specs (specs/spec-mirror-stackit). Do not edit.
-import * as S from "@distilled.cloud/core/schema";
+import * as S from "@distilled.cloud/core/schema-lite";
+import * as __L from "@distilled.cloud/core/schema-lite";
 import { UnknownStackitError } from "../errors.ts";
 import { StackitProtocol, type StackitOpError, type StackitOpContext } from "../protocol.ts";
 import * as Retry from "../retry.ts";
 import * as T from "../traits.ts";
+// Schema table, filled on first reach (see __S at the end).
+const __s: any[] = [];
 
 export type { StackitOpError, StackitOpContext };
 
@@ -47,61 +50,28 @@ export class NotFound
 
 /** The region in which the resource is located. */
 export type CreateGatewayRequestRegion = "eu01" | "eu02";
-export const CreateGatewayRequestRegion = S.String;
-
 export interface CreateGatewayRequestAvailabilityZones {
   tunnel1: string;
   tunnel2: string;
 }
-export const CreateGatewayRequestAvailabilityZones = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    tunnel1: S.String,
-    tunnel2: S.String,
-  }),
-).annotate({
-  identifier: "CreateGatewayRequestAvailabilityZones",
-}) as any as S.Schema<CreateGatewayRequestAvailabilityZones>;
-
 /** A list of IPv4 Prefixes to advertise via BGP. If omitted, the SNA network ranges will be advertised. */
 export type BGPGatewayConfigOverrideAdvertisedRoutesList = Array<string>;
-export const BGPGatewayConfigOverrideAdvertisedRoutesList = /*@__PURE__*/ S.Array(
-  S.String,
-) as any as S.Schema<BGPGatewayConfigOverrideAdvertisedRoutesList>;
-
 /** BGP configuration effects all connections. (only for routingMode=BGP_ROUTE_BASED) */
 export interface BGPGatewayConfig {
   localAsn: number;
   /** A list of IPv4 Prefixes to advertise via BGP. If omitted, the SNA network ranges will be advertised. */
   overrideAdvertisedRoutes?: BGPGatewayConfigOverrideAdvertisedRoutesList;
 }
-export const BGPGatewayConfig = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    localAsn: S.Number,
-    overrideAdvertisedRoutes: S.optional(BGPGatewayConfigOverrideAdvertisedRoutesList),
-  }),
-).annotate({ identifier: "BGPGatewayConfig" }) as any as S.Schema<BGPGatewayConfig>;
-
 /** Map of custom labels. Key and values must be a string with max 63 chars, start/end with alphanumeric. The key of a label follows the same rules as the `LabelValue` except that it cannot be empty. */
 export type Label = { [key: string]: string | undefined };
-export const Label = /*@__PURE__*/ S.Record(S.String, S.String) as any as S.Schema<Label>;
-
 export interface NetworkConfig {
   /** The IPv4 network prefix (CIDR notation) allocated for the VPN gateway. Must have a prefix length of /28 or larger. Once the gateway is created, is not possible to change this attribute. */
   predefinedNetworkPrefix?: string;
   /** Custom routing table ID for the VPN gateway */
   routingTableId?: string;
 }
-export const NetworkConfig = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    predefinedNetworkPrefix: S.optional(S.String),
-    routingTableId: S.optional(S.String),
-  }),
-).annotate({ identifier: "NetworkConfig" }) as any as S.Schema<NetworkConfig>;
-
 /** Once the gateway is created, it is not possible to change this attribute. */
 export type RoutingType = "POLICY_BASED" | "ROUTE_BASED" | "BGP_ROUTE_BASED";
-export const RoutingType = S.String;
-
 export interface CreateGatewayRequest {
   projectId: string;
   region: CreateGatewayRequestRegion | (string & {});
@@ -115,34 +85,9 @@ export interface CreateGatewayRequest {
   planId: string;
   routingType: RoutingType | (string & {});
 }
-export const CreateGatewayRequest = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    projectId: S.String.pipe(T.Label()),
-    region: CreateGatewayRequestRegion.pipe(T.Label()),
-    availabilityZones: CreateGatewayRequestAvailabilityZones,
-    bgp: S.optional(BGPGatewayConfig),
-    displayName: S.String,
-    labels: S.optional(Label),
-    networkConfig: S.optional(NetworkConfig),
-    planId: S.String,
-    routingType: RoutingType,
-  }).pipe(
-    T.Http({
-      method: "POST",
-      uri: "/v1/projects/{projectId}/regions/{region}/gateways",
-      code: 200,
-      baseUrl: "https://vpn.api.stackit.cloud",
-    }),
-  ),
-).annotate({ identifier: "CreateGatewayRequest" }) as any as S.Schema<CreateGatewayRequest>;
-
 export type CreateGatewayResponseAvailabilityZones = CreateGatewayRequestAvailabilityZones;
-export const CreateGatewayResponseAvailabilityZones = CreateGatewayRequestAvailabilityZones;
-
 /** The current lifecycle state of the gateway infrastructure. - `PENDING`: Provisioning or update is in progress. - `READY`: The gateway is fully operational. - `ERROR`: A failure occurred. - `DELETING`: The resource is being removed. */
 export type GatewayStatus = "PENDING" | "READY" | "ERROR" | "DELETING";
-export const GatewayStatus = S.String;
-
 export interface CreateGatewayResponse {
   availabilityZones: CreateGatewayRequestAvailabilityZones;
   bgp?: BGPGatewayConfig;
@@ -157,89 +102,32 @@ export interface CreateGatewayResponse {
   id?: string;
   state?: GatewayStatus;
 }
-export const CreateGatewayResponse = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    availabilityZones: CreateGatewayRequestAvailabilityZones,
-    bgp: S.optional(BGPGatewayConfig),
-    displayName: S.String,
-    labels: S.optional(Label),
-    networkConfig: S.optional(NetworkConfig),
-    planId: S.String,
-    routingType: RoutingType,
-    id: S.optional(S.String),
-    state: S.optional(GatewayStatus),
-  }),
-).annotate({ identifier: "CreateGatewayResponse" }) as any as S.Schema<CreateGatewayResponse>;
-
 /** The region in which the resource is located. */
 export type CreateGatewayBGPFilterRequestRegion = "eu01" | "eu02";
-export const CreateGatewayBGPFilterRequestRegion = S.String;
-
 export interface CreateGatewayBGPFilterRequest {
   projectId: string;
   region: CreateGatewayBGPFilterRequestRegion | (string & {});
   gatewayId: string;
-  /** A user-friendly name for the filter. Display only — not enforced unique across a gateway. */
+  /** A user-friendly name for the filter. Display only -- not enforced unique across a gateway. */
   displayName: string;
 }
-export const CreateGatewayBGPFilterRequest = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    projectId: S.String.pipe(T.Label()),
-    region: CreateGatewayBGPFilterRequestRegion.pipe(T.Label()),
-    gatewayId: S.String.pipe(T.Label()),
-    displayName: S.String,
-  }).pipe(
-    T.Http({
-      method: "POST",
-      uri: "/v1/projects/{projectId}/regions/{region}/gateways/{gatewayId}/bgp-filters",
-      code: 200,
-      baseUrl: "https://vpn.api.stackit.cloud",
-    }),
-  ),
-).annotate({
-  identifier: "CreateGatewayBGPFilterRequest",
-}) as any as S.Schema<CreateGatewayBGPFilterRequest>;
-
 /** A named BGP route filter. Internally a BGPFilter holds an ordered set of rules (managed via the nested /rules sub-resource); a route is evaluated against each rule in 'sequence' order and the first match decides the outcome. An implicit DENY is applied after the last rule, so a route that matches no PERMIT rule is dropped. Attaching an empty filter to a tunnel therefore denies every route. Resource limits: the maximum number of filters per gateway equals the gateway plan's maxConnections value; the maximum number of rules per filter is 10. */
 export interface BGPFilter {
-  /** A user-friendly name for the filter. Display only — not enforced unique across a gateway. */
+  /** A user-friendly name for the filter. Display only -- not enforced unique across a gateway. */
   displayName: string;
   /** The server-generated UUID of the filter. */
   id?: string;
 }
-export const BGPFilter = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    displayName: S.String,
-    id: S.optional(S.String),
-  }),
-).annotate({ identifier: "BGPFilter" }) as any as S.Schema<BGPFilter>;
-
 /** The region in which the resource is located. */
 export type CreateGatewayBGPFilterRuleRequestRegion = "eu01" | "eu02";
-export const CreateGatewayBGPFilterRuleRequestRegion = S.String;
-
 /** The action to take if the route matches all criteria. Case-sensitive. */
 export type CreateGatewayBGPFilterRuleRequestAction = "PERMIT" | "DENY";
-export const CreateGatewayBGPFilterRuleRequestAction = S.String;
-
 /** Matches if the AS-PATH contains any one of the listed ASNs (logical OR within the list). Treated as an unordered set; ordering is not preserved by the storage layer. When combined with firstASN, both conditions must hold (logical AND, consistent with the rest of the match block). If firstASN is also listed here, its presence as the first hop is sufficient to satisfy this list; no duplicate hop is required. */
 export type CreateGatewayBGPFilterRuleRequestMatchAsPathContainsAnyList = Array<number>;
-export const CreateGatewayBGPFilterRuleRequestMatchAsPathContainsAnyList = /*@__PURE__*/ S.Array(
-  S.Number,
-) as any as S.Schema<CreateGatewayBGPFilterRuleRequestMatchAsPathContainsAnyList>;
-
 /** Matches if the route carries any one of these BGP standard communities (logical OR within the list). Format is 'asn:value' per RFC 1997 (both halves must fit in a uint32, i.e. 0..4294967295). Extended, large and well-known communities are not supported. */
 export type CreateGatewayBGPFilterRuleRequestMatchCommunitiesList = Array<string>;
-export const CreateGatewayBGPFilterRuleRequestMatchCommunitiesList = /*@__PURE__*/ S.Array(
-  S.String,
-) as any as S.Schema<CreateGatewayBGPFilterRuleRequestMatchCommunitiesList>;
-
-/** List of IPv4 networks to match. A route's prefix matches if it equals one of these (subject to minPrefixLength/maxPrefixLength refinement). If omitted, an implicit 0.0.0.0/0 base is used when minPrefixLength or maxPrefixLength is set; if all three are omitted, prefix matching is not performed at all. Each entry must parse as a valid IPv4 CIDR; the network portion is normalised (10.0.0.5/24 → 10.0.0.0/24). */
+/** List of IPv4 networks to match. A route's prefix matches if it equals one of these (subject to minPrefixLength/maxPrefixLength refinement). If omitted, an implicit 0.0.0.0/0 base is used when minPrefixLength or maxPrefixLength is set; if all three are omitted, prefix matching is not performed at all. Each entry must parse as a valid IPv4 CIDR; the network portion is normalised (10.0.0.5/24 -> 10.0.0.0/24). */
 export type CreateGatewayBGPFilterRuleRequestMatchPrefixesList = Array<string>;
-export const CreateGatewayBGPFilterRuleRequestMatchPrefixesList = /*@__PURE__*/ S.Array(
-  S.String,
-) as any as S.Schema<CreateGatewayBGPFilterRuleRequestMatchPrefixesList>;
-
 /** Optional matching criteria. If omitted entirely, the rule acts as match-all. All non-empty fields in this block must match (logical AND). */
 export interface CreateGatewayBGPFilterRuleRequestMatch {
   /** Matches if the AS-PATH contains any one of the listed ASNs (logical OR within the list). Treated as an unordered set; ordering is not preserved by the storage layer. When combined with firstASN, both conditions must hold (logical AND, consistent with the rest of the match block). If firstASN is also listed here, its presence as the first hop is sufficient to satisfy this list; no duplicate hop is required. */
@@ -254,36 +142,14 @@ export interface CreateGatewayBGPFilterRuleRequestMatch {
   minPrefixLength?: number;
   /** Matches the exact IPv4 address of the BGP neighbor that advertised the route. Useful when the same filter is attached to multiple tunnels with different neighbor IPs (allows per-peer rules in a shared filter). When a filter is attached to a single tunnel, this field is effectively a no-op because the route-map is already neighbor-scoped. */
   peer?: string;
-  /** List of IPv4 networks to match. A route's prefix matches if it equals one of these (subject to minPrefixLength/maxPrefixLength refinement). If omitted, an implicit 0.0.0.0/0 base is used when minPrefixLength or maxPrefixLength is set; if all three are omitted, prefix matching is not performed at all. Each entry must parse as a valid IPv4 CIDR; the network portion is normalised (10.0.0.5/24 → 10.0.0.0/24). */
+  /** List of IPv4 networks to match. A route's prefix matches if it equals one of these (subject to minPrefixLength/maxPrefixLength refinement). If omitted, an implicit 0.0.0.0/0 base is used when minPrefixLength or maxPrefixLength is set; if all three are omitted, prefix matching is not performed at all. Each entry must parse as a valid IPv4 CIDR; the network portion is normalised (10.0.0.5/24 -> 10.0.0.0/24). */
   prefixes?: CreateGatewayBGPFilterRuleRequestMatchPrefixesList;
 }
-export const CreateGatewayBGPFilterRuleRequestMatch = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    asPathContainsAny: S.optional(CreateGatewayBGPFilterRuleRequestMatchAsPathContainsAnyList),
-    communities: S.optional(CreateGatewayBGPFilterRuleRequestMatchCommunitiesList),
-    firstASN: S.optional(S.Number),
-    maxPrefixLength: S.optional(S.Number),
-    minPrefixLength: S.optional(S.Number),
-    peer: S.optional(S.String),
-    prefixes: S.optional(CreateGatewayBGPFilterRuleRequestMatchPrefixesList),
-  }),
-).annotate({
-  identifier: "CreateGatewayBGPFilterRuleRequestMatch",
-}) as any as S.Schema<CreateGatewayBGPFilterRuleRequestMatch>;
-
 /** Optional BGP attributes to apply when 'action' is PERMIT. Ignored for DENY rules. */
 export interface CreateGatewayBGPFilterRuleRequestSet {
   /** BGP LOCAL_PREF to set on the route. Higher values are preferred during best-path selection. Default BGP LOCAL_PREF is 100; any value here overrides. */
   localPreference?: number;
 }
-export const CreateGatewayBGPFilterRuleRequestSet = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    localPreference: S.optional(S.Number),
-  }),
-).annotate({
-  identifier: "CreateGatewayBGPFilterRuleRequestSet",
-}) as any as S.Schema<CreateGatewayBGPFilterRuleRequestSet>;
-
 export interface CreateGatewayBGPFilterRuleRequest {
   projectId: string;
   region: CreateGatewayBGPFilterRuleRequestRegion | (string & {});
@@ -293,55 +159,19 @@ export interface CreateGatewayBGPFilterRuleRequest {
   action: CreateGatewayBGPFilterRuleRequestAction | (string & {});
   /** Optional matching criteria. If omitted entirely, the rule acts as match-all. All non-empty fields in this block must match (logical AND). */
   match?: CreateGatewayBGPFilterRuleRequestMatch;
-  /** The evaluation order of the rule. Lower numbers are evaluated first. Must be unique within a filter. On POST, this field is optional: when omitted the server auto-assigns max(existing)+10 (the first rule starts at 10). On PUT this field is required — sending a partial update without 'sequence' returns 400. */
+  /** The evaluation order of the rule. Lower numbers are evaluated first. Must be unique within a filter. On POST, this field is optional: when omitted the server auto-assigns max(existing)+10 (the first rule starts at 10). On PUT this field is required -- sending a partial update without 'sequence' returns 400. */
   sequence?: number;
   /** Optional BGP attributes to apply when 'action' is PERMIT. Ignored for DENY rules. */
   set?: CreateGatewayBGPFilterRuleRequestSet;
 }
-export const CreateGatewayBGPFilterRuleRequest = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    projectId: S.String.pipe(T.Label()),
-    region: CreateGatewayBGPFilterRuleRequestRegion.pipe(T.Label()),
-    gatewayId: S.String.pipe(T.Label()),
-    filterId: S.String.pipe(T.Label()),
-    action: CreateGatewayBGPFilterRuleRequestAction,
