@distilled.cloud/stackit 1.0.0-rc.15 → 1.0.0-rc.16

package/lib/services/service_account.js

@@ -1,506 +1,86 @@
 import * as API from "@distilled.cloud/core/api";
 import * as C from "@distilled.cloud/core/category";
 // AUTO-GENERATED by scripts/generate.ts from .generated-specs (specs/spec-mirror-stackit). Do not edit.
-import * as S from "@distilled.cloud/core/schema";
-import * as Redacted from "effect/Redacted";
+import * as S from "@distilled.cloud/core/schema-lite";
+import * as __L from "@distilled.cloud/core/schema-lite";
 import { UnknownStackitError } from "../errors.js";
 import { StackitProtocol } from "../protocol.js";
 import * as Retry from "../retry.js";
 import * as T from "../traits.js";
-export class BadRequest extends /*@__PURE__*/ /*@__PURE__*/ T.applyErrorMatchers(
-/*@__PURE__*/ S.TaggedError()("BadRequest", {
-    code: S.Number,
-    message: S.String,
-}).pipe(C.withBadRequestError), [{ status: 400 }]) {
+const __0 = __L.at;
+const __1 = T.Http;
+const __2 = T.Label;
+const __3 = S.String;
+const __4 = S.Struct;
+const __5 = S.suspend;
+const __6 = S.optional;
+const __7 = S.Array;
+const __8 = T.Query;
+const __9 = S.Boolean;
+const __10 = S.Number;
+const __11 = T.SensitiveValue;
+const __12 = S.TaggedError;
+const __13 = T.applyErrorMatchers;
+export const BadRequest = /*@__PURE__*/ API.error(function BadRequest(i) {
+  return API.newError(i, new.target, ['$5($4()("BadRequest",{code:$2,message:$3}).pipe($1),[{status:400}])', [__0, C.withBadRequestError, __10, __3, __12, __13]]);
+});
+export const Conflict = /*@__PURE__*/ API.error(function Conflict(i) {
+  return API.newError(i, new.target, ['$5($4()("Conflict",{code:$2,message:$3}).pipe($1),[{status:409}])', [__0, C.withConflictError, __10, __3, __12, __13]]);
+});
+export const Forbidden = /*@__PURE__*/ API.error(function Forbidden(i) {
+  return API.newError(i, new.target, ['$5($4()("Forbidden",{code:$2,message:$3}).pipe($1),[{status:403}])', [__0, C.withAuthError, __10, __3, __12, __13]]);
+});
+export const NotFound = /*@__PURE__*/ API.error(function NotFound(i) {
+  return API.newError(i, new.target, ['$5($4()("NotFound",{code:$2,message:$3}).pipe($1),[{status:404}])', [__0, C.withBadRequestError, __10, __3, __12, __13]]);
+});
+
+export const createFederatedIdentityProvider = /*@__PURE__*/ API.op((i) => i === API.D ? ['{input:#1,output:#8:2,errors:[$9,$10,$11,$12],protocol:$13,retry:$14};$7(>2)@"CreateFederatedIdentityProviderRequest";$6({projectId:$3.pipe($2()),serviceAccountEmail:$3.pipe($2()),assertions:$5(#4:1),issuer:$3,name:$3}).pipe($1({method:"POST",uri:"/v2/projects/{projectId}/service-accounts/{serviceAccountEmail}/federations",code:200,baseUrl:"https://service-account.api.stackit.cloud"}))', [__0, __1, __2, __3, __d2, __6, __4, __5, __d1, BadRequest, Forbidden, Conflict, UnknownStackitError, StackitProtocol, Retry.Retry]] : API.call(createFederatedIdentityProvider, i));
+