-    match: S.optional(CreateGatewayBGPFilterRuleRequestMatch),
-    sequence: S.optional(S.Number),
-    set: S.optional(CreateGatewayBGPFilterRuleRequestSet),
-  }).pipe(
-    T.Http({
-      method: "POST",
-      uri: "/v1/projects/{projectId}/regions/{region}/gateways/{gatewayId}/bgp-filters/{filterId}/rules",
-      code: 200,
-      baseUrl: "https://vpn.api.stackit.cloud",
-    }),
-  ),
-).annotate({
-  identifier: "CreateGatewayBGPFilterRuleRequest",
-}) as any as S.Schema<CreateGatewayBGPFilterRuleRequest>;
-
 /** The action to take if the route matches all criteria. Case-sensitive. */
 export type BGPFilterRuleAction = "PERMIT" | "DENY";
-export const BGPFilterRuleAction = S.String;
-
 /** Matches if the AS-PATH contains any one of the listed ASNs (logical OR within the list). Treated as an unordered set; ordering is not preserved by the storage layer. When combined with firstASN, both conditions must hold (logical AND, consistent with the rest of the match block). If firstASN is also listed here, its presence as the first hop is sufficient to satisfy this list; no duplicate hop is required. */
 export type BGPFilterRuleMatchAsPathContainsAnyList = Array<number>;
-export const BGPFilterRuleMatchAsPathContainsAnyList = /*@__PURE__*/ S.Array(
-  S.Number,
-) as any as S.Schema<BGPFilterRuleMatchAsPathContainsAnyList>;
-
 /** Matches if the route carries any one of these BGP standard communities (logical OR within the list). Format is 'asn:value' per RFC 1997 (both halves must fit in a uint32, i.e. 0..4294967295). Extended, large and well-known communities are not supported. */
 export type BGPFilterRuleMatchCommunitiesList = Array<string>;
-export const BGPFilterRuleMatchCommunitiesList = /*@__PURE__*/ S.Array(
-  S.String,
-) as any as S.Schema<BGPFilterRuleMatchCommunitiesList>;
-
-/** List of IPv4 networks to match. A route's prefix matches if it equals one of these (subject to minPrefixLength/maxPrefixLength refinement). If omitted, an implicit 0.0.0.0/0 base is used when minPrefixLength or maxPrefixLength is set; if all three are omitted, prefix matching is not performed at all. Each entry must parse as a valid IPv4 CIDR; the network portion is normalised (10.0.0.5/24 → 10.0.0.0/24). */
+/** List of IPv4 networks to match. A route's prefix matches if it equals one of these (subject to minPrefixLength/maxPrefixLength refinement). If omitted, an implicit 0.0.0.0/0 base is used when minPrefixLength or maxPrefixLength is set; if all three are omitted, prefix matching is not performed at all. Each entry must parse as a valid IPv4 CIDR; the network portion is normalised (10.0.0.5/24 -> 10.0.0.0/24). */
 export type BGPFilterRuleMatchPrefixesList = Array<string>;
-export const BGPFilterRuleMatchPrefixesList = /*@__PURE__*/ S.Array(
-  S.String,
-) as any as S.Schema<BGPFilterRuleMatchPrefixesList>;
-
 /** Optional matching criteria. If omitted entirely, the rule acts as match-all. All non-empty fields in this block must match (logical AND). */
 export interface BGPFilterRuleMatch {
   /** Matches if the AS-PATH contains any one of the listed ASNs (logical OR within the list). Treated as an unordered set; ordering is not preserved by the storage layer. When combined with firstASN, both conditions must hold (logical AND, consistent with the rest of the match block). If firstASN is also listed here, its presence as the first hop is sufficient to satisfy this list; no duplicate hop is required. */
@@ -356,25 +186,11 @@ export interface BGPFilterRuleMatch {
   minPrefixLength?: number;
   /** Matches the exact IPv4 address of the BGP neighbor that advertised the route. Useful when the same filter is attached to multiple tunnels with different neighbor IPs (allows per-peer rules in a shared filter). When a filter is attached to a single tunnel, this field is effectively a no-op because the route-map is already neighbor-scoped. */
   peer?: string;
-  /** List of IPv4 networks to match. A route's prefix matches if it equals one of these (subject to minPrefixLength/maxPrefixLength refinement). If omitted, an implicit 0.0.0.0/0 base is used when minPrefixLength or maxPrefixLength is set; if all three are omitted, prefix matching is not performed at all. Each entry must parse as a valid IPv4 CIDR; the network portion is normalised (10.0.0.5/24 → 10.0.0.0/24). */
+  /** List of IPv4 networks to match. A route's prefix matches if it equals one of these (subject to minPrefixLength/maxPrefixLength refinement). If omitted, an implicit 0.0.0.0/0 base is used when minPrefixLength or maxPrefixLength is set; if all three are omitted, prefix matching is not performed at all. Each entry must parse as a valid IPv4 CIDR; the network portion is normalised (10.0.0.5/24 -> 10.0.0.0/24). */
   prefixes?: BGPFilterRuleMatchPrefixesList;
 }
-export const BGPFilterRuleMatch = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    asPathContainsAny: S.optional(BGPFilterRuleMatchAsPathContainsAnyList),
-    communities: S.optional(BGPFilterRuleMatchCommunitiesList),
-    firstASN: S.optional(S.Number),
-    maxPrefixLength: S.optional(S.Number),
-    minPrefixLength: S.optional(S.Number),
-    peer: S.optional(S.String),
-    prefixes: S.optional(BGPFilterRuleMatchPrefixesList),
-  }),
-).annotate({ identifier: "BGPFilterRuleMatch" }) as any as S.Schema<BGPFilterRuleMatch>;
-
 /** Optional BGP attributes to apply when 'action' is PERMIT. Ignored for DENY rules. */
 export type BGPFilterRuleSet = CreateGatewayBGPFilterRuleRequestSet;
-export const BGPFilterRuleSet = CreateGatewayBGPFilterRuleRequestSet;
-
 /** A single rule within a BGPFilter. All non-empty fields within the 'match' block are AND-combined. Rules within a filter are evaluated in 'sequence' order; the first matching rule decides the outcome (logical OR across rules). An implicit DENY follows the last rule. */
 export interface BGPFilterRule {
   /** The action to take if the route matches all criteria. Case-sensitive. */
@@ -383,111 +199,55 @@ export interface BGPFilterRule {
   id?: string;
   /** Optional matching criteria. If omitted entirely, the rule acts as match-all. All non-empty fields in this block must match (logical AND). */
   match?: BGPFilterRuleMatch;
-  /** The evaluation order of the rule. Lower numbers are evaluated first. Must be unique within a filter. On POST, this field is optional: when omitted the server auto-assigns max(existing)+10 (the first rule starts at 10). On PUT this field is required — sending a partial update without 'sequence' returns 400. */
+  /** The evaluation order of the rule. Lower numbers are evaluated first. Must be unique within a filter. On POST, this field is optional: when omitted the server auto-assigns max(existing)+10 (the first rule starts at 10). On PUT this field is required -- sending a partial update without 'sequence' returns 400. */
   sequence?: number;
   /** Optional BGP attributes to apply when 'action' is PERMIT. Ignored for DENY rules. */
   set?: CreateGatewayBGPFilterRuleRequestSet;
 }
-export const BGPFilterRule = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    action: BGPFilterRuleAction,
-    id: S.optional(S.String),
-    match: S.optional(BGPFilterRuleMatch),
-    sequence: S.optional(S.Number),
-    set: S.optional(CreateGatewayBGPFilterRuleRequestSet),
-  }),
-).annotate({ identifier: "BGPFilterRule" }) as any as S.Schema<BGPFilterRule>;
-
 /** The region in which the resource is located. */
 export type CreateGatewayConnectionRequestRegion = "eu01" | "eu02";
-export const CreateGatewayConnectionRequestRegion = S.String;
-
 /** Optional. Defaults to 0.0.0.0/0 for Route-based VPN configurations. Mandatory for Policy-based. */
 export type CreateGatewayConnectionRequestLocalSubnetsList = Array<string>;
-export const CreateGatewayConnectionRequestLocalSubnetsList = /*@__PURE__*/ S.Array(
-  S.String,
-) as any as S.Schema<CreateGatewayConnectionRequestLocalSubnetsList>;
-
 /** Optional. Defaults to 0.0.0.0/0 for Route-based VPN configurations. Mandatory for Policy-based. */
 export type CreateGatewayConnectionRequestRemoteSubnetsList = Array<string>;
-export const CreateGatewayConnectionRequestRemoteSubnetsList = /*@__PURE__*/ S.Array(
-  S.String,
-) as any as S.Schema<CreateGatewayConnectionRequestRemoteSubnetsList>;
-
 /** Optional. Use this for route-based VPN. */
 export type CreateGatewayConnectionRequestStaticRoutesList = Array<string>;
-export const CreateGatewayConnectionRequestStaticRoutesList = /*@__PURE__*/ S.Array(
-  S.String,
-) as any as S.Schema<CreateGatewayConnectionRequestStaticRoutesList>;
-
 export interface BGPTunnelConfig {
   /** UUID of the BGPFilter to apply to incoming routes from this tunnel's BGP neighbor. The filter must exist in the same gateway. Multiple tunnels may reference the same BGPFilter; in that case the rules' 'match.peer' field can be used to scope behavior per neighbor. Outbound filtering is not yet supported; use gateway.bgp.overrideAdvertisedRoutes to control what is advertised. */
   inboundFilterId?: string | null;
   remoteAsn: number;
 }
-export const BGPTunnelConfig = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    inboundFilterId: S.optional(S.NullOr(S.String)),
-    remoteAsn: S.Number,
-  }),
-).annotate({ identifier: "BGPTunnelConfig" }) as any as S.Schema<BGPTunnelConfig>;
-
 /** The peering object defines the point-to-point IP configuration for the Tunnel Interface. These addresses serve as next-hop identifiers and are used for BGP peering sessions and can be used in Static Route-Based connectivity. */
 export interface PeeringConfig {
   localAddress?: string;
   remoteAddress?: string;
 }
-export const PeeringConfig = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    localAddress: S.optional(S.String),
-    remoteAddress: S.optional(S.String),
-  }),
-).annotate({ identifier: "PeeringConfig" }) as any as S.Schema<PeeringConfig>;
-
 export type TunnelConfigurationPhase1DhGroupsItem =
   | "modp1024"
   | "modp2048"
   | "ecp256"
   | "ecp384"
   | "modp2048s256";
-export const TunnelConfigurationPhase1DhGroupsItem = S.String;
-
 /** The Diffie-Hellman Group. Required, except if AEAD algorithms are selected. */
 export type TunnelConfigurationPhase1DhGroupsList = Array<
   TunnelConfigurationPhase1DhGroupsItem | (string & {})
 >;
-export const TunnelConfigurationPhase1DhGroupsList = /*@__PURE__*/ S.Array(
-  TunnelConfigurationPhase1DhGroupsItem,
-) as any as S.Schema<TunnelConfigurationPhase1DhGroupsList>;
-
 export type TunnelConfigurationPhase1EncryptionAlgorithmsItem =
   | "aes256"
   | "aes128gcm16"
   | "aes256gcm16";
-export const TunnelConfigurationPhase1EncryptionAlgorithmsItem = S.String;
-
 export type TunnelConfigurationPhase1EncryptionAlgorithmsList = Array<
   TunnelConfigurationPhase1EncryptionAlgorithmsItem | (string & {})
 >;
-export const TunnelConfigurationPhase1EncryptionAlgorithmsList = /*@__PURE__*/ S.Array(
-  TunnelConfigurationPhase1EncryptionAlgorithmsItem,
-) as any as S.Schema<TunnelConfigurationPhase1EncryptionAlgorithmsList>;
-
 export type TunnelConfigurationPhase1IntegrityAlgorithmsItem =
   | "sha1"
   | "sha2_256"
   | "sha2_384"
   | "sha2_512";
-export const TunnelConfigurationPhase1IntegrityAlgorithmsItem = S.String;
-
 /** Supported integrity algorithms. SHA1 is deprecated and will be removed on 2026-12-31. */
 export type TunnelConfigurationPhase1IntegrityAlgorithmsList = Array<
   TunnelConfigurationPhase1IntegrityAlgorithmsItem | (string & {})
 >;
-export const TunnelConfigurationPhase1IntegrityAlgorithmsList = /*@__PURE__*/ S.Array(
-  TunnelConfigurationPhase1IntegrityAlgorithmsItem,
-) as any as S.Schema<TunnelConfigurationPhase1IntegrityAlgorithmsList>;
-
 export interface TunnelConfigurationPhase1 {
   /** The Diffie-Hellman Group. Required, except if AEAD algorithms are selected. */
   dhGroups?: TunnelConfigurationPhase1DhGroupsList;
@@ -497,69 +257,36 @@ export interface TunnelConfigurationPhase1 {
   /** Time to schedule a IKE re-keying (in seconds). */
   rekeyTime?: number;
 }
-export const TunnelConfigurationPhase1 = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    dhGroups: S.optional(TunnelConfigurationPhase1DhGroupsList),
-    encryptionAlgorithms: TunnelConfigurationPhase1EncryptionAlgorithmsList,
-    integrityAlgorithms: TunnelConfigurationPhase1IntegrityAlgorithmsList,
-    rekeyTime: S.optional(S.Number),
-  }),
-).annotate({
-  identifier: "TunnelConfigurationPhase1",
-}) as any as S.Schema<TunnelConfigurationPhase1>;
-
 export type TunnelConfigurationPhase2DhGroupsItem =
   | "modp1024"
   | "modp2048"
   | "ecp256"
   | "ecp384"
   | "modp2048s256";
-export const TunnelConfigurationPhase2DhGroupsItem = S.String;
-
 /** The Diffie-Hellman Group. Required, except if AEAD algorithms are selected. */
 export type TunnelConfigurationPhase2DhGroupsList = Array<
   TunnelConfigurationPhase2DhGroupsItem | (string & {})
 >;
-export const TunnelConfigurationPhase2DhGroupsList = /*@__PURE__*/ S.Array(
-  TunnelConfigurationPhase2DhGroupsItem,
-) as any as S.Schema<TunnelConfigurationPhase2DhGroupsList>;
-
 export type TunnelConfigurationPhase2EncryptionAlgorithmsItem =
   | "aes256"
   | "aes128gcm16"
   | "aes256gcm16";
-export const TunnelConfigurationPhase2EncryptionAlgorithmsItem = S.String;
-
 export type TunnelConfigurationPhase2EncryptionAlgorithmsList = Array<
   TunnelConfigurationPhase2EncryptionAlgorithmsItem | (string & {})
 >;
-export const TunnelConfigurationPhase2EncryptionAlgorithmsList = /*@__PURE__*/ S.Array(
-  TunnelConfigurationPhase2EncryptionAlgorithmsItem,
-) as any as S.Schema<TunnelConfigurationPhase2EncryptionAlgorithmsList>;
-
 export type TunnelConfigurationPhase2IntegrityAlgorithmsItem =
   | "sha1"
   | "sha2_256"
   | "sha2_384"
   | "sha2_512";
-export const TunnelConfigurationPhase2IntegrityAlgorithmsItem = S.String;
-
 /** Supported integrity algorithms. SHA1 is deprecated and will be removed on 2026-12-31. */
 export type TunnelConfigurationPhase2IntegrityAlgorithmsList = Array<
   TunnelConfigurationPhase2IntegrityAlgorithmsItem | (string & {})
 >;
-export const TunnelConfigurationPhase2IntegrityAlgorithmsList = /*@__PURE__*/ S.Array(
-  TunnelConfigurationPhase2IntegrityAlgorithmsItem,
-) as any as S.Schema<TunnelConfigurationPhase2IntegrityAlgorithmsList>;
-
 /** Action to perform for this CHILD_SA on DPD timeout. "clear": Closes the CHILD_SA and does not take further action. "restart": immediately tries to re-negotiate the CILD_SA under a fresh IKE_SA. */
 export type TunnelConfigurationPhase2DpdAction = "clear" | "restart";
-export const TunnelConfigurationPhase2DpdAction = S.String;
-
 /** Action to perform after loading the connection configuration. "none": The connection will be loaded but needs to be manually initiated. "start": initiates the connection actively. */
 export type TunnelConfigurationPhase2StartAction = "none" | "start";
-export const TunnelConfigurationPhase2StartAction = S.String;
-
 export interface TunnelConfigurationPhase2 {
   /** The Diffie-Hellman Group. Required, except if AEAD algorithms are selected. */
   dhGroups?: TunnelConfigurationPhase2DhGroupsList;
@@ -573,19 +300,6 @@ export interface TunnelConfigurationPhase2 {
   /** Action to perform after loading the connection configuration. "none": The connection will be loaded but needs to be manually initiated. "start": initiates the connection actively. */
   startAction?: TunnelConfigurationPhase2StartAction | (string & {});
 }
-export const TunnelConfigurationPhase2 = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    dhGroups: S.optional(TunnelConfigurationPhase2DhGroupsList),
-    encryptionAlgorithms: TunnelConfigurationPhase2EncryptionAlgorithmsList,
-    integrityAlgorithms: TunnelConfigurationPhase2IntegrityAlgorithmsList,
-    dpdAction: S.optional(TunnelConfigurationPhase2DpdAction),
-    rekeyTime: S.optional(S.Number),
-    startAction: S.optional(TunnelConfigurationPhase2StartAction),
-  }),
-).annotate({
-  identifier: "TunnelConfigurationPhase2",
-}) as any as S.Schema<TunnelConfigurationPhase2>;
-
 export interface TunnelConfiguration {
   bgp?: BGPTunnelConfig;
   peering?: PeeringConfig;
@@ -595,17 +309,6 @@ export interface TunnelConfiguration {
   preSharedKey?: string;
   remoteAddress: string;
 }
-export const TunnelConfiguration = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    bgp: S.optional(BGPTunnelConfig),
-    peering: S.optional(PeeringConfig),
-    phase1: TunnelConfigurationPhase1,
-    phase2: TunnelConfigurationPhase2,
-    preSharedKey: S.optional(S.String),
-    remoteAddress: S.String,
-  }),
-).annotate({ identifier: "TunnelConfiguration" }) as any as S.Schema<TunnelConfiguration>;
-
 export interface CreateGatewayConnectionRequest {
   projectId: string;
   region: CreateGatewayConnectionRequestRegion | (string & {});
@@ -624,90 +327,35 @@ export interface CreateGatewayConnectionRequest {
   tunnel1: TunnelConfiguration;
   tunnel2: TunnelConfiguration;
 }
-export const CreateGatewayConnectionRequest = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    projectId: S.String.pipe(T.Label()),
-    region: CreateGatewayConnectionRequestRegion.pipe(T.Label()),
-    gatewayId: S.String.pipe(T.Label()),
-    displayName: S.String,
-    enabled: S.optional(S.Boolean),
-    labels: S.optional(Label),
-    localSubnets: S.optional(CreateGatewayConnectionRequestLocalSubnetsList),
-    remoteSubnets: S.optional(CreateGatewayConnectionRequestRemoteSubnetsList),
-    staticRoutes: S.optional(CreateGatewayConnectionRequestStaticRoutesList),
-    tunnel1: TunnelConfiguration,
-    tunnel2: TunnelConfiguration,
-  }).pipe(
-    T.Http({
-      method: "POST",
-      uri: "/v1/projects/{projectId}/regions/{region}/gateways/{gatewayId}/connections",
-      code: 200,
-      baseUrl: "https://vpn.api.stackit.cloud",
-    }),
-  ),
-).annotate({
-  identifier: "CreateGatewayConnectionRequest",
-}) as any as S.Schema<CreateGatewayConnectionRequest>;
-
 /** Optional. Defaults to 0.0.0.0/0 for Route-based VPN configurations. Mandatory for Policy-based. */
 export type ConnectionResponseOutputLocalSubnetsList = Array<string>;
-export const ConnectionResponseOutputLocalSubnetsList = /*@__PURE__*/ S.Array(
-  S.String,
-) as any as S.Schema<ConnectionResponseOutputLocalSubnetsList>;
-
 /** Optional. Defaults to 0.0.0.0/0 for Route-based VPN configurations. Mandatory for Policy-based. */
 export type ConnectionResponseOutputRemoteSubnetsList = Array<string>;
-export const ConnectionResponseOutputRemoteSubnetsList = /*@__PURE__*/ S.Array(
-  S.String,
-) as any as S.Schema<ConnectionResponseOutputRemoteSubnetsList>;
-
 /** Optional. Use this for route-based VPN. */
 export type ConnectionResponseOutputStaticRoutesList = Array<string>;
-export const ConnectionResponseOutputStaticRoutesList = /*@__PURE__*/ S.Array(
-  S.String,
-) as any as S.Schema<ConnectionResponseOutputStaticRoutesList>;
-
 export type TunnelConfigurationOutputPhase1DhGroupsItem =
   | "modp1024"
   | "modp2048"
   | "ecp256"
   | "ecp384"
   | "modp2048s256";
-export const TunnelConfigurationOutputPhase1DhGroupsItem = S.String;
-
 /** The Diffie-Hellman Group. Required, except if AEAD algorithms are selected. */
 export type TunnelConfigurationOutputPhase1DhGroupsList =
   Array<TunnelConfigurationOutputPhase1DhGroupsItem>;
-export const TunnelConfigurationOutputPhase1DhGroupsList = /*@__PURE__*/ S.Array(
-  TunnelConfigurationOutputPhase1DhGroupsItem,
-) as any as S.Schema<TunnelConfigurationOutputPhase1DhGroupsList>;
-
 export type TunnelConfigurationOutputPhase1EncryptionAlgorithmsItem =
   | "aes256"
   | "aes128gcm16"
   | "aes256gcm16";
-export const TunnelConfigurationOutputPhase1EncryptionAlgorithmsItem = S.String;
-
 export type TunnelConfigurationOutputPhase1EncryptionAlgorithmsList =
   Array<TunnelConfigurationOutputPhase1EncryptionAlgorithmsItem>;
-export const TunnelConfigurationOutputPhase1EncryptionAlgorithmsList = /*@__PURE__*/ S.Array(
-  TunnelConfigurationOutputPhase1EncryptionAlgorithmsItem,
-) as any as S.Schema<TunnelConfigurationOutputPhase1EncryptionAlgorithmsList>;
-
 export type TunnelConfigurationOutputPhase1IntegrityAlgorithmsItem =
   | "sha1"
   | "sha2_256"
   | "sha2_384"
   | "sha2_512";
-export const TunnelConfigurationOutputPhase1IntegrityAlgorithmsItem = S.String;
-
 /** Supported integrity algorithms. SHA1 is deprecated and will be removed on 2026-12-31. */
 export type TunnelConfigurationOutputPhase1IntegrityAlgorithmsList =
   Array<TunnelConfigurationOutputPhase1IntegrityAlgorithmsItem>;
-export const TunnelConfigurationOutputPhase1IntegrityAlgorithmsList = /*@__PURE__*/ S.Array(
-  TunnelConfigurationOutputPhase1IntegrityAlgorithmsItem,
-) as any as S.Schema<TunnelConfigurationOutputPhase1IntegrityAlgorithmsList>;
-
 export interface TunnelConfigurationOutputPhase1 {
   /** The Diffie-Hellman Group. Required, except if AEAD algorithms are selected. */
   dhGroups?: TunnelConfigurationOutputPhase1DhGroupsList;
@@ -717,66 +365,33 @@ export interface TunnelConfigurationOutputPhase1 {
   /** Time to schedule a IKE re-keying (in seconds). */
   rekeyTime?: number;
 }
-export const TunnelConfigurationOutputPhase1 = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    dhGroups: S.optional(TunnelConfigurationOutputPhase1DhGroupsList),
-    encryptionAlgorithms: TunnelConfigurationOutputPhase1EncryptionAlgorithmsList,
-    integrityAlgorithms: TunnelConfigurationOutputPhase1IntegrityAlgorithmsList,
-    rekeyTime: S.optional(S.Number),
-  }),
-).annotate({
-  identifier: "TunnelConfigurationOutputPhase1",
-}) as any as S.Schema<TunnelConfigurationOutputPhase1>;
-
 export type TunnelConfigurationOutputPhase2DhGroupsItem =
   | "modp1024"
   | "modp2048"
   | "ecp256"
   | "ecp384"
   | "modp2048s256";
-export const TunnelConfigurationOutputPhase2DhGroupsItem = S.String;
-
 /** The Diffie-Hellman Group. Required, except if AEAD algorithms are selected. */
 export type TunnelConfigurationOutputPhase2DhGroupsList =
   Array<TunnelConfigurationOutputPhase2DhGroupsItem>;
-export const TunnelConfigurationOutputPhase2DhGroupsList = /*@__PURE__*/ S.Array(
-  TunnelConfigurationOutputPhase2DhGroupsItem,
-) as any as S.Schema<TunnelConfigurationOutputPhase2DhGroupsList>;
-
 export type TunnelConfigurationOutputPhase2EncryptionAlgorithmsItem =
   | "aes256"
   | "aes128gcm16"
   | "aes256gcm16";
-export const TunnelConfigurationOutputPhase2EncryptionAlgorithmsItem = S.String;
-
 export type TunnelConfigurationOutputPhase2EncryptionAlgorithmsList =
   Array<TunnelConfigurationOutputPhase2EncryptionAlgorithmsItem>;
-export const TunnelConfigurationOutputPhase2EncryptionAlgorithmsList = /*@__PURE__*/ S.Array(
-  TunnelConfigurationOutputPhase2EncryptionAlgorithmsItem,
-) as any as S.Schema<TunnelConfigurationOutputPhase2EncryptionAlgorithmsList>;
-
 export type TunnelConfigurationOutputPhase2IntegrityAlgorithmsItem =
   | "sha1"
   | "sha2_256"
   | "sha2_384"
   | "sha2_512";
-export const TunnelConfigurationOutputPhase2IntegrityAlgorithmsItem = S.String;
-
 /** Supported integrity algorithms. SHA1 is deprecated and will be removed on 2026-12-31. */
 export type TunnelConfigurationOutputPhase2IntegrityAlgorithmsList =
   Array<TunnelConfigurationOutputPhase2IntegrityAlgorithmsItem>;
-export const TunnelConfigurationOutputPhase2IntegrityAlgorithmsList = /*@__PURE__*/ S.Array(
-  TunnelConfigurationOutputPhase2IntegrityAlgorithmsItem,
-) as any as S.Schema<TunnelConfigurationOutputPhase2IntegrityAlgorithmsList>;
-
 /** Action to perform for this CHILD_SA on DPD timeout. "clear": Closes the CHILD_SA and does not take further action. "restart": immediately tries to re-negotiate the CILD_SA under a fresh IKE_SA. */
 export type TunnelConfigurationOutputPhase2DpdAction = "clear" | "restart";
-export const TunnelConfigurationOutputPhase2DpdAction = S.String;
-
 /** Action to perform after loading the connection configuration. "none": The connection will be loaded but needs to be manually initiated. "start": initiates the connection actively. */
 export type TunnelConfigurationOutputPhase2StartAction = "none" | "start";
-export const TunnelConfigurationOutputPhase2StartAction = S.String;
-
 export interface TunnelConfigurationOutputPhase2 {
   /** The Diffie-Hellman Group. Required, except if AEAD algorithms are selected. */
   dhGroups?: TunnelConfigurationOutputPhase2DhGroupsList;
@@ -790,19 +405,6 @@ export interface TunnelConfigurationOutputPhase2 {
   /** Action to perform after loading the connection configuration. "none": The connection will be loaded but needs to be manually initiated. "start": initiates the connection actively. */
   startAction?: TunnelConfigurationOutputPhase2StartAction;
 }
-export const TunnelConfigurationOutputPhase2 = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    dhGroups: S.optional(TunnelConfigurationOutputPhase2DhGroupsList),
-    encryptionAlgorithms: TunnelConfigurationOutputPhase2EncryptionAlgorithmsList,
-    integrityAlgorithms: TunnelConfigurationOutputPhase2IntegrityAlgorithmsList,
-    dpdAction: S.optional(TunnelConfigurationOutputPhase2DpdAction),
-    rekeyTime: S.optional(S.Number),
-    startAction: S.optional(TunnelConfigurationOutputPhase2StartAction),
-  }),
-).annotate({
-  identifier: "TunnelConfigurationOutputPhase2",
-}) as any as S.Schema<TunnelConfigurationOutputPhase2>;
-
 export interface TunnelConfigurationOutput {
   bgp?: BGPTunnelConfig;
   peering?: PeeringConfig;
@@ -810,18 +412,6 @@ export interface TunnelConfigurationOutput {
   phase2: TunnelConfigurationOutputPhase2;
   remoteAddress: string;
 }
-export const TunnelConfigurationOutput = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    bgp: S.optional(BGPTunnelConfig),
-    peering: S.optional(PeeringConfig),
-    phase1: TunnelConfigurationOutputPhase1,
-    phase2: TunnelConfigurationOutputPhase2,
-    remoteAddress: S.String,
-  }),
-).annotate({
-  identifier: "TunnelConfigurationOutput",
-}) as any as S.Schema<TunnelConfigurationOutput>;
-
 export interface ConnectionResponseOutput {
   /** A user-friendly name for the connection. */
   displayName: string;
@@ -839,86 +429,25 @@ export interface ConnectionResponseOutput {
   tunnel1: TunnelConfigurationOutput;
   tunnel2: TunnelConfigurationOutput;
 }
-export const ConnectionResponseOutput = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    displayName: S.String,
-    enabled: S.optional(S.Boolean),
-    id: S.optional(S.String),
-    labels: S.optional(Label),
-    localSubnets: S.optional(ConnectionResponseOutputLocalSubnetsList),
-    remoteSubnets: S.optional(ConnectionResponseOutputRemoteSubnetsList),
-    staticRoutes: S.optional(ConnectionResponseOutputStaticRoutesList),
-    tunnel1: TunnelConfigurationOutput,
-    tunnel2: TunnelConfigurationOutput,
-  }),
-).annotate({ identifier: "ConnectionResponseOutput" }) as any as S.Schema<ConnectionResponseOutput>;
-
 /** The region in which the resource is located. */
 export type DeleteGatewayRequestRegion = "eu01" | "eu02";
-export const DeleteGatewayRequestRegion = S.String;
-
 export interface DeleteGatewayRequest {
   projectId: string;
   region: DeleteGatewayRequestRegion | (string & {});
   gatewayId: string;
 }
-export const DeleteGatewayRequest = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    projectId: S.String.pipe(T.Label()),
-    region: DeleteGatewayRequestRegion.pipe(T.Label()),
-    gatewayId: S.String.pipe(T.Label()),
-  }).pipe(
-    T.Http({
-      method: "DELETE",
-      uri: "/v1/projects/{projectId}/regions/{region}/gateways/{gatewayId}",
-      code: 200,
-      baseUrl: "https://vpn.api.stackit.cloud",
-    }),
-  ),
-).annotate({ identifier: "DeleteGatewayRequest" }) as any as S.Schema<DeleteGatewayRequest>;
-
 export interface DeleteGatewayResponse {}
-export const DeleteGatewayResponse = /*@__PURE__*/ S.suspend(() => S.Struct({})).annotate({
-  identifier: "DeleteGatewayResponse",
-}) as any as S.Schema<DeleteGatewayResponse>;
-
 /** The region in which the resource is located. */
 export type DeleteGatewayBGPFilterRequestRegion = "eu01" | "eu02";
-export const DeleteGatewayBGPFilterRequestRegion = S.String;
-
 export interface DeleteGatewayBGPFilterRequest {
   projectId: string;
   region: DeleteGatewayBGPFilterRequestRegion | (string & {});
   gatewayId: string;
   filterId: string;
 }
-export const DeleteGatewayBGPFilterRequest = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    projectId: S.String.pipe(T.Label()),
-    region: DeleteGatewayBGPFilterRequestRegion.pipe(T.Label()),
-    gatewayId: S.String.pipe(T.Label()),
-    filterId: S.String.pipe(T.Label()),
-  }).pipe(
-    T.Http({
-      method: "DELETE",
-      uri: "/v1/projects/{projectId}/regions/{region}/gateways/{gatewayId}/bgp-filters/{filterId}",
-      code: 200,
-      baseUrl: "https://vpn.api.stackit.cloud",
-    }),
-  ),
-).annotate({
-  identifier: "DeleteGatewayBGPFilterRequest",
-}) as any as S.Schema<DeleteGatewayBGPFilterRequest>;
-
 export interface DeleteGatewayBGPFilterResponse {}
-export const DeleteGatewayBGPFilterResponse = /*@__PURE__*/ S.suspend(() => S.Struct({})).annotate({
-  identifier: "DeleteGatewayBGPFilterResponse",
-}) as any as S.Schema<DeleteGatewayBGPFilterResponse>;
-
 /** The region in which the resource is located. */
 export type DeleteGatewayBGPFilterRuleRequestRegion = "eu01" | "eu02";
-export const DeleteGatewayBGPFilterRuleRequestRegion = S.String;
-
 export interface DeleteGatewayBGPFilterRuleRequest {
   projectId: string;
   region: DeleteGatewayBGPFilterRuleRequestRegion | (string & {});
@@ -926,92 +455,24 @@ export interface DeleteGatewayBGPFilterRuleRequest {
   filterId: string;
   ruleId: string;
 }
-export const DeleteGatewayBGPFilterRuleRequest = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    projectId: S.String.pipe(T.Label()),
-    region: DeleteGatewayBGPFilterRuleRequestRegion.pipe(T.Label()),
-    gatewayId: S.String.pipe(T.Label()),
-    filterId: S.String.pipe(T.Label()),
-    ruleId: S.String.pipe(T.Label()),
-  }).pipe(
-    T.Http({
-      method: "DELETE",
-      uri: "/v1/projects/{projectId}/regions/{region}/gateways/{gatewayId}/bgp-filters/{filterId}/rules/{ruleId}",
-      code: 200,
-      baseUrl: "https://vpn.api.stackit.cloud",
-    }),
-  ),
-).annotate({
-  identifier: "DeleteGatewayBGPFilterRuleRequest",
-}) as any as S.Schema<DeleteGatewayBGPFilterRuleRequest>;
-
 export interface DeleteGatewayBGPFilterRuleResponse {}
-export const DeleteGatewayBGPFilterRuleResponse = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({}),
-).annotate({
-  identifier: "DeleteGatewayBGPFilterRuleResponse",
-}) as any as S.Schema<DeleteGatewayBGPFilterRuleResponse>;
-
 /** The region in which the resource is located. */
 export type DeleteGatewayConnectionRequestRegion = "eu01" | "eu02";
-export const DeleteGatewayConnectionRequestRegion = S.String;
-
 export interface DeleteGatewayConnectionRequest {
   projectId: string;
   region: DeleteGatewayConnectionRequestRegion | (string & {});
   gatewayId: string;
   connectionId: string;
 }