+export const createServiceAccount = /*@__PURE__*/ API.op((i) => i === API.D ? ['{input:#1,output:#6:0,errors:[$7,$8,$9,$10],protocol:$11,retry:$12};$5(>2)@"CreateServiceAccountRequest";$4({projectId:$3.pipe($2()),name:$3}).pipe($1({method:"POST",uri:"/v2/projects/{projectId}/service-accounts",code:200,baseUrl:"https://service-account.api.stackit.cloud"}))', [__0, __1, __2, __3, __4, __5, __d3, BadRequest, Forbidden, Conflict, UnknownStackitError, StackitProtocol, Retry.Retry]] : API.call(createServiceAccount, i));
+
+export const createServiceAccountKey = /*@__PURE__*/ API.op((i) => i === API.D ? API.named("CreateServiceAccountKeyResponse", '{input:#1,output:#3,errors:[$9,$10,$11,$12],protocol:$13,retry:$14};$6(>4)@"CreateServiceAccountKeyRequest";$6(>5)@"%Credentials";$6(>6)@"%";$5({projectId:$3.pipe($2()),serviceAccountEmail:$3.pipe($2()),algorithm:$4($3),publicKey:$4($3),validUntil:$4($3)}).pipe($1({method:"POST",uri:"/v2/projects/{projectId}/service-accounts/{serviceAccountEmail}/keys",code:200,baseUrl:"https://service-account.api.stackit.cloud"}));$5({aud:$3,iss:$3,kid:$3,privateKey:$4($3.pipe($7({}))),sub:$3,tokenEndpoint:$4($3)});$5({active:$8,createdAt:$3,credentials:#2,id:$3,keyAlgorithm:$3,keyOrigin:$3,keyType:$3,publicKey:$3,validUntil:$4($3)})', [__0, __1, __2, __3, __6, __4, __5, __11, __9, BadRequest, Forbidden, Conflict, UnknownStackitError, StackitProtocol, Retry.Retry]) : API.call(createServiceAccountKey, i));
+
+export const createShortLivedAccessToken = /*@__PURE__*/ API.op((i) => i === API.D ? ['{input:#1,output:#2,errors:[$8,$9,$10],protocol:$11,retry:$12};$6(>3)@"CreateShortLivedAccessTokenRequest";$6(>4)@"CreateShortLivedAccessTokenResponse";$5({assertion:$3($2),grant_type:$2,refresh_token:$3($2.pipe($4({})))}).pipe($1({method:"POST",uri:"/token",code:200,baseUrl:"https://service-account.api.stackit.cloud"}));$5({access_token:$2.pipe($4({})),expires_in:$7,refresh_token:$2.pipe($4({})),scope:$2,token_type:$2})', [__0, __1, __3, __6, __11, __4, __5, __10, BadRequest, Forbidden, UnknownStackitError, StackitProtocol, Retry.Retry]] : API.call(createShortLivedAccessToken, i));
+
+export const deleteServiceAccount = /*@__PURE__*/ API.op((i) => i === API.D ? ['{input:#1,output:#6:0,errors:[$7,$8,$9,$10],protocol:$11,retry:$12};$5(>2)@"DeleteServiceAccountRequest";$4({projectId:$3.pipe($2()),serviceAccountEmail:$3.pipe($2())}).pipe($1({method:"DELETE",uri:"/v2/projects/{projectId}/service-accounts/{serviceAccountEmail}",code:200,baseUrl:"https://service-account.api.stackit.cloud"}))', [__0, __1, __2, __3, __4, __5, __d4, BadRequest, Forbidden, NotFound, UnknownStackitError, StackitProtocol, Retry.Retry]] : API.call(deleteServiceAccount, i));
+
+export const deleteServiceAccountKey = /*@__PURE__*/ API.op((i) => i === API.D ? ['{input:#1,output:#6:0,errors:[$7,$8,$9],protocol:$10,retry:$11};$5(>2)@"DeleteServiceAccountKeyRequest";$4({projectId:$3.pipe($2()),serviceAccountEmail:$3.pipe($2()),keyId:$3.pipe($2())}).pipe($1({method:"DELETE",uri:"/v2/projects/{projectId}/service-accounts/{serviceAccountEmail}/keys/{keyId}",code:200,baseUrl:"https://service-account.api.stackit.cloud"}))', [__0, __1, __2, __3, __4, __5, __d4, BadRequest, Forbidden, UnknownStackitError, StackitProtocol, Retry.Retry]] : API.call(deleteServiceAccountKey, i));
+
+export const deleteServiceFederatedIdentityProvider = /*@__PURE__*/ API.op((i) => i === API.D ? ['{input:#1,output:#6:0,errors:[$7,$8,$9],protocol:$10,retry:$11};$5(>2)@"DeleteServiceFederatedIdentityProviderRequest";$4({projectId:$3.pipe($2()),serviceAccountEmail:$3.pipe($2()),federationId:$3.pipe($2())}).pipe($1({method:"DELETE",uri:"/v2/projects/{projectId}/service-accounts/{serviceAccountEmail}/federations/{federationId}",code:200,baseUrl:"https://service-account.api.stackit.cloud"}))', [__0, __1, __2, __3, __4, __5, __d4, BadRequest, Forbidden, UnknownStackitError, StackitProtocol, Retry.Retry]] : API.call(deleteServiceFederatedIdentityProvider, i));
+
+export const getFederatedIdentityProvider = /*@__PURE__*/ API.op((i) => i === API.D ? ['{input:#1,output:#6:2,errors:[$7,$8,$9,$10],protocol:$11,retry:$12};$5(>2)@"GetFederatedIdentityProviderRequest";$4({projectId:$3.pipe($2()),serviceAccountEmail:$3.pipe($2()),federationId:$3.pipe($2())}).pipe($1({method:"GET",uri:"/v2/projects/{projectId}/service-accounts/{serviceAccountEmail}/federations/{federationId}",code:200,baseUrl:"https://service-account.api.stackit.cloud"}))', [__0, __1, __2, __3, __4, __5, __d1, BadRequest, Forbidden, NotFound, UnknownStackitError, StackitProtocol, Retry.Retry]] : API.call(getFederatedIdentityProvider, i));
+
+export const getJWKS = 
+/*@__PURE__*/ API.op((i) => i === API.D ? ['{input:#1,output:#4,errors:[$8],protocol:$9,retry:$10};$5(>5)@"GetJWKSRequest";$5(>6)@"JWK";$7(#2);$5(>7)@"JWKS";$4({serviceAccountEmail:$3.pipe($2())}).pipe($1({method:"GET",uri:"/v2/service-accounts/public/jwk/{serviceAccountEmail}",code:200,baseUrl:"https://service-account.api.stackit.cloud"}));$4({alg:$6($3),e:$3,kid:$6($3),ks:$6($3),n:$3,ops:$6($3),use:$6($3),x5c:$6($3),x5t:$6($3),x5t256:$6($3),x5u:$6($3)});$4({keys:#3})', [__0, __1, __2, __3, __4, __5, __6, __7, UnknownStackitError, StackitProtocol, Retry.Retry]] : API.call(getJWKS, i));
+
+export const getServiceAccountKey = /*@__PURE__*/ API.op((i) => i === API.D ? API.named("GetServiceAccountKeyResponse", '{input:#1,output:#3,errors:[$9,$10,$11],protocol:$12,retry:$13};$7(>4)@"GetServiceAccountKeyRequest";$7(>5)@"%Credentials";$7(>6)@"%";$6({projectId:$3.pipe($2()),serviceAccountEmail:$3.pipe($2()),keyId:$3.pipe($2()),format:$5($3.pipe($4()))}).pipe($1({method:"GET",uri:"/v2/projects/{projectId}/service-accounts/{serviceAccountEmail}/keys/{keyId}",code:200,baseUrl:"https://service-account.api.stackit.cloud"}));$6({aud:$3,iss:$3,kid:$3,sub:$3});$6({active:$8,createdAt:$3,credentials:#2,id:$3,keyAlgorithm:$3,keyOrigin:$3,keyType:$3,publicKey:$5($3),validUntil:$5($3)})', [__0, __1, __2, __3, __8, __6, __4, __5, __9, BadRequest, Forbidden, UnknownStackitError, StackitProtocol, Retry.Retry]) : API.call(getServiceAccountKey, i));
+