-export const DeleteGatewayConnectionRequest = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    projectId: S.String.pipe(T.Label()),
-    region: DeleteGatewayConnectionRequestRegion.pipe(T.Label()),
-    gatewayId: S.String.pipe(T.Label()),
-    connectionId: S.String.pipe(T.Label()),
-  }).pipe(
-    T.Http({
-      method: "DELETE",
-      uri: "/v1/projects/{projectId}/regions/{region}/gateways/{gatewayId}/connections/{connectionId}",
-      code: 200,
-      baseUrl: "https://vpn.api.stackit.cloud",
-    }),
-  ),
-).annotate({
-  identifier: "DeleteGatewayConnectionRequest",
-}) as any as S.Schema<DeleteGatewayConnectionRequest>;
-
 export interface DeleteGatewayConnectionResponse {}
-export const DeleteGatewayConnectionResponse = /*@__PURE__*/ S.suspend(() => S.Struct({})).annotate(
-  { identifier: "DeleteGatewayConnectionResponse" },
-) as any as S.Schema<DeleteGatewayConnectionResponse>;
-
 /** The region in which the resource is located. */
 export type GetGatewayRequestRegion = "eu01" | "eu02";
-export const GetGatewayRequestRegion = S.String;
-
 export interface GetGatewayRequest {
   projectId: string;
   region: GetGatewayRequestRegion | (string & {});
   gatewayId: string;
 }
-export const GetGatewayRequest = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    projectId: S.String.pipe(T.Label()),
-    region: GetGatewayRequestRegion.pipe(T.Label()),
-    gatewayId: S.String.pipe(T.Label()),
-  }).pipe(
-    T.Http({
-      method: "GET",
-      uri: "/v1/projects/{projectId}/regions/{region}/gateways/{gatewayId}",
-      code: 200,
-      baseUrl: "https://vpn.api.stackit.cloud",
-    }),
-  ),
-).annotate({ identifier: "GetGatewayRequest" }) as any as S.Schema<GetGatewayRequest>;
-
 export type GetGatewayResponseAvailabilityZones = CreateGatewayRequestAvailabilityZones;
-export const GetGatewayResponseAvailabilityZones = CreateGatewayRequestAvailabilityZones;
-
 export interface GetGatewayResponse {
   availabilityZones: CreateGatewayRequestAvailabilityZones;
   bgp?: BGPGatewayConfig;
@@ -1026,52 +487,16 @@ export interface GetGatewayResponse {
   id?: string;
   state?: GatewayStatus;
 }
-export const GetGatewayResponse = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    availabilityZones: CreateGatewayRequestAvailabilityZones,
-    bgp: S.optional(BGPGatewayConfig),
-    displayName: S.String,
-    labels: S.optional(Label),
-    networkConfig: S.optional(NetworkConfig),
-    planId: S.String,
-    routingType: RoutingType,
-    id: S.optional(S.String),
-    state: S.optional(GatewayStatus),
-  }),
-).annotate({ identifier: "GetGatewayResponse" }) as any as S.Schema<GetGatewayResponse>;
-
 /** The region in which the resource is located. */
 export type GetGatewayBGPFilterRequestRegion = "eu01" | "eu02";
-export const GetGatewayBGPFilterRequestRegion = S.String;
-
 export interface GetGatewayBGPFilterRequest {
   projectId: string;
   region: GetGatewayBGPFilterRequestRegion | (string & {});
   gatewayId: string;
   filterId: string;
 }
-export const GetGatewayBGPFilterRequest = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    projectId: S.String.pipe(T.Label()),
-    region: GetGatewayBGPFilterRequestRegion.pipe(T.Label()),
-    gatewayId: S.String.pipe(T.Label()),
-    filterId: S.String.pipe(T.Label()),
-  }).pipe(
-    T.Http({
-      method: "GET",
-      uri: "/v1/projects/{projectId}/regions/{region}/gateways/{gatewayId}/bgp-filters/{filterId}",
-      code: 200,
-      baseUrl: "https://vpn.api.stackit.cloud",
-    }),
-  ),
-).annotate({
-  identifier: "GetGatewayBGPFilterRequest",
-}) as any as S.Schema<GetGatewayBGPFilterRequest>;
-
 /** The region in which the resource is located. */
 export type GetGatewayBGPFilterRuleRequestRegion = "eu01" | "eu02";
-export const GetGatewayBGPFilterRuleRequestRegion = S.String;
-
 export interface GetGatewayBGPFilterRuleRequest {
   projectId: string;
   region: GetGatewayBGPFilterRuleRequestRegion | (string & {});
@@ -1079,84 +504,23 @@ export interface GetGatewayBGPFilterRuleRequest {
   filterId: string;
   ruleId: string;
 }
-export const GetGatewayBGPFilterRuleRequest = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    projectId: S.String.pipe(T.Label()),
-    region: GetGatewayBGPFilterRuleRequestRegion.pipe(T.Label()),
-    gatewayId: S.String.pipe(T.Label()),
-    filterId: S.String.pipe(T.Label()),
-    ruleId: S.String.pipe(T.Label()),
-  }).pipe(
-    T.Http({
-      method: "GET",
-      uri: "/v1/projects/{projectId}/regions/{region}/gateways/{gatewayId}/bgp-filters/{filterId}/rules/{ruleId}",
-      code: 200,
-      baseUrl: "https://vpn.api.stackit.cloud",
-    }),
-  ),
-).annotate({
-  identifier: "GetGatewayBGPFilterRuleRequest",
-}) as any as S.Schema<GetGatewayBGPFilterRuleRequest>;
-
 /** The region in which the resource is located. */
 export type GetGatewayConnectionRequestRegion = "eu01" | "eu02";
-export const GetGatewayConnectionRequestRegion = S.String;
-
 export interface GetGatewayConnectionRequest {
   projectId: string;
   region: GetGatewayConnectionRequestRegion | (string & {});
   gatewayId: string;
   connectionId: string;
 }
-export const GetGatewayConnectionRequest = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    projectId: S.String.pipe(T.Label()),
-    region: GetGatewayConnectionRequestRegion.pipe(T.Label()),
-    gatewayId: S.String.pipe(T.Label()),
-    connectionId: S.String.pipe(T.Label()),
-  }).pipe(
-    T.Http({
-      method: "GET",
-      uri: "/v1/projects/{projectId}/regions/{region}/gateways/{gatewayId}/connections/{connectionId}",
-      code: 200,
-      baseUrl: "https://vpn.api.stackit.cloud",
-    }),
-  ),
-).annotate({
-  identifier: "GetGatewayConnectionRequest",
-}) as any as S.Schema<GetGatewayConnectionRequest>;
-
 /** The region in which the resource is located. */
 export type GetGatewayConnectionStatusRequestRegion = "eu01" | "eu02";
-export const GetGatewayConnectionStatusRequestRegion = S.String;
-
 export interface GetGatewayConnectionStatusRequest {
   projectId: string;
   region: GetGatewayConnectionStatusRequestRegion | (string & {});
   gatewayId: string;
   connectionId: string;
 }
-export const GetGatewayConnectionStatusRequest = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    projectId: S.String.pipe(T.Label()),
-    region: GetGatewayConnectionStatusRequestRegion.pipe(T.Label()),
-    gatewayId: S.String.pipe(T.Label()),
-    connectionId: S.String.pipe(T.Label()),
-  }).pipe(
-    T.Http({
-      method: "GET",
-      uri: "/v1/projects/{projectId}/regions/{region}/gateways/{gatewayId}/connections/{connectionId}/status",
-      code: 200,
-      baseUrl: "https://vpn.api.stackit.cloud",
-    }),
-  ),
-).annotate({
-  identifier: "GetGatewayConnectionStatusRequest",
-}) as any as S.Schema<GetGatewayConnectionStatusRequest>;
-
 export type TunnelStatusName = "tunnel1" | "tunnel2";
-export const TunnelStatusName = S.String;
-
 export interface Phase1Status {
   /** The negotiated Diffie-Hellman Group */
   dhGroup?: string;
@@ -1166,15 +530,6 @@ export interface Phase1Status {
   integrityAlgorithm?: string;
   state?: string;
 }
-export const Phase1Status = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    dhGroup: S.optional(S.String),
-    encryptionAlgorithm: S.optional(S.String),
-    integrityAlgorithm: S.optional(S.String),
-    state: S.optional(S.String),
-  }),
-).annotate({ identifier: "Phase1Status" }) as any as S.Schema<Phase1Status>;
-
 export interface Phase2Status {
   /** The total data volume received through this Security Association, measured in bytes. */
   bytesIn?: string;
@@ -1196,21 +551,6 @@ export interface Phase2Status {
   protocol?: string;
   state?: string;
 }
-export const Phase2Status = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    bytesIn: S.optional(S.String),
-    bytesOut: S.optional(S.String),
-    dhGroup: S.optional(S.String),
-    encap: S.optional(S.String),
-    encryptionAlgorithm: S.optional(S.String),
-    integrityAlgorithm: S.optional(S.String),
-    packetsIn: S.optional(S.String),
-    packetsOut: S.optional(S.String),
-    protocol: S.optional(S.String),
-    state: S.optional(S.String),
-  }),
-).annotate({ identifier: "Phase2Status" }) as any as S.Schema<Phase2Status>;
-
 /** Describes the status of the VPN itself. */
 export interface TunnelStatus {
   established?: boolean;
@@ -1218,20 +558,7 @@ export interface TunnelStatus {
   phase1?: Phase1Status;
   phase2?: Phase2Status;
 }
-export const TunnelStatus = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    established: S.optional(S.Boolean),
-    name: S.optional(TunnelStatusName),
-    phase1: S.optional(Phase1Status),
-    phase2: S.optional(Phase2Status),
-  }),
-).annotate({ identifier: "TunnelStatus" }) as any as S.Schema<TunnelStatus>;
-
 export type ConnectionStatusResponseTunnelsList = Array<TunnelStatus>;
-export const ConnectionStatusResponseTunnelsList = /*@__PURE__*/ S.Array(
-  TunnelStatus,
-) as any as S.Schema<ConnectionStatusResponseTunnelsList>;
-
 export interface ConnectionStatusResponse {
   /** The name of the connection. */
   displayName?: string;
@@ -1240,44 +567,14 @@ export interface ConnectionStatusResponse {
   id?: string;
   tunnels?: ConnectionStatusResponseTunnelsList;
 }
-export const ConnectionStatusResponse = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    displayName: S.optional(S.String),
-    enabled: S.optional(S.Boolean),
-    id: S.optional(S.String),
-    tunnels: S.optional(ConnectionStatusResponseTunnelsList),
-  }),
-).annotate({ identifier: "ConnectionStatusResponse" }) as any as S.Schema<ConnectionStatusResponse>;
-
 /** The region in which the resource is located. */
 export type GetGatewayStatusRequestRegion = "eu01" | "eu02";
-export const GetGatewayStatusRequestRegion = S.String;
-
 export interface GetGatewayStatusRequest {
   projectId: string;
   region: GetGatewayStatusRequestRegion | (string & {});
   gatewayId: string;
 }
-export const GetGatewayStatusRequest = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    projectId: S.String.pipe(T.Label()),
-    region: GetGatewayStatusRequestRegion.pipe(T.Label()),
-    gatewayId: S.String.pipe(T.Label()),
-  }).pipe(
-    T.Http({
-      method: "GET",
-      uri: "/v1/projects/{projectId}/regions/{region}/gateways/{gatewayId}/status",
-      code: 200,
-      baseUrl: "https://vpn.api.stackit.cloud",
-    }),
-  ),
-).annotate({ identifier: "GetGatewayStatusRequest" }) as any as S.Schema<GetGatewayStatusRequest>;
-
 export type GatewayStatusResponseConnectionsList = Array<ConnectionStatusResponse>;
-export const GatewayStatusResponseConnectionsList = /*@__PURE__*/ S.Array(
-  ConnectionStatusResponse,
-) as any as S.Schema<GatewayStatusResponseConnectionsList>;
-
 export interface BGPStatusPeers {
   /** The ASN of the local STACKIT gateway. */
   localAs: number;
@@ -1294,23 +591,7 @@ export interface BGPStatusPeers {
   /** The current BGP session state. */
   state: string;
 }
-export const BGPStatusPeers = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    localAs: S.Number,
-    peerUptime: S.String,
-    pfxRcd: S.Number,
-    pfxSnt: S.Number,
-    remoteAs: S.Number,
-    remoteIP: S.String,
-    state: S.String,
-  }),
-).annotate({ identifier: "BGPStatusPeers" }) as any as S.Schema<BGPStatusPeers>;
-
 export type BGPStatusPeersList = Array<BGPStatusPeers>;
-export const BGPStatusPeersList = /*@__PURE__*/ S.Array(
-  BGPStatusPeers,
-) as any as S.Schema<BGPStatusPeersList>;
-
 export interface BGPStatusRoutes {
   /** The destination network */
   network: string;
@@ -1321,35 +602,12 @@ export interface BGPStatusRoutes {
   peerId: string;
   weight: number;
 }
-export const BGPStatusRoutes = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    network: S.String,
-    origin: S.String,
-    path: S.String,
-    peerId: S.String,
-    weight: S.Number,
-  }),
-).annotate({ identifier: "BGPStatusRoutes" }) as any as S.Schema<BGPStatusRoutes>;
-
 export type BGPStatusRoutesList = Array<BGPStatusRoutes>;
-export const BGPStatusRoutesList = /*@__PURE__*/ S.Array(
-  BGPStatusRoutes,
-) as any as S.Schema<BGPStatusRoutesList>;
-
 export interface BGPStatus {
   peers?: BGPStatusPeersList;
   routes?: BGPStatusRoutesList;
 }
-export const BGPStatus = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    peers: S.optional(BGPStatusPeersList),
-    routes: S.optional(BGPStatusRoutesList),
-  }),
-).annotate({ identifier: "BGPStatus" }) as any as S.Schema<BGPStatus>;
-
 export type VPNTunnelsName = "tunnel1" | "tunnel2";
-export const VPNTunnelsName = S.String;
-
 /** Status of the underlying tunnel instances. */
 export interface VPNTunnels {
   bgpStatus?: BGPStatus | null;
@@ -1360,21 +618,7 @@ export interface VPNTunnels {
   /** The public IPv4 address of this endpoint. */
   publicIP?: string;
 }
-export const VPNTunnels = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    bgpStatus: S.optional(S.NullOr(BGPStatus)),
-    instanceState: S.optional(GatewayStatus),
-    internalNextHopIP: S.optional(S.String),
-    name: S.optional(VPNTunnelsName),
-    publicIP: S.optional(S.String),
-  }),
-).annotate({ identifier: "VPNTunnels" }) as any as S.Schema<VPNTunnels>;
-
 export type GatewayStatusResponseTunnelsList = Array<VPNTunnels>;
-export const GatewayStatusResponseTunnelsList = /*@__PURE__*/ S.Array(
-  VPNTunnels,
-) as any as S.Schema<GatewayStatusResponseTunnelsList>;
-
 export interface GatewayStatusResponse {
   connections?: GatewayStatusResponseConnectionsList;
   /** Name of the Gateway instance. */
@@ -1386,112 +630,35 @@ export interface GatewayStatusResponse {
   id?: string;
   tunnels?: GatewayStatusResponseTunnelsList;
 }
-export const GatewayStatusResponse = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    connections: S.optional(GatewayStatusResponseConnectionsList),
-    displayName: S.optional(S.String),
-    errorMessage: S.optional(S.String),
-    gatewayStatus: S.optional(GatewayStatus),
-    id: S.optional(S.String),
-    tunnels: S.optional(GatewayStatusResponseTunnelsList),
-  }),
-).annotate({ identifier: "GatewayStatusResponse" }) as any as S.Schema<GatewayStatusResponse>;
-
 /** The region in which the resource is located. */
 export type ListGatewayBGPFilterRulesRequestRegion = "eu01" | "eu02";
-export const ListGatewayBGPFilterRulesRequestRegion = S.String;
-
 export interface ListGatewayBGPFilterRulesRequest {
   projectId: string;
   region: ListGatewayBGPFilterRulesRequestRegion | (string & {});
   gatewayId: string;
   filterId: string;
 }
-export const ListGatewayBGPFilterRulesRequest = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    projectId: S.String.pipe(T.Label()),
-    region: ListGatewayBGPFilterRulesRequestRegion.pipe(T.Label()),
-    gatewayId: S.String.pipe(T.Label()),
-    filterId: S.String.pipe(T.Label()),
-  }).pipe(
-    T.Http({
-      method: "GET",
-      uri: "/v1/projects/{projectId}/regions/{region}/gateways/{gatewayId}/bgp-filters/{filterId}/rules",
-      code: 200,
-      baseUrl: "https://vpn.api.stackit.cloud",
-    }),
-  ),
-).annotate({
-  identifier: "ListGatewayBGPFilterRulesRequest",
-}) as any as S.Schema<ListGatewayBGPFilterRulesRequest>;
-
 export type BGPFilterRuleListRulesList = Array<BGPFilterRule>;
-export const BGPFilterRuleListRulesList = /*@__PURE__*/ S.Array(
-  BGPFilterRule,
-) as any as S.Schema<BGPFilterRuleListRulesList>;
-
 /** Response wrapper for listing rules within a BGP filter. */
 export interface BGPFilterRuleList {
   rules: BGPFilterRuleListRulesList;
 }