+export const listFederatedIdentityProviders = /*@__PURE__*/ API.op((i) => i === API.D ? ['{input:#1,output:#3,errors:[$9,$10,$11],protocol:$12,retry:$13};$5(>4)@"ListFederatedIdentityProvidersRequest";$7(#6:2);$5(>5)@"FederatedListFederatedIdentityProvidersResponse";$4({projectId:$3.pipe($2()),serviceAccountEmail:$3.pipe($2())}).pipe($1({method:"GET",uri:"/v2/projects/{projectId}/service-accounts/{serviceAccountEmail}/federations",code:200,baseUrl:"https://service-account.api.stackit.cloud"}));$4({itemsPerPage:$8,resources:#2,startIndex:$8,totalResults:$8})', [__0, __1, __2, __3, __4, __5, __d1, __7, __10, BadRequest, Forbidden, UnknownStackitError, StackitProtocol, Retry.Retry]] : API.call(listFederatedIdentityProviders, i));
+
+export const listServiceAccountKeys = /*@__PURE__*/ API.op((i) => i === API.D ? ['{input:#1,output:#3,errors:[$8,$9,$10],protocol:$11,retry:$12};$5(>4)@"ListServiceAccountKeysRequest";$7(#6:0);$5(>5)@"ListServiceAccountKeysResponse";$4({projectId:$3.pipe($2()),serviceAccountEmail:$3.pipe($2())}).pipe($1({method:"GET",uri:"/v2/projects/{projectId}/service-accounts/{serviceAccountEmail}/keys",code:200,baseUrl:"https://service-account.api.stackit.cloud"}));$4({items:#2})', [__0, __1, __2, __3, __4, __5, __d0, __7, BadRequest, Forbidden, UnknownStackitError, StackitProtocol, Retry.Retry]] : API.call(listServiceAccountKeys, i));
+
+export const listServiceAccounts = /*@__PURE__*/ API.op((i) => i === API.D ? ['{input:#1,output:#3,errors:[$8,$9,$10],protocol:$11,retry:$12};$5(>4)@"ListServiceAccountsRequest";$7(#6:0);$5(>5)@"ListServiceAccountsResponse";$4({projectId:$3.pipe($2())}).pipe($1({method:"GET",uri:"/v2/projects/{projectId}/service-accounts",code:200,baseUrl:"https://service-account.api.stackit.cloud"}));$4({items:#2})', [__0, __1, __2, __3, __4, __5, __d3, __7, BadRequest, Forbidden, UnknownStackitError, StackitProtocol, Retry.Retry]] : API.call(listServiceAccounts, i));
+
+export const partialUpdateServiceAccountFederatedIdentityProvider = /*@__PURE__*/ API.op((i) => i === API.D ? ['{input:#1,output:#8:2,errors:[$9,$10,$11,$12],protocol:$13,retry:$14};$7(>2)@"PartialUpdateServiceAccountFederatedIdentityProviderRequest";$6({projectId:$3.pipe($2()),serviceAccountEmail:$3.pipe($2()),federationId:$3.pipe($2()),assertions:$5(#4:1),issuer:$3,name:$3}).pipe($1({method:"PATCH",uri:"/v2/projects/{projectId}/service-accounts/{serviceAccountEmail}/federations/{federationId}",code:200,baseUrl:"https://service-account.api.stackit.cloud"}))', [__0, __1, __2, __3, __d2, __6, __4, __5, __d1, BadRequest, Forbidden, Conflict, UnknownStackitError, StackitProtocol, Retry.Retry]] : API.call(partialUpdateServiceAccountFederatedIdentityProvider, i));
+
+export const partialUpdateServiceAccountKey = /*@__PURE__*/ API.op((i) => i === API.D ? ['{input:#1,output:#8:0,errors:[$9,$10,$11,$12],protocol:$13,retry:$14};$7(>2)@"PartialUpdateServiceAccountKeyRequest";$6({projectId:$3.pipe($2()),serviceAccountEmail:$3.pipe($2()),keyId:$3.pipe($2()),active:$5($4),validUntil:$5($3)}).pipe($1({method:"PATCH",uri:"/v2/projects/{projectId}/service-accounts/{serviceAccountEmail}/keys/{keyId}",code:200,baseUrl:"https://service-account.api.stackit.cloud"}))', [__0, __1, __2, __3, __9, __6, __4, __5, __d0, BadRequest, Forbidden, Conflict, UnknownStackitError, StackitProtocol, Retry.Retry]] : API.call(partialUpdateServiceAccountKey, i));
+// Schema builders: each runs one schema initializer, on that schema's first use.