-export const BGPFilterRuleList = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    rules: BGPFilterRuleListRulesList,
-  }),
-).annotate({ identifier: "BGPFilterRuleList" }) as any as S.Schema<BGPFilterRuleList>;
-
 /** The region in which the resource is located. */
 export type ListGatewayBGPFiltersRequestRegion = "eu01" | "eu02";
-export const ListGatewayBGPFiltersRequestRegion = S.String;
-
 export interface ListGatewayBGPFiltersRequest {
   projectId: string;
   region: ListGatewayBGPFiltersRequestRegion | (string & {});
   gatewayId: string;
 }
-export const ListGatewayBGPFiltersRequest = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    projectId: S.String.pipe(T.Label()),
-    region: ListGatewayBGPFiltersRequestRegion.pipe(T.Label()),
-    gatewayId: S.String.pipe(T.Label()),
-  }).pipe(
-    T.Http({
-      method: "GET",
-      uri: "/v1/projects/{projectId}/regions/{region}/gateways/{gatewayId}/bgp-filters",
-      code: 200,
-      baseUrl: "https://vpn.api.stackit.cloud",
-    }),
-  ),
-).annotate({
-  identifier: "ListGatewayBGPFiltersRequest",
-}) as any as S.Schema<ListGatewayBGPFiltersRequest>;
-
 export type BGPFilterListBgpFiltersList = Array<BGPFilter>;
-export const BGPFilterListBgpFiltersList = /*@__PURE__*/ S.Array(
-  BGPFilter,
-) as any as S.Schema<BGPFilterListBgpFiltersList>;
-
 /** Response wrapper for listing BGP filters. */
 export interface BGPFilterList {
   bgpFilters: BGPFilterListBgpFiltersList;
 }
-export const BGPFilterList = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    bgpFilters: BGPFilterListBgpFiltersList,
-  }),
-).annotate({ identifier: "BGPFilterList" }) as any as S.Schema<BGPFilterList>;
-
 /** The region in which the resource is located. */
 export type ListGatewayConnectionsRequestRegion = "eu01" | "eu02";
-export const ListGatewayConnectionsRequestRegion = S.String;
-
 /** Filter resources by labels. */
 export type LabelSelector = { [key: string]: string | undefined };
-export const LabelSelector = /*@__PURE__*/ S.Record(
-  S.String,
-  S.String,
-) as any as S.Schema<LabelSelector>;
-
 export interface ListGatewayConnectionsRequest {
   projectId: string;
   region: ListGatewayConnectionsRequestRegion | (string & {});
@@ -1499,66 +666,19 @@ export interface ListGatewayConnectionsRequest {
   /** Filter resources by labels. */
   label_selector?: LabelSelector;
 }
-export const ListGatewayConnectionsRequest = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    projectId: S.String.pipe(T.Label()),
-    region: ListGatewayConnectionsRequestRegion.pipe(T.Label()),
-    gatewayId: S.String.pipe(T.Label()),
-    label_selector: S.optional(LabelSelector.pipe(T.Query())),
-  }).pipe(
-    T.Http({
-      method: "GET",
-      uri: "/v1/projects/{projectId}/regions/{region}/gateways/{gatewayId}/connections",
-      code: 200,
-      baseUrl: "https://vpn.api.stackit.cloud",
-    }),
-  ),
-).annotate({
-  identifier: "ListGatewayConnectionsRequest",
-}) as any as S.Schema<ListGatewayConnectionsRequest>;
-
 export type ConnectionListOutputConnectionsList = Array<ConnectionResponseOutput>;
-export const ConnectionListOutputConnectionsList = /*@__PURE__*/ S.Array(
-  ConnectionResponseOutput,
-) as any as S.Schema<ConnectionListOutputConnectionsList>;
-
 export interface ConnectionListOutput {
   connections: ConnectionListOutputConnectionsList;
 }
-export const ConnectionListOutput = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    connections: ConnectionListOutputConnectionsList,
-  }),
-).annotate({ identifier: "ConnectionListOutput" }) as any as S.Schema<ConnectionListOutput>;
-
 /** The region in which the resource is located. */
 export type ListGatewaysRequestRegion = "eu01" | "eu02";
-export const ListGatewaysRequestRegion = S.String;
-
 export interface ListGatewaysRequest {
   projectId: string;
   region: ListGatewaysRequestRegion | (string & {});
   /** Filter resources by labels. */
   label_selector?: LabelSelector;
 }
-export const ListGatewaysRequest = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    projectId: S.String.pipe(T.Label()),
-    region: ListGatewaysRequestRegion.pipe(T.Label()),
-    label_selector: S.optional(LabelSelector.pipe(T.Query())),
-  }).pipe(
-    T.Http({
-      method: "GET",
-      uri: "/v1/projects/{projectId}/regions/{region}/gateways",
-      code: 200,
-      baseUrl: "https://vpn.api.stackit.cloud",
-    }),
-  ),
-).annotate({ identifier: "ListGatewaysRequest" }) as any as S.Schema<ListGatewaysRequest>;
-
 export type GatewayResponseAvailabilityZones = CreateGatewayRequestAvailabilityZones;
-export const GatewayResponseAvailabilityZones = CreateGatewayRequestAvailabilityZones;
-
 export interface GatewayResponse {
   availabilityZones: CreateGatewayRequestAvailabilityZones;
   bgp?: BGPGatewayConfig;
@@ -1573,54 +693,15 @@ export interface GatewayResponse {
   id?: string;
   state?: GatewayStatus;
 }
-export const GatewayResponse = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    availabilityZones: CreateGatewayRequestAvailabilityZones,
-    bgp: S.optional(BGPGatewayConfig),
-    displayName: S.String,
-    labels: S.optional(Label),
-    networkConfig: S.optional(NetworkConfig),
-    planId: S.String,
-    routingType: RoutingType,
-    id: S.optional(S.String),
-    state: S.optional(GatewayStatus),
-  }),
-).annotate({ identifier: "GatewayResponse" }) as any as S.Schema<GatewayResponse>;
-
 export type GatewayListGatewaysList = Array<GatewayResponse>;
-export const GatewayListGatewaysList = /*@__PURE__*/ S.Array(
-  GatewayResponse,
-) as any as S.Schema<GatewayListGatewaysList>;
-
 export interface GatewayList {
   gateways: GatewayListGatewaysList;
 }
-export const GatewayList = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    gateways: GatewayListGatewaysList,
-  }),
-).annotate({ identifier: "GatewayList" }) as any as S.Schema<GatewayList>;
-
 /** The region in which the resource is located. */
 export type ListPlansRequestRegion = "eu01" | "eu02";
-export const ListPlansRequestRegion = S.String;
-
 export interface ListPlansRequest {
   region: ListPlansRequestRegion | (string & {});
 }
-export const ListPlansRequest = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    region: ListPlansRequestRegion.pipe(T.Label()),
-  }).pipe(
-    T.Http({
-      method: "GET",
-      uri: "/v1/regions/{region}/plans",
-      code: 200,
-      baseUrl: "https://vpn.api.stackit.cloud",
-    }),
-  ),
-).annotate({ identifier: "ListPlansRequest" }) as any as S.Schema<ListPlansRequest>;
-
 export interface Plan {
   /** The maximum throughput supported by the gateway in each direction, measured in MBit/s */
   maxBandwidth?: number;
@@ -1632,89 +713,31 @@ export interface Plan {
   /** The SKU identifier used for billing. */
   sku?: string;
 }
-export const Plan = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    maxBandwidth: S.optional(S.Number),
-    maxConnections: S.optional(S.Number),
-    name: S.optional(S.String),
-    planId: S.optional(S.String),
-    sku: S.optional(S.String),
-  }),
-).annotate({ identifier: "Plan" }) as any as S.Schema<Plan>;
-
 export type PlanListPlansList = Array<Plan>;
-export const PlanListPlansList = /*@__PURE__*/ S.Array(Plan) as any as S.Schema<PlanListPlansList>;
-
 export interface PlanList {
   defaultPlanId?: string;
   plans?: PlanListPlansList;
 }
-export const PlanList = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    defaultPlanId: S.optional(S.String),
-    plans: S.optional(PlanListPlansList),
-  }),
-).annotate({ identifier: "PlanList" }) as any as S.Schema<PlanList>;
-
 /** The region in which the resource is located. */
 export type ListQuotasRequestRegion = "eu01" | "eu02";
-export const ListQuotasRequestRegion = S.String;
-
 export interface ListQuotasRequest {
   projectId: string;
   region: ListQuotasRequestRegion | (string & {});
 }
-export const ListQuotasRequest = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    projectId: S.String.pipe(T.Label()),
-    region: ListQuotasRequestRegion.pipe(T.Label()),
-  }).pipe(
-    T.Http({
-      method: "GET",
-      uri: "/v1/projects/{projectId}/regions/{region}/quotas",
-      code: 200,
-      baseUrl: "https://vpn.api.stackit.cloud",
-    }),
-  ),
-).annotate({ identifier: "ListQuotasRequest" }) as any as S.Schema<ListQuotasRequest>;
-
 export interface Quota {
   limit: number;
   usage: number;
 }
-export const Quota = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    limit: S.Number,
-    usage: S.Number,
-  }),
-).annotate({ identifier: "Quota" }) as any as S.Schema<Quota>;
-
 export interface QuotaList {
   /** Current limit and usage for VPN gateways. */
   gateways: Quota;
 }
-export const QuotaList = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    gateways: Quota,
-  }),
-).annotate({ identifier: "QuotaList" }) as any as S.Schema<QuotaList>;
-
 export interface QuotaListResponse {
   quotas: QuotaList;
 }
-export const QuotaListResponse = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    quotas: QuotaList,
-  }),
-).annotate({ identifier: "QuotaListResponse" }) as any as S.Schema<QuotaListResponse>;
-
 /** The region in which the resource is located. */
 export type UpdateGatewayRequestRegion = "eu01" | "eu02";
-export const UpdateGatewayRequestRegion = S.String;
-
 export type UpdateGatewayRequestAvailabilityZones = CreateGatewayRequestAvailabilityZones;
-export const UpdateGatewayRequestAvailabilityZones = CreateGatewayRequestAvailabilityZones;
-
 export interface UpdateGatewayRequest {
   projectId: string;
   region: UpdateGatewayRequestRegion | (string & {});
@@ -1729,31 +752,7 @@ export interface UpdateGatewayRequest {
   planId: string;
   routingType: RoutingType | (string & {});
 }
-export const UpdateGatewayRequest = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    projectId: S.String.pipe(T.Label()),
-    region: UpdateGatewayRequestRegion.pipe(T.Label()),
-    gatewayId: S.String.pipe(T.Label()),
-    availabilityZones: CreateGatewayRequestAvailabilityZones,
-    bgp: S.optional(BGPGatewayConfig),
-    displayName: S.String,
-    labels: S.optional(Label),
-    networkConfig: S.optional(NetworkConfig),
-    planId: S.String,
-    routingType: RoutingType,
-  }).pipe(
-    T.Http({
-      method: "PUT",
-      uri: "/v1/projects/{projectId}/regions/{region}/gateways/{gatewayId}",
-      code: 200,
-      baseUrl: "https://vpn.api.stackit.cloud",
-    }),
-  ),
-).annotate({ identifier: "UpdateGatewayRequest" }) as any as S.Schema<UpdateGatewayRequest>;
-
 export type UpdateGatewayResponseAvailabilityZones = CreateGatewayRequestAvailabilityZones;
-export const UpdateGatewayResponseAvailabilityZones = CreateGatewayRequestAvailabilityZones;
-
 export interface UpdateGatewayResponse {
   availabilityZones: CreateGatewayRequestAvailabilityZones;
   bgp?: BGPGatewayConfig;
@@ -1768,77 +767,26 @@ export interface UpdateGatewayResponse {
   id?: string;
   state?: GatewayStatus;
 }
-export const UpdateGatewayResponse = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    availabilityZones: CreateGatewayRequestAvailabilityZones,
-    bgp: S.optional(BGPGatewayConfig),
-    displayName: S.String,
-    labels: S.optional(Label),
-    networkConfig: S.optional(NetworkConfig),
-    planId: S.String,
-    routingType: RoutingType,
-    id: S.optional(S.String),
-    state: S.optional(GatewayStatus),
-  }),
-).annotate({ identifier: "UpdateGatewayResponse" }) as any as S.Schema<UpdateGatewayResponse>;
-
 /** The region in which the resource is located. */
 export type UpdateGatewayBGPFilterRequestRegion = "eu01" | "eu02";
-export const UpdateGatewayBGPFilterRequestRegion = S.String;
-
 export interface UpdateGatewayBGPFilterRequest {
   projectId: string;
   region: UpdateGatewayBGPFilterRequestRegion | (string & {});
   gatewayId: string;
   filterId: string;
-  /** A user-friendly name for the filter. Display only — not enforced unique across a gateway. */
+  /** A user-friendly name for the filter. Display only -- not enforced unique across a gateway. */
   displayName: string;
 }
-export const UpdateGatewayBGPFilterRequest = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    projectId: S.String.pipe(T.Label()),
-    region: UpdateGatewayBGPFilterRequestRegion.pipe(T.Label()),
-    gatewayId: S.String.pipe(T.Label()),
-    filterId: S.String.pipe(T.Label()),
-    displayName: S.String,
-  }).pipe(
-    T.Http({
-      method: "PUT",
-      uri: "/v1/projects/{projectId}/regions/{region}/gateways/{gatewayId}/bgp-filters/{filterId}",
-      code: 200,
-      baseUrl: "https://vpn.api.stackit.cloud",
-    }),
-  ),
-).annotate({
-  identifier: "UpdateGatewayBGPFilterRequest",
-}) as any as S.Schema<UpdateGatewayBGPFilterRequest>;
-
 /** The region in which the resource is located. */
 export type UpdateGatewayBGPFilterRuleRequestRegion = "eu01" | "eu02";
-export const UpdateGatewayBGPFilterRuleRequestRegion = S.String;
-
 /** The action to take if the route matches all criteria. Case-sensitive. */
 export type UpdateGatewayBGPFilterRuleRequestAction = "PERMIT" | "DENY";
-export const UpdateGatewayBGPFilterRuleRequestAction = S.String;
-
 /** Matches if the AS-PATH contains any one of the listed ASNs (logical OR within the list). Treated as an unordered set; ordering is not preserved by the storage layer. When combined with firstASN, both conditions must hold (logical AND, consistent with the rest of the match block). If firstASN is also listed here, its presence as the first hop is sufficient to satisfy this list; no duplicate hop is required. */
 export type UpdateGatewayBGPFilterRuleRequestMatchAsPathContainsAnyList = Array<number>;
-export const UpdateGatewayBGPFilterRuleRequestMatchAsPathContainsAnyList = /*@__PURE__*/ S.Array(
-  S.Number,
-) as any as S.Schema<UpdateGatewayBGPFilterRuleRequestMatchAsPathContainsAnyList>;
-
 /** Matches if the route carries any one of these BGP standard communities (logical OR within the list). Format is 'asn:value' per RFC 1997 (both halves must fit in a uint32, i.e. 0..4294967295). Extended, large and well-known communities are not supported. */
 export type UpdateGatewayBGPFilterRuleRequestMatchCommunitiesList = Array<string>;
-export const UpdateGatewayBGPFilterRuleRequestMatchCommunitiesList = /*@__PURE__*/ S.Array(
-  S.String,
-) as any as S.Schema<UpdateGatewayBGPFilterRuleRequestMatchCommunitiesList>;
-
-/** List of IPv4 networks to match. A route's prefix matches if it equals one of these (subject to minPrefixLength/maxPrefixLength refinement). If omitted, an implicit 0.0.0.0/0 base is used when minPrefixLength or maxPrefixLength is set; if all three are omitted, prefix matching is not performed at all. Each entry must parse as a valid IPv4 CIDR; the network portion is normalised (10.0.0.5/24 → 10.0.0.0/24). */
+/** List of IPv4 networks to match. A route's prefix matches if it equals one of these (subject to minPrefixLength/maxPrefixLength refinement). If omitted, an implicit 0.0.0.0/0 base is used when minPrefixLength or maxPrefixLength is set; if all three are omitted, prefix matching is not performed at all. Each entry must parse as a valid IPv4 CIDR; the network portion is normalised (10.0.0.5/24 -> 10.0.0.0/24). */
 export type UpdateGatewayBGPFilterRuleRequestMatchPrefixesList = Array<string>;
-export const UpdateGatewayBGPFilterRuleRequestMatchPrefixesList = /*@__PURE__*/ S.Array(
-  S.String,
-) as any as S.Schema<UpdateGatewayBGPFilterRuleRequestMatchPrefixesList>;
-
 /** Optional matching criteria. If omitted entirely, the rule acts as match-all. All non-empty fields in this block must match (logical AND). */
 export interface UpdateGatewayBGPFilterRuleRequestMatch {
   /** Matches if the AS-PATH contains any one of the listed ASNs (logical OR within the list). Treated as an unordered set; ordering is not preserved by the storage layer. When combined with firstASN, both conditions must hold (logical AND, consistent with the rest of the match block). If firstASN is also listed here, its presence as the first hop is sufficient to satisfy this list; no duplicate hop is required. */
@@ -1853,27 +801,11 @@ export interface UpdateGatewayBGPFilterRuleRequestMatch {
   minPrefixLength?: number;
   /** Matches the exact IPv4 address of the BGP neighbor that advertised the route. Useful when the same filter is attached to multiple tunnels with different neighbor IPs (allows per-peer rules in a shared filter). When a filter is attached to a single tunnel, this field is effectively a no-op because the route-map is already neighbor-scoped. */
   peer?: string;
-  /** List of IPv4 networks to match. A route's prefix matches if it equals one of these (subject to minPrefixLength/maxPrefixLength refinement). If omitted, an implicit 0.0.0.0/0 base is used when minPrefixLength or maxPrefixLength is set; if all three are omitted, prefix matching is not performed at all. Each entry must parse as a valid IPv4 CIDR; the network portion is normalised (10.0.0.5/24 → 10.0.0.0/24). */
+  /** List of IPv4 networks to match. A route's prefix matches if it equals one of these (subject to minPrefixLength/maxPrefixLength refinement). If omitted, an implicit 0.0.0.0/0 base is used when minPrefixLength or maxPrefixLength is set; if all three are omitted, prefix matching is not performed at all. Each entry must parse as a valid IPv4 CIDR; the network portion is normalised (10.0.0.5/24 -> 10.0.0.0/24). */
   prefixes?: UpdateGatewayBGPFilterRuleRequestMatchPrefixesList;
 }
-export const UpdateGatewayBGPFilterRuleRequestMatch = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    asPathContainsAny: S.optional(UpdateGatewayBGPFilterRuleRequestMatchAsPathContainsAnyList),
-    communities: S.optional(UpdateGatewayBGPFilterRuleRequestMatchCommunitiesList),
-    firstASN: S.optional(S.Number),
-    maxPrefixLength: S.optional(S.Number),
-    minPrefixLength: S.optional(S.Number),
-    peer: S.optional(S.String),
-    prefixes: S.optional(UpdateGatewayBGPFilterRuleRequestMatchPrefixesList),
-  }),
-).annotate({
-  identifier: "UpdateGatewayBGPFilterRuleRequestMatch",
-}) as any as S.Schema<UpdateGatewayBGPFilterRuleRequestMatch>;
-
 /** Optional BGP attributes to apply when 'action' is PERMIT. Ignored for DENY rules. */
 export type UpdateGatewayBGPFilterRuleRequestSet = CreateGatewayBGPFilterRuleRequestSet;
-export const UpdateGatewayBGPFilterRuleRequestSet = CreateGatewayBGPFilterRuleRequestSet;
-
 export interface UpdateGatewayBGPFilterRuleRequest {
   projectId: string;
   region: UpdateGatewayBGPFilterRuleRequestRegion | (string & {});
@@ -1884,56 +816,19 @@ export interface UpdateGatewayBGPFilterRuleRequest {
   action: UpdateGatewayBGPFilterRuleRequestAction | (string & {});
   /** Optional matching criteria. If omitted entirely, the rule acts as match-all. All non-empty fields in this block must match (logical AND). */
   match?: UpdateGatewayBGPFilterRuleRequestMatch;
-  /** The evaluation order of the rule. Lower numbers are evaluated first. Must be unique within a filter. On POST, this field is optional: when omitted the server auto-assigns max(existing)+10 (the first rule starts at 10). On PUT this field is required — sending a partial update without 'sequence' returns 400. */
+  /** The evaluation order of the rule. Lower numbers are evaluated first. Must be unique within a filter. On POST, this field is optional: when omitted the server auto-assigns max(existing)+10 (the first rule starts at 10). On PUT this field is required -- sending a partial update without 'sequence' returns 400. */
   sequence?: number;
   /** Optional BGP attributes to apply when 'action' is PERMIT. Ignored for DENY rules. */
   set?: CreateGatewayBGPFilterRuleRequestSet;
 }
-export const UpdateGatewayBGPFilterRuleRequest = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    projectId: S.String.pipe(T.Label()),
-    region: UpdateGatewayBGPFilterRuleRequestRegion.pipe(T.Label()),
-    gatewayId: S.String.pipe(T.Label()),
-    filterId: S.String.pipe(T.Label()),
-    ruleId: S.String.pipe(T.Label()),
-    action: UpdateGatewayBGPFilterRuleRequestAction,
-    match: S.optional(UpdateGatewayBGPFilterRuleRequestMatch),
-    sequence: S.optional(S.Number),
-    set: S.optional(CreateGatewayBGPFilterRuleRequestSet),
-  }).pipe(
-    T.Http({
-      method: "PUT",
-      uri: "/v1/projects/{projectId}/regions/{region}/gateways/{gatewayId}/bgp-filters/{filterId}/rules/{ruleId}",
-      code: 200,
-      baseUrl: "https://vpn.api.stackit.cloud",
-    }),
-  ),
-).annotate({
-  identifier: "UpdateGatewayBGPFilterRuleRequest",
-}) as any as S.Schema<UpdateGatewayBGPFilterRuleRequest>;
-
 /** The region in which the resource is located. */
 export type UpdateGatewayConnectionRequestRegion = "eu01" | "eu02";
-export const UpdateGatewayConnectionRequestRegion = S.String;
-
 /** Optional. Defaults to 0.0.0.0/0 for Route-based VPN configurations. Mandatory for Policy-based. */
 export type UpdateGatewayConnectionRequestLocalSubnetsList = Array<string>;
-export const UpdateGatewayConnectionRequestLocalSubnetsList = /*@__PURE__*/ S.Array(
-  S.String,
-) as any as S.Schema<UpdateGatewayConnectionRequestLocalSubnetsList>;
-
 /** Optional. Defaults to 0.0.0.0/0 for Route-based VPN configurations. Mandatory for Policy-based. */
 export type UpdateGatewayConnectionRequestRemoteSubnetsList = Array<string>;
-export const UpdateGatewayConnectionRequestRemoteSubnetsList = /*@__PURE__*/ S.Array(
-  S.String,
-) as any as S.Schema<UpdateGatewayConnectionRequestRemoteSubnetsList>;
-
 /** Optional. Use this for route-based VPN. */
 export type UpdateGatewayConnectionRequestStaticRoutesList = Array<string>;
-export const UpdateGatewayConnectionRequestStaticRoutesList = /*@__PURE__*/ S.Array(
-  S.String,
-) as any as S.Schema<UpdateGatewayConnectionRequestStaticRoutesList>;
-
 export interface UpdateGatewayConnectionRequest {
   projectId: string;
   region: UpdateGatewayConnectionRequestRegion | (string & {});
@@ -1953,32 +848,6 @@ export interface UpdateGatewayConnectionRequest {
   tunnel1: TunnelConfiguration;
   tunnel2: TunnelConfiguration;
 }
-export const UpdateGatewayConnectionRequest = /*@__PURE__*/ S.suspend(() =>
-  S.Struct({
-    projectId: S.String.pipe(T.Label()),
-    region: UpdateGatewayConnectionRequestRegion.pipe(T.Label()),
-    gatewayId: S.String.pipe(T.Label()),
-    connectionId: S.String.pipe(T.Label()),
-    displayName: S.String,
-    enabled: S.optional(S.Boolean),
-    labels: S.optional(Label),
-    localSubnets: S.optional(UpdateGatewayConnectionRequestLocalSubnetsList),
-    remoteSubnets: S.optional(UpdateGatewayConnectionRequestRemoteSubnetsList),
-    staticRoutes: S.optional(UpdateGatewayConnectionRequestStaticRoutesList),
-    tunnel1: TunnelConfiguration,
-    tunnel2: TunnelConfiguration,
-  }).pipe(
-    T.Http({
-      method: "PUT",
-      uri: "/v1/projects/{projectId}/regions/{region}/gateways/{gatewayId}/connections/{connectionId}",
-      code: 200,
-      baseUrl: "https://vpn.api.stackit.cloud",
-    }),
-  ),
-).annotate({
-  identifier: "UpdateGatewayConnectionRequest",
-}) as any as S.Schema<UpdateGatewayConnectionRequest>;
-
 export type CreateGatewayError = BadRequest | Forbidden | Conflict | StackitOpError;
 /** Create a VPN gateway in a project. Provision a new VPN gateway. */
 export const createGateway: API.OperationMethod<
@@ -1987,8 +856,8 @@ export const createGateway: API.OperationMethod<
   CreateGatewayError,
   StackitOpContext
 > = /*@__PURE__*/ API.make(() => ({
-  input: CreateGatewayRequest,
-  output: CreateGatewayResponse,
+  input: __S(304, __c19, 0) as any as S.Schema<CreateGatewayRequest>,
+  output: __S(323, __c20, 3) as any as S.Schema<CreateGatewayResponse>,
   errors: [BadRequest, Forbidden, Conflict, UnknownStackitError],
   protocol: StackitProtocol,
   retry: Retry.Retry,
@@ -2007,8 +876,8 @@ export const createGatewayBGPFilter: API.OperationMethod<
   CreateGatewayBGPFilterError,
   StackitOpContext
 > = /*@__PURE__*/ API.make(() => ({
-  input: CreateGatewayBGPFilterRequest,
-  output: BGPFilter,
+  input: __S(368, __c23, 0) as any as S.Schema<CreateGatewayBGPFilterRequest>,
+  output: __S(384, __c24, 0) as any as S.Schema<BGPFilter>,
   errors: [BadRequest, Forbidden, NotFound, Conflict, UnknownStackitError],
   protocol: StackitProtocol,
   retry: Retry.Retry,
@@ -2027,8 +896,8 @@ export const createGatewayBGPFilterRule: API.OperationMethod<
   CreateGatewayBGPFilterRuleError,
   StackitOpContext
 > = /*@__PURE__*/ API.make(() => ({
-  input: CreateGatewayBGPFilterRuleRequest,
-  output: BGPFilterRule,
+  input: __S(400, __c25, 0) as any as S.Schema<CreateGatewayBGPFilterRuleRequest>,
+  output: __S(419, __c26, 3) as any as S.Schema<BGPFilterRule>,
   errors: [BadRequest, Forbidden, NotFound, Conflict, UnknownStackitError],
   protocol: StackitProtocol,
   retry: Retry.Retry,
@@ -2042,8 +911,8 @@ export const createGatewayConnection: API.OperationMethod<
   CreateGatewayConnectionError,
   StackitOpContext
 > = /*@__PURE__*/ API.make(() => ({
-  input: CreateGatewayConnectionRequest,
-  output: ConnectionResponseOutput,
+  input: __S(432, __c27, 0) as any as S.Schema<CreateGatewayConnectionRequest>,
+  output: __S(454, __c28, 6) as any as S.Schema<ConnectionResponseOutput>,
   errors: [BadRequest, Forbidden, NotFound, UnknownStackitError],
   protocol: StackitProtocol,
   retry: Retry.Retry,
@@ -2057,8 +926,8 @@ export const deleteGateway: API.OperationMethod<
   DeleteGatewayError,
   StackitOpContext
 > = /*@__PURE__*/ API.make(() => ({
-  input: DeleteGatewayRequest,
-  output: DeleteGatewayResponse,
+  input: __S(480, __c30, 0) as any as S.Schema<DeleteGatewayRequest>,
+  output: __S(496, __c31, 0) as any as S.Schema<DeleteGatewayResponse>,
   errors: [BadRequest, Forbidden, UnknownStackitError],
   protocol: StackitProtocol,
   retry: Retry.Retry,
@@ -2077,8 +946,8 @@ export const deleteGatewayBGPFilter: API.OperationMethod<
   DeleteGatewayBGPFilterError,
   StackitOpContext
 > = /*@__PURE__*/ API.make(() => ({
-  input: DeleteGatewayBGPFilterRequest,
-  output: DeleteGatewayBGPFilterResponse,
+  input: __S(512, __c32, 0) as any as S.Schema<DeleteGatewayBGPFilterRequest>,
+  output: __S(496, __c31, 0) as any as S.Schema<DeleteGatewayBGPFilterResponse>,
   errors: [BadRequest, Forbidden, NotFound, Conflict, UnknownStackitError],
   protocol: StackitProtocol,
   retry: Retry.Retry,
@@ -2092,8 +961,8 @@ export const deleteGatewayBGPFilterRule: API.OperationMethod<
   DeleteGatewayBGPFilterRuleError,
   StackitOpContext
 > = /*@__PURE__*/ API.make(() => ({
-  input: DeleteGatewayBGPFilterRuleRequest,
-  output: DeleteGatewayBGPFilterRuleResponse,
+  input: __S(0, __c0, 0) as any as S.Schema<DeleteGatewayBGPFilterRuleRequest>,
+  output: __S(496, __c31, 0) as any as S.Schema<DeleteGatewayBGPFilterRuleResponse>,
   errors: [BadRequest, Forbidden, NotFound, UnknownStackitError],
   protocol: StackitProtocol,
   retry: Retry.Retry,
@@ -2107,8 +976,8 @@ export const deleteGatewayConnection: API.OperationMethod<
   DeleteGatewayConnectionError,
   StackitOpContext
 > = /*@__PURE__*/ API.make(() => ({
-  input: DeleteGatewayConnectionRequest,
-  output: DeleteGatewayConnectionResponse,
+  input: __S(16, __c1, 0) as any as S.Schema<DeleteGatewayConnectionRequest>,
+  output: __S(496, __c31, 0) as any as S.Schema<DeleteGatewayConnectionResponse>,
   errors: [BadRequest, Forbidden, NotFound, UnknownStackitError],
   protocol: StackitProtocol,
   retry: Retry.Retry,
@@ -2122,8 +991,8 @@ export const getGateway: API.OperationMethod<
   GetGatewayError,
   StackitOpContext
 > = /*@__PURE__*/ API.make(() => ({
-  input: GetGatewayRequest,
-  output: GetGatewayResponse,
+  input: __S(32, __c2, 0) as any as S.Schema<GetGatewayRequest>,
+  output: __S(323, __c20, 3) as any as S.Schema<GetGatewayResponse>,
   errors: [BadRequest, Forbidden, NotFound, UnknownStackitError],
   protocol: StackitProtocol,
   retry: Retry.Retry,
@@ -2137,8 +1006,8 @@ export const getGatewayBGPFilter: API.OperationMethod<
   GetGatewayBGPFilterError,
   StackitOpContext
 > = /*@__PURE__*/ API.make(() => ({
-  input: GetGatewayBGPFilterRequest,
-  output: BGPFilter,
+  input: __S(48, __c3, 0) as any as S.Schema<GetGatewayBGPFilterRequest>,
+  output: __S(384, __c24, 0) as any as S.Schema<BGPFilter>,
   errors: [BadRequest, Forbidden, NotFound, UnknownStackitError],
   protocol: StackitProtocol,
   retry: Retry.Retry,
@@ -2152,8 +1021,8 @@ export const getGatewayBGPFilterRule: API.OperationMethod<
   GetGatewayBGPFilterRuleError,
   StackitOpContext
 > = /*@__PURE__*/ API.make(() => ({
-  input: GetGatewayBGPFilterRuleRequest,
-  output: BGPFilterRule,
+  input: __S(64, __c4, 0) as any as S.Schema<GetGatewayBGPFilterRuleRequest>,
+  output: __S(419, __c26, 3) as any as S.Schema<BGPFilterRule>,
   errors: [BadRequest, Forbidden, NotFound, UnknownStackitError],
   protocol: StackitProtocol,
   retry: Retry.Retry,
@@ -2167,8 +1036,8 @@ export const getGatewayConnection: API.OperationMethod<
   GetGatewayConnectionError,
   StackitOpContext
 > = /*@__PURE__*/ API.make(() => ({
-  input: GetGatewayConnectionRequest,
-  output: ConnectionResponseOutput,
+  input: __S(80, __c5, 0) as any as S.Schema<GetGatewayConnectionRequest>,
+  output: __S(454, __c28, 6) as any as S.Schema<ConnectionResponseOutput>,
   errors: [BadRequest, Forbidden, NotFound, UnknownStackitError],
   protocol: StackitProtocol,
   retry: Retry.Retry,
@@ -2182,8 +1051,8 @@ export const getGatewayConnectionStatus: API.OperationMethod<
   GetGatewayConnectionStatusError,
   StackitOpContext
 > = /*@__PURE__*/ API.make(() => ({
-  input: GetGatewayConnectionStatusRequest,
-  output: ConnectionStatusResponse,
+  input: __S(96, __c6, 0) as any as S.Schema<GetGatewayConnectionStatusRequest>,
+  output: __S(116, __c7, 4) as any as S.Schema<ConnectionStatusResponse>,
   errors: [BadRequest, Forbidden, NotFound, UnknownStackitError],
   protocol: StackitProtocol,
   retry: Retry.Retry,
@@ -2197,8 +1066,8 @@ export const getGatewayStatus: API.OperationMethod<
   GetGatewayStatusError,
   StackitOpContext
 > = /*@__PURE__*/ API.make(() => ({
-  input: GetGatewayStatusRequest,
-  output: GatewayStatusResponse,
+  input: __S(128, __c8, 0) as any as S.Schema<GetGatewayStatusRequest>,
+  output: __S(137, __c8, 9) as any as S.Schema<GatewayStatusResponse>,
   errors: [BadRequest, Forbidden, NotFound, UnknownStackitError],
   protocol: StackitProtocol,
   retry: Retry.Retry,
@@ -2212,8 +1081,8 @@ export const listGatewayBGPFilterRules: API.OperationMethod<
   ListGatewayBGPFilterRulesError,
   StackitOpContext
 > = /*@__PURE__*/ API.make(() => ({
-  input: ListGatewayBGPFilterRulesRequest,
-  output: BGPFilterRuleList,
+  input: __S(144, __c9, 0) as any as S.Schema<ListGatewayBGPFilterRulesRequest>,
+  output: __S(146, __c9, 2) as any as S.Schema<BGPFilterRuleList>,
   errors: [BadRequest, Forbidden, NotFound, UnknownStackitError],
   protocol: StackitProtocol,
   retry: Retry.Retry,
@@ -2227,8 +1096,8 @@ export const listGatewayBGPFilters: API.OperationMethod<
   ListGatewayBGPFiltersError,
   StackitOpContext