+// Schema table: entry i is schema j of builder f, made on first reach.
+
+
+// Shared schema data (see `op` in core/api).
+function __d0() {
+  return ['$5(>1)@"ServiceAccountKeyListResponse";$4({active:$1,createdAt:$2,id:$2,keyAlgorithm:$2,keyOrigin:$2,keyType:$2,validUntil:$3($2)})', [__0, __9, __3, __6, __4, __5]];
 }
-export class Conflict extends /*@__PURE__*/ /*@__PURE__*/ T.applyErrorMatchers(
-/*@__PURE__*/ S.TaggedError()("Conflict", {
-    code: S.Number,
-    message: S.String,
-}).pipe(C.withConflictError), [{ status: 409 }]) {
+function __d1() {
+  return ['$3(>3)@"FederatedIdentityProviderAssertionsItem";$4(#0);$3(>4)@"FederatedIdentityProvider";$2({item:$1,operator:$1,value:$1});$2({assertions:#1,createdAt:$1,id:$5($1),issuer:$1,name:$1,updatedAt:$1})', [__0, __3, __4, __5, __7, __6]];
 }
-export class Forbidden extends /*@__PURE__*/ /*@__PURE__*/ T.applyErrorMatchers(
-/*@__PURE__*/ S.TaggedError()("Forbidden", {
-    code: S.Number,
-    message: S.String,
-}).pipe(C.withAuthError), [{ status: 403 }]) {
+function __d2() {
+  return ['$4(>2)@"CreateFederatedIdentityProviderRequestAssertionsItem";$5(#0);$3({item:$2($1),operator:$2($1),value:$2($1)})', [__0, __3, __6, __4, __5, __7]];
 }
-export class NotFound extends /*@__PURE__*/ /*@__PURE__*/ T.applyErrorMatchers(
-/*@__PURE__*/ S.TaggedError()("NotFound", {
-    code: S.Number,
-    message: S.String,
-}).pipe(C.withBadRequestError), [{ status: 404 }]) {
+function __d3() {
+  return ['$4(>1)@"ServiceAccount2";$3({email:$1,id:$1,internal:$2,projectId:$1})', [__0, __3, __9, __4, __5]];
+}
+function __d4() {
+  return ['$2(>1)@"DeleteServiceAccountResponse";$1({})', [__0, __4, __5]];
 }
-export const CreateFederatedIdentityProviderRequestAssertionsItem = /*@__PURE__*/ S.suspend(() => S.Struct({
-    item: S.optional(S.String),
-    operator: S.optional(S.String),
-    value: S.optional(S.String),
-})).annotate({
-    identifier: "CreateFederatedIdentityProviderRequestAssertionsItem",
-});
-export const CreateFederatedIdentityProviderRequestAssertionsList = /*@__PURE__*/ S.Array(CreateFederatedIdentityProviderRequestAssertionsItem);
-export const CreateFederatedIdentityProviderRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
-    projectId: S.String.pipe(T.Label()),
-    serviceAccountEmail: S.String.pipe(T.Label()),
-    assertions: S.optional(CreateFederatedIdentityProviderRequestAssertionsList),
-    issuer: S.String,
-    name: S.String,
-}).pipe(T.Http({
-    method: "POST",
-    uri: "/v2/projects/{projectId}/service-accounts/{serviceAccountEmail}/federations",
-    code: 200,
-    baseUrl: "https://service-account.api.stackit.cloud",
-}))).annotate({
-    identifier: "CreateFederatedIdentityProviderRequest",
-});
-export const FederatedIdentityProviderAssertionsItem = /*@__PURE__*/ S.suspend(() => S.Struct({
-    item: S.String,
-    operator: S.String,
-    value: S.String,
-})).annotate({
-    identifier: "FederatedIdentityProviderAssertionsItem",
-});