 > = /*@__PURE__*/ API.make(() => ({
-  input: ListGatewayBGPFiltersRequest,
-  output: BGPFilterList,
+  input: __S(160, __c10, 0) as any as S.Schema<ListGatewayBGPFiltersRequest>,
+  output: __S(162, __c10, 2) as any as S.Schema<BGPFilterList>,
   errors: [BadRequest, Forbidden, NotFound, UnknownStackitError],
   protocol: StackitProtocol,
   retry: Retry.Retry,
@@ -2242,8 +1111,8 @@ export const listGatewayConnections: API.OperationMethod<
   ListGatewayConnectionsError,
   StackitOpContext
 > = /*@__PURE__*/ API.make(() => ({
-  input: ListGatewayConnectionsRequest,
-  output: ConnectionListOutput,
+  input: __S(176, __c11, 0) as any as S.Schema<ListGatewayConnectionsRequest>,
+  output: __S(178, __c11, 2) as any as S.Schema<ConnectionListOutput>,
   errors: [BadRequest, Forbidden, NotFound, UnknownStackitError],
   protocol: StackitProtocol,
   retry: Retry.Retry,
@@ -2257,8 +1126,8 @@ export const listGateways: API.OperationMethod<
   ListGatewaysError,
   StackitOpContext
 > = /*@__PURE__*/ API.make(() => ({
-  input: ListGatewaysRequest,
-  output: GatewayList,
+  input: __S(192, __c12, 0) as any as S.Schema<ListGatewaysRequest>,
+  output: __S(194, __c12, 2) as any as S.Schema<GatewayList>,
   errors: [BadRequest, Forbidden, UnknownStackitError],
   protocol: StackitProtocol,
   retry: Retry.Retry,
@@ -2272,8 +1141,8 @@ export const listPlans: API.OperationMethod<
   ListPlansError,
   StackitOpContext
 > = /*@__PURE__*/ API.make(() => ({
-  input: ListPlansRequest,
-  output: PlanList,
+  input: __S(208, __c13, 0) as any as S.Schema<ListPlansRequest>,
+  output: __S(211, __c13, 3) as any as S.Schema<PlanList>,
   errors: [BadRequest, UnknownStackitError],
   protocol: StackitProtocol,
   retry: Retry.Retry,
@@ -2287,8 +1156,8 @@ export const listQuotas: API.OperationMethod<
   ListQuotasError,
   StackitOpContext
 > = /*@__PURE__*/ API.make(() => ({
-  input: ListQuotasRequest,
-  output: QuotaListResponse,
+  input: __S(224, __c14, 0) as any as S.Schema<ListQuotasRequest>,
+  output: __S(227, __c14, 3) as any as S.Schema<QuotaListResponse>,
   errors: [BadRequest, UnknownStackitError],
   protocol: StackitProtocol,
   retry: Retry.Retry,
@@ -2302,8 +1171,8 @@ export const updateGateway: API.OperationMethod<
   UpdateGatewayError,
   StackitOpContext
 > = /*@__PURE__*/ API.make(() => ({
-  input: UpdateGatewayRequest,
-  output: UpdateGatewayResponse,
+  input: __S(240, __c15, 0) as any as S.Schema<UpdateGatewayRequest>,
+  output: __S(323, __c20, 3) as any as S.Schema<UpdateGatewayResponse>,
   errors: [BadRequest, Forbidden, Conflict, UnknownStackitError],
   protocol: StackitProtocol,
   retry: Retry.Retry,
@@ -2322,8 +1191,8 @@ export const updateGatewayBGPFilter: API.OperationMethod<
   UpdateGatewayBGPFilterError,
   StackitOpContext
 > = /*@__PURE__*/ API.make(() => ({
-  input: UpdateGatewayBGPFilterRequest,
-  output: BGPFilter,
+  input: __S(256, __c16, 0) as any as S.Schema<UpdateGatewayBGPFilterRequest>,
+  output: __S(384, __c24, 0) as any as S.Schema<BGPFilter>,
   errors: [BadRequest, Forbidden, NotFound, Conflict, UnknownStackitError],
   protocol: StackitProtocol,
   retry: Retry.Retry,
@@ -2342,8 +1211,8 @@ export const updateGatewayBGPFilterRule: API.OperationMethod<
   UpdateGatewayBGPFilterRuleError,
   StackitOpContext
 > = /*@__PURE__*/ API.make(() => ({
-  input: UpdateGatewayBGPFilterRuleRequest,
-  output: BGPFilterRule,
+  input: __S(272, __c17, 0) as any as S.Schema<UpdateGatewayBGPFilterRuleRequest>,
+  output: __S(419, __c26, 3) as any as S.Schema<BGPFilterRule>,
   errors: [BadRequest, Forbidden, NotFound, Conflict, UnknownStackitError],
   protocol: StackitProtocol,
   retry: Retry.Retry,
@@ -2357,9 +1226,880 @@ export const updateGatewayConnection: API.OperationMethod<
   UpdateGatewayConnectionError,
   StackitOpContext
 > = /*@__PURE__*/ API.make(() => ({
-  input: UpdateGatewayConnectionRequest,
-  output: ConnectionResponseOutput,
+  input: __S(288, __c18, 0) as any as S.Schema<UpdateGatewayConnectionRequest>,
+  output: __S(454, __c28, 6) as any as S.Schema<ConnectionResponseOutput>,
   errors: [BadRequest, Forbidden, NotFound, UnknownStackitError],
   protocol: StackitProtocol,
   retry: Retry.Retry,
 }));
+
+// Schema builders: each runs one schema initializer, on that schema's first use.
+function __c0(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          projectId: S.String.pipe(T.Label()),
+          region: S.String.pipe(T.Label()),
+          gatewayId: S.String.pipe(T.Label()),
+          filterId: S.String.pipe(T.Label()),
+          ruleId: S.String.pipe(T.Label()),
+        }).pipe(
+          T.Http({
+            method: "DELETE",
+            uri: "/v1/projects/{projectId}/regions/{region}/gateways/{gatewayId}/bgp-filters/{filterId}/rules/{ruleId}",
+            code: 200,
+            baseUrl: "https://vpn.api.stackit.cloud",
+          }),
+        ),
+      ).annotate({ identifier: "DeleteGatewayBGPFilterRuleRequest" });
+  }
+}
+function __c1(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          projectId: S.String.pipe(T.Label()),
+          region: S.String.pipe(T.Label()),
+          gatewayId: S.String.pipe(T.Label()),
+          connectionId: S.String.pipe(T.Label()),
+        }).pipe(
+          T.Http({
+            method: "DELETE",
+            uri: "/v1/projects/{projectId}/regions/{region}/gateways/{gatewayId}/connections/{connectionId}",
+            code: 200,
+            baseUrl: "https://vpn.api.stackit.cloud",
+          }),
+        ),
+      ).annotate({ identifier: "DeleteGatewayConnectionRequest" });
+  }
+}
+function __c2(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          projectId: S.String.pipe(T.Label()),
+          region: S.String.pipe(T.Label()),
+          gatewayId: S.String.pipe(T.Label()),
+        }).pipe(
+          T.Http({
+            method: "GET",
+            uri: "/v1/projects/{projectId}/regions/{region}/gateways/{gatewayId}",
+            code: 200,
+            baseUrl: "https://vpn.api.stackit.cloud",
+          }),
+        ),
+      ).annotate({ identifier: "GetGatewayRequest" });
+  }
+}
+function __c3(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          projectId: S.String.pipe(T.Label()),
+          region: S.String.pipe(T.Label()),
+          gatewayId: S.String.pipe(T.Label()),
+          filterId: S.String.pipe(T.Label()),
+        }).pipe(
+          T.Http({
+            method: "GET",
+            uri: "/v1/projects/{projectId}/regions/{region}/gateways/{gatewayId}/bgp-filters/{filterId}",
+            code: 200,
+            baseUrl: "https://vpn.api.stackit.cloud",
+          }),
+        ),
+      ).annotate({ identifier: "GetGatewayBGPFilterRequest" });
+  }
+}
+function __c4(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          projectId: S.String.pipe(T.Label()),
+          region: S.String.pipe(T.Label()),
+          gatewayId: S.String.pipe(T.Label()),
+          filterId: S.String.pipe(T.Label()),
+          ruleId: S.String.pipe(T.Label()),
+        }).pipe(
+          T.Http({
+            method: "GET",
+            uri: "/v1/projects/{projectId}/regions/{region}/gateways/{gatewayId}/bgp-filters/{filterId}/rules/{ruleId}",
+            code: 200,
+            baseUrl: "https://vpn.api.stackit.cloud",
+          }),
+        ),
+      ).annotate({ identifier: "GetGatewayBGPFilterRuleRequest" });
+  }
+}
+function __c5(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          projectId: S.String.pipe(T.Label()),
+          region: S.String.pipe(T.Label()),
+          gatewayId: S.String.pipe(T.Label()),
+          connectionId: S.String.pipe(T.Label()),
+        }).pipe(
+          T.Http({
+            method: "GET",
+            uri: "/v1/projects/{projectId}/regions/{region}/gateways/{gatewayId}/connections/{connectionId}",
+            code: 200,
+            baseUrl: "https://vpn.api.stackit.cloud",
+          }),
+        ),
+      ).annotate({ identifier: "GetGatewayConnectionRequest" });
+  }
+}
+function __c6(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          projectId: S.String.pipe(T.Label()),
+          region: S.String.pipe(T.Label()),
+          gatewayId: S.String.pipe(T.Label()),
+          connectionId: S.String.pipe(T.Label()),
+        }).pipe(
+          T.Http({
+            method: "GET",
+            uri: "/v1/projects/{projectId}/regions/{region}/gateways/{gatewayId}/connections/{connectionId}/status",
+            code: 200,
+            baseUrl: "https://vpn.api.stackit.cloud",
+          }),
+        ),
+      ).annotate({ identifier: "GetGatewayConnectionStatusRequest" });
+  }
+}
+function __c7(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          dhGroup: S.optional(S.String),
+          encryptionAlgorithm: S.optional(S.String),
+          integrityAlgorithm: S.optional(S.String),
+          state: S.optional(S.String),
+        }),
+      ).annotate({ identifier: "Phase1Status" });
+    case 1:
+      return S.suspend(() =>
+        S.Struct({
+          bytesIn: S.optional(S.String),
+          bytesOut: S.optional(S.String),
+          dhGroup: S.optional(S.String),
+          encap: S.optional(S.String),
+          encryptionAlgorithm: S.optional(S.String),
+          integrityAlgorithm: S.optional(S.String),
+          packetsIn: S.optional(S.String),
+          packetsOut: S.optional(S.String),
+          protocol: S.optional(S.String),
+          state: S.optional(S.String),
+        }),
+      ).annotate({ identifier: "Phase2Status" });
+    case 2:
+      return S.suspend(() =>
+        S.Struct({
+          established: S.optional(S.Boolean),
+          name: S.optional(S.String),
+          phase1: S.optional(__S(112, __c7, 0)),
+          phase2: S.optional(__S(113, __c7, 1)),
+        }),
+      ).annotate({ identifier: "TunnelStatus" });
+    case 3:
+      return S.Array(__S(114, __c7, 2));
+    case 4:
+      return S.suspend(() =>
+        S.Struct({
+          displayName: S.optional(S.String),
+          enabled: S.optional(S.Boolean),
+          id: S.optional(S.String),
+          tunnels: S.optional(__S(115, __c7, 3)),
+        }),
+      ).annotate({ identifier: "ConnectionStatusResponse" });
+  }
+}
+function __c8(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          projectId: S.String.pipe(T.Label()),
+          region: S.String.pipe(T.Label()),
+          gatewayId: S.String.pipe(T.Label()),
+        }).pipe(
+          T.Http({
+            method: "GET",
+            uri: "/v1/projects/{projectId}/regions/{region}/gateways/{gatewayId}/status",
+            code: 200,
+            baseUrl: "https://vpn.api.stackit.cloud",
+          }),
+        ),
+      ).annotate({ identifier: "GetGatewayStatusRequest" });
+    case 1:
+      return S.Array(__S(116, __c7, 4));
+    case 2:
+      return S.suspend(() =>
+        S.Struct({
+          localAs: S.Number,
+          peerUptime: S.String,
+          pfxRcd: S.Number,
+          pfxSnt: S.Number,
+          remoteAs: S.Number,
+          remoteIP: S.String,
+          state: S.String,
+        }),
+      ).annotate({ identifier: "BGPStatusPeers" });
+    case 3:
+      return S.Array(__S(130, __c8, 2));
+    case 4:
+      return S.suspend(() =>
+        S.Struct({
+          network: S.String,
+          origin: S.String,
+          path: S.String,
+          peerId: S.String,
+          weight: S.Number,
+        }),
+      ).annotate({ identifier: "BGPStatusRoutes" });
+    case 5:
+      return S.Array(__S(132, __c8, 4));
+    case 6:
+      return S.suspend(() =>
+        S.Struct({
+          peers: S.optional(__S(131, __c8, 3)),
+          routes: S.optional(__S(133, __c8, 5)),
+        }),
+      ).annotate({ identifier: "BGPStatus" });
+    case 7:
+      return S.suspend(() =>
+        S.Struct({
+          bgpStatus: S.optional(S.NullOr(__S(134, __c8, 6))),
+          instanceState: S.optional(S.String),
+          internalNextHopIP: S.optional(S.String),
+          name: S.optional(S.String),
+          publicIP: S.optional(S.String),
+        }),
+      ).annotate({ identifier: "VPNTunnels" });
+    case 8:
+      return S.Array(__S(135, __c8, 7));
+    case 9:
+      return S.suspend(() =>
+        S.Struct({
+          connections: S.optional(__S(129, __c8, 1)),
+          displayName: S.optional(S.String),
+          errorMessage: S.optional(S.String),
+          gatewayStatus: S.optional(S.String),
+          id: S.optional(S.String),
+          tunnels: S.optional(__S(136, __c8, 8)),
+        }),
+      ).annotate({ identifier: "GatewayStatusResponse" });
+  }
+}
+function __c9(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          projectId: S.String.pipe(T.Label()),
+          region: S.String.pipe(T.Label()),
+          gatewayId: S.String.pipe(T.Label()),
+          filterId: S.String.pipe(T.Label()),
+        }).pipe(
+          T.Http({
+            method: "GET",
+            uri: "/v1/projects/{projectId}/regions/{region}/gateways/{gatewayId}/bgp-filters/{filterId}/rules",
+            code: 200,
+            baseUrl: "https://vpn.api.stackit.cloud",
+          }),
+        ),
+      ).annotate({ identifier: "ListGatewayBGPFilterRulesRequest" });
+    case 1:
+      return S.Array(__S(419, __c26, 3));
+    case 2:
+      return S.suspend(() =>
+        S.Struct({
+          rules: __S(145, __c9, 1),
+        }),
+      ).annotate({ identifier: "BGPFilterRuleList" });
+  }
+}
+function __c10(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          projectId: S.String.pipe(T.Label()),
+          region: S.String.pipe(T.Label()),
+          gatewayId: S.String.pipe(T.Label()),
+        }).pipe(
+          T.Http({
+            method: "GET",
+            uri: "/v1/projects/{projectId}/regions/{region}/gateways/{gatewayId}/bgp-filters",
+            code: 200,
+            baseUrl: "https://vpn.api.stackit.cloud",
+          }),
+        ),
+      ).annotate({ identifier: "ListGatewayBGPFiltersRequest" });
+    case 1:
+      return S.Array(__S(384, __c24, 0));
+    case 2:
+      return S.suspend(() =>
+        S.Struct({
+          bgpFilters: __S(161, __c10, 1),
+        }),
+      ).annotate({ identifier: "BGPFilterList" });
+  }
+}
+function __c11(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          projectId: S.String.pipe(T.Label()),
+          region: S.String.pipe(T.Label()),
+          gatewayId: S.String.pipe(T.Label()),
+          label_selector: S.optional(__S(352, __c22, 0).pipe(T.Query())),
+        }).pipe(
+          T.Http({
+            method: "GET",
+            uri: "/v1/projects/{projectId}/regions/{region}/gateways/{gatewayId}/connections",
+            code: 200,
+            baseUrl: "https://vpn.api.stackit.cloud",
+          }),
+        ),
+      ).annotate({ identifier: "ListGatewayConnectionsRequest" });
+    case 1:
+      return S.Array(__S(454, __c28, 6));
+    case 2:
+      return S.suspend(() =>
+        S.Struct({
+          connections: __S(177, __c11, 1),
+        }),
+      ).annotate({ identifier: "ConnectionListOutput" });
+  }
+}
+function __c12(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          projectId: S.String.pipe(T.Label()),
+          region: S.String.pipe(T.Label()),
+          label_selector: S.optional(__S(352, __c22, 0).pipe(T.Query())),
+        }).pipe(
+          T.Http({
+            method: "GET",
+            uri: "/v1/projects/{projectId}/regions/{region}/gateways",
+            code: 200,
+            baseUrl: "https://vpn.api.stackit.cloud",
+          }),
+        ),
+      ).annotate({ identifier: "ListGatewaysRequest" });
+    case 1:
+      return S.Array(__S(323, __c20, 3));
+    case 2:
+      return S.suspend(() =>
+        S.Struct({
+          gateways: __S(193, __c12, 1),
+        }),
+      ).annotate({ identifier: "GatewayList" });
+  }
+}
+function __c13(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          region: S.String.pipe(T.Label()),
+        }).pipe(
+          T.Http({
+            method: "GET",
+            uri: "/v1/regions/{region}/plans",
+            code: 200,
+            baseUrl: "https://vpn.api.stackit.cloud",
+          }),
+        ),
+      ).annotate({ identifier: "ListPlansRequest" });
+    case 1:
+      return S.suspend(() =>
+        S.Struct({
+          maxBandwidth: S.optional(S.Number),
+          maxConnections: S.optional(S.Number),
+          name: S.optional(S.String),
+          planId: S.optional(S.String),
+          sku: S.optional(S.String),
+        }),
+      ).annotate({ identifier: "Plan" });
+    case 2:
+      return S.Array(__S(209, __c13, 1));
+    case 3:
+      return S.suspend(() =>
+        S.Struct({
+          defaultPlanId: S.optional(S.String),
+          plans: S.optional(__S(210, __c13, 2)),
+        }),
+      ).annotate({ identifier: "PlanList" });
+  }
+}
+function __c14(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          projectId: S.String.pipe(T.Label()),
+          region: S.String.pipe(T.Label()),
+        }).pipe(
+          T.Http({
+            method: "GET",
+            uri: "/v1/projects/{projectId}/regions/{region}/quotas",
+            code: 200,
+            baseUrl: "https://vpn.api.stackit.cloud",
+          }),
+        ),
+      ).annotate({ identifier: "ListQuotasRequest" });
+    case 1:
+      return S.suspend(() =>
+        S.Struct({
+          limit: S.Number,
+          usage: S.Number,
+        }),
+      ).annotate({ identifier: "Quota" });
+    case 2:
+      return S.suspend(() =>
+        S.Struct({
+          gateways: __S(225, __c14, 1),
+        }),
+      ).annotate({ identifier: "QuotaList" });
+    case 3:
+      return S.suspend(() =>
+        S.Struct({
+          quotas: __S(226, __c14, 2),
+        }),
+      ).annotate({ identifier: "QuotaListResponse" });
+  }
+}
+function __c15(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          projectId: S.String.pipe(T.Label()),
+          region: S.String.pipe(T.Label()),
+          gatewayId: S.String.pipe(T.Label()),
+          availabilityZones: __S(320, __c20, 0),
+          bgp: S.optional(__S(321, __c20, 1)),
+          displayName: S.String,
+          labels: S.optional(__S(352, __c22, 0)),
+          networkConfig: S.optional(__S(322, __c20, 2)),
+          planId: S.String,
+          routingType: S.String,
+        }).pipe(
+          T.Http({
+            method: "PUT",
+            uri: "/v1/projects/{projectId}/regions/{region}/gateways/{gatewayId}",
+            code: 200,
+            baseUrl: "https://vpn.api.stackit.cloud",
+          }),
+        ),
+      ).annotate({ identifier: "UpdateGatewayRequest" });
+  }
+}
+function __c16(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          projectId: S.String.pipe(T.Label()),
+          region: S.String.pipe(T.Label()),
+          gatewayId: S.String.pipe(T.Label()),
+          filterId: S.String.pipe(T.Label()),
+          displayName: S.String,
+        }).pipe(
+          T.Http({
+            method: "PUT",
+            uri: "/v1/projects/{projectId}/regions/{region}/gateways/{gatewayId}/bgp-filters/{filterId}",
+            code: 200,
+            baseUrl: "https://vpn.api.stackit.cloud",
+          }),
+        ),
+      ).annotate({ identifier: "UpdateGatewayBGPFilterRequest" });
+  }
+}
+function __c17(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          projectId: S.String.pipe(T.Label()),
+          region: S.String.pipe(T.Label()),
+          gatewayId: S.String.pipe(T.Label()),
+          filterId: S.String.pipe(T.Label()),
+          ruleId: S.String.pipe(T.Label()),
+          action: S.String,
+          match: S.optional(__S(417, __c26, 1)),
+          sequence: S.optional(S.Number),
+          set: S.optional(__S(418, __c26, 2)),
+        }).pipe(
+          T.Http({
+            method: "PUT",
+            uri: "/v1/projects/{projectId}/regions/{region}/gateways/{gatewayId}/bgp-filters/{filterId}/rules/{ruleId}",
+            code: 200,
+            baseUrl: "https://vpn.api.stackit.cloud",
+          }),
+        ),
+      ).annotate({ identifier: "UpdateGatewayBGPFilterRuleRequest" });
+  }
+}
+function __c18(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          projectId: S.String.pipe(T.Label()),
+          region: S.String.pipe(T.Label()),
+          gatewayId: S.String.pipe(T.Label()),
+          connectionId: S.String.pipe(T.Label()),
+          displayName: S.String,
+          enabled: S.optional(S.Boolean),
+          labels: S.optional(__S(352, __c22, 0)),
+          localSubnets: S.optional(__S(336, __c21, 0)),
+          remoteSubnets: S.optional(__S(336, __c21, 0)),
+          staticRoutes: S.optional(__S(336, __c21, 0)),
+          tunnel1: __S(464, __c29, 0),
+          tunnel2: __S(464, __c29, 0),
+        }).pipe(
+          T.Http({
+            method: "PUT",
+            uri: "/v1/projects/{projectId}/regions/{region}/gateways/{gatewayId}/connections/{connectionId}",
+            code: 200,
+            baseUrl: "https://vpn.api.stackit.cloud",
+          }),
+        ),
+      ).annotate({ identifier: "UpdateGatewayConnectionRequest" });
+  }
+}
+function __c19(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          projectId: S.String.pipe(T.Label()),
+          region: S.String.pipe(T.Label()),
+          availabilityZones: __S(320, __c20, 0),
+          bgp: S.optional(__S(321, __c20, 1)),
+          displayName: S.String,
+          labels: S.optional(__S(352, __c22, 0)),
+          networkConfig: S.optional(__S(322, __c20, 2)),
+          planId: S.String,
+          routingType: S.String,
+        }).pipe(
+          T.Http({
+            method: "POST",
+            uri: "/v1/projects/{projectId}/regions/{region}/gateways",
+            code: 200,
+            baseUrl: "https://vpn.api.stackit.cloud",
+          }),
+        ),
+      ).annotate({ identifier: "CreateGatewayRequest" });
+  }
+}
+function __c20(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          tunnel1: S.String,
+          tunnel2: S.String,
+        }),
+      ).annotate({ identifier: "CreateGatewayRequestAvailabilityZones" });
+    case 1:
+      return S.suspend(() =>
+        S.Struct({
+          localAsn: S.Number,
+          overrideAdvertisedRoutes: S.optional(__S(336, __c21, 0)),
+        }),
+      ).annotate({ identifier: "BGPGatewayConfig" });
+    case 2:
+      return S.suspend(() =>
+        S.Struct({
+          predefinedNetworkPrefix: S.optional(S.String),
+          routingTableId: S.optional(S.String),
+        }),
+      ).annotate({ identifier: "NetworkConfig" });
+    case 3:
+      return S.suspend(() =>
+        S.Struct({
+          availabilityZones: __S(320, __c20, 0),
+          bgp: S.optional(__S(321, __c20, 1)),
+          displayName: S.String,
+          labels: S.optional(__S(352, __c22, 0)),
+          networkConfig: S.optional(__S(322, __c20, 2)),
+          planId: S.String,
+          routingType: S.String,
+          id: S.optional(S.String),
+          state: S.optional(S.String),
+        }),
+      ).annotate({ identifier: "CreateGatewayResponse" });
+  }
+}
+function __c21(j: number): any {
+  switch (j) {
+    case 0:
+      return S.Array(S.String);
+  }
+}
+function __c22(j: number): any {
+  switch (j) {
+    case 0:
+      return S.Record(S.String, S.String);
+  }
+}
+function __c23(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          projectId: S.String.pipe(T.Label()),
+          region: S.String.pipe(T.Label()),
+          gatewayId: S.String.pipe(T.Label()),
+          displayName: S.String,
+        }).pipe(
+          T.Http({
+            method: "POST",
+            uri: "/v1/projects/{projectId}/regions/{region}/gateways/{gatewayId}/bgp-filters",
+            code: 200,
+            baseUrl: "https://vpn.api.stackit.cloud",
+          }),
+        ),
+      ).annotate({ identifier: "CreateGatewayBGPFilterRequest" });
+  }
+}
+function __c24(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          displayName: S.String,
+          id: S.optional(S.String),
+        }),
+      ).annotate({ identifier: "BGPFilter" });
+  }
+}
+function __c25(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          projectId: S.String.pipe(T.Label()),
+          region: S.String.pipe(T.Label()),
+          gatewayId: S.String.pipe(T.Label()),
+          filterId: S.String.pipe(T.Label()),
+          action: S.String,
+          match: S.optional(__S(417, __c26, 1)),
+          sequence: S.optional(S.Number),
+          set: S.optional(__S(418, __c26, 2)),
+        }).pipe(
+          T.Http({
+            method: "POST",
+            uri: "/v1/projects/{projectId}/regions/{region}/gateways/{gatewayId}/bgp-filters/{filterId}/rules",
+            code: 200,
+            baseUrl: "https://vpn.api.stackit.cloud",
+          }),
+        ),
+      ).annotate({ identifier: "CreateGatewayBGPFilterRuleRequest" });
+  }
+}
+function __c26(j: number): any {
+  switch (j) {
+    case 0:
+      return S.Array(S.Number);
+    case 1:
+      return S.suspend(() =>
+        S.Struct({
+          asPathContainsAny: S.optional(__S(416, __c26, 0)),
+          communities: S.optional(__S(336, __c21, 0)),
+          firstASN: S.optional(S.Number),
+          maxPrefixLength: S.optional(S.Number),
+          minPrefixLength: S.optional(S.Number),
+          peer: S.optional(S.String),
+          prefixes: S.optional(__S(336, __c21, 0)),
+        }),
+      ).annotate({ identifier: "CreateGatewayBGPFilterRuleRequestMatch" });
+    case 2:
+      return S.suspend(() =>
+        S.Struct({
+          localPreference: S.optional(S.Number),
+        }),
+      ).annotate({ identifier: "CreateGatewayBGPFilterRuleRequestSet" });
+    case 3:
+      return S.suspend(() =>
+        S.Struct({
+          action: S.String,
+          id: S.optional(S.String),
+          match: S.optional(__S(417, __c26, 1)),
+          sequence: S.optional(S.Number),
+          set: S.optional(__S(418, __c26, 2)),
+        }),
+      ).annotate({ identifier: "BGPFilterRule" });
+  }
+}
+function __c27(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          projectId: S.String.pipe(T.Label()),
+          region: S.String.pipe(T.Label()),
+          gatewayId: S.String.pipe(T.Label()),
+          displayName: S.String,
+          enabled: S.optional(S.Boolean),
+          labels: S.optional(__S(352, __c22, 0)),
+          localSubnets: S.optional(__S(336, __c21, 0)),
+          remoteSubnets: S.optional(__S(336, __c21, 0)),
+          staticRoutes: S.optional(__S(336, __c21, 0)),
+          tunnel1: __S(464, __c29, 0),
+          tunnel2: __S(464, __c29, 0),
+        }).pipe(
+          T.Http({
+            method: "POST",
+            uri: "/v1/projects/{projectId}/regions/{region}/gateways/{gatewayId}/connections",
+            code: 200,
+            baseUrl: "https://vpn.api.stackit.cloud",
+          }),
+        ),
+      ).annotate({ identifier: "CreateGatewayConnectionRequest" });
+  }
+}
+function __c28(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          inboundFilterId: S.optional(S.NullOr(S.String)),
+          remoteAsn: S.Number,
+        }),
+      ).annotate({ identifier: "BGPTunnelConfig" });
+    case 1:
+      return S.suspend(() =>
+        S.Struct({
+          localAddress: S.optional(S.String),
+          remoteAddress: S.optional(S.String),
+        }),
+      ).annotate({ identifier: "PeeringConfig" });
+    case 2:
+      return S.Array(S.String);
+    case 3:
+      return S.suspend(() =>
+        S.Struct({
+          dhGroups: S.optional(__S(450, __c28, 2)),
+          encryptionAlgorithms: __S(450, __c28, 2),
+          integrityAlgorithms: __S(450, __c28, 2),
+          rekeyTime: S.optional(S.Number),
+        }),
+      ).annotate({ identifier: "TunnelConfigurationPhase1" });
+    case 4:
+      return S.suspend(() =>
+        S.Struct({
+          dhGroups: S.optional(__S(450, __c28, 2)),
+          encryptionAlgorithms: __S(450, __c28, 2),
+          integrityAlgorithms: __S(450, __c28, 2),
+          dpdAction: S.optional(S.String),
+          rekeyTime: S.optional(S.Number),
+          startAction: S.optional(S.String),
+        }),
+      ).annotate({ identifier: "TunnelConfigurationPhase2" });
+    case 5:
+      return S.suspend(() =>
+        S.Struct({
+          bgp: S.optional(__S(448, __c28, 0)),
+          peering: S.optional(__S(449, __c28, 1)),
+          phase1: __S(451, __c28, 3),
+          phase2: __S(452, __c28, 4),
+          remoteAddress: S.String,
+        }),
+      ).annotate({ identifier: "TunnelConfigurationOutput" });
+    case 6:
+      return S.suspend(() =>
+        S.Struct({
+          displayName: S.String,
+          enabled: S.optional(S.Boolean),
+          id: S.optional(S.String),
+          labels: S.optional(__S(352, __c22, 0)),
+          localSubnets: S.optional(__S(336, __c21, 0)),
+          remoteSubnets: S.optional(__S(336, __c21, 0)),
+          staticRoutes: S.optional(__S(336, __c21, 0)),
+          tunnel1: __S(453, __c28, 5),
+          tunnel2: __S(453, __c28, 5),
+        }),
+      ).annotate({ identifier: "ConnectionResponseOutput" });
+  }
+}
+function __c29(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          bgp: S.optional(__S(448, __c28, 0)),
+          peering: S.optional(__S(449, __c28, 1)),
+          phase1: __S(451, __c28, 3),
+          phase2: __S(452, __c28, 4),
+          preSharedKey: S.optional(S.String),
+          remoteAddress: S.String,
+        }),
+      ).annotate({ identifier: "TunnelConfiguration" });
+  }
+}
+function __c30(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          projectId: S.String.pipe(T.Label()),
+          region: S.String.pipe(T.Label()),
+          gatewayId: S.String.pipe(T.Label()),
+        }).pipe(
+          T.Http({
+            method: "DELETE",
+            uri: "/v1/projects/{projectId}/regions/{region}/gateways/{gatewayId}",
+            code: 200,
+            baseUrl: "https://vpn.api.stackit.cloud",
+          }),
+        ),
+      ).annotate({ identifier: "DeleteGatewayRequest" });
+  }
+}
+function __c31(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() => S.Struct({})).annotate({ identifier: "DeleteGatewayResponse" });
+  }
+}
+function __c32(j: number): any {
+  switch (j) {
+    case 0:
+      return S.suspend(() =>
+        S.Struct({
+          projectId: S.String.pipe(T.Label()),
+          region: S.String.pipe(T.Label()),
+          gatewayId: S.String.pipe(T.Label()),
+          filterId: S.String.pipe(T.Label()),
+        }).pipe(
+          T.Http({
+            method: "DELETE",
+            uri: "/v1/projects/{projectId}/regions/{region}/gateways/{gatewayId}/bgp-filters/{filterId}",
+            code: 200,
+            baseUrl: "https://vpn.api.stackit.cloud",
+          }),
+        ),
+      ).annotate({ identifier: "DeleteGatewayBGPFilterRequest" });
+  }
+}
+// Schema table: entry i is schema j of builder f, made on first reach.
+function __S(i: number, f: (j: number) => unknown, j: number): any {
+  return (__s[i] ??= __L.at(f, j));
+}