-export const FederatedIdentityProviderAssertionsList = /*@__PURE__*/ S.Array(FederatedIdentityProviderAssertionsItem);
-export const FederatedIdentityProvider = /*@__PURE__*/ S.suspend(() => S.Struct({
-    assertions: FederatedIdentityProviderAssertionsList,
-    createdAt: S.String,
-    id: S.optional(S.String),
-    issuer: S.String,
-    name: S.String,
-    updatedAt: S.String,
-})).annotate({
-    identifier: "FederatedIdentityProvider",
-});
-export const CreateServiceAccountRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
-    projectId: S.String.pipe(T.Label()),
-    name: S.String,
-}).pipe(T.Http({
-    method: "POST",
-    uri: "/v2/projects/{projectId}/service-accounts",
-    code: 200,
-    baseUrl: "https://service-account.api.stackit.cloud",
-}))).annotate({
-    identifier: "CreateServiceAccountRequest",
-});
-export const ServiceAccount2 = /*@__PURE__*/ S.suspend(() => S.Struct({
-    email: S.String,
-    id: S.String,
-    internal: S.Boolean,
-    projectId: S.String,
-})).annotate({ identifier: "ServiceAccount2" });
-export const CreateServiceAccountKeyRequestAlgorithm = S.String;
-export const CreateServiceAccountKeyRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
-    projectId: S.String.pipe(T.Label()),
-    serviceAccountEmail: S.String.pipe(T.Label()),
-    algorithm: S.optional(CreateServiceAccountKeyRequestAlgorithm),
-    publicKey: S.optional(S.String),
-    validUntil: S.optional(S.String),
-}).pipe(T.Http({
-    method: "POST",
-    uri: "/v2/projects/{projectId}/service-accounts/{serviceAccountEmail}/keys",
-    code: 200,
-    baseUrl: "https://service-account.api.stackit.cloud",
-}))).annotate({
-    identifier: "CreateServiceAccountKeyRequest",
-});
-export const CreateServiceAccountKeyResponseCredentials = /*@__PURE__*/ S.suspend(() => S.Struct({
-    aud: S.String,
-    iss: S.String,
-    kid: S.String,
-    privateKey: S.optional(S.String.pipe(T.SensitiveValue({}))),
-    sub: S.String,
-    tokenEndpoint: S.optional(S.String),
-})).annotate({
-    identifier: "CreateServiceAccountKeyResponseCredentials",
-});
-export const CreateServiceAccountKeyResponseKeyAlgorithm = S.String;
-export const CreateServiceAccountKeyResponseKeyOrigin = S.String;
-export const CreateServiceAccountKeyResponseKeyType = S.String;
-export const CreateServiceAccountKeyResponse = /*@__PURE__*/ S.suspend(() => S.Struct({
-    active: S.Boolean,
-    createdAt: S.String,
-    credentials: CreateServiceAccountKeyResponseCredentials,
-    id: S.String,
-    keyAlgorithm: CreateServiceAccountKeyResponseKeyAlgorithm,
-    keyOrigin: CreateServiceAccountKeyResponseKeyOrigin,
-    keyType: CreateServiceAccountKeyResponseKeyType,
-    publicKey: S.String,
-    validUntil: S.optional(S.String),
-})).annotate({
-    identifier: "CreateServiceAccountKeyResponse",
-});
-export const CreateShortLivedAccessTokenRequestGrantType = S.String;
-export const CreateShortLivedAccessTokenRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
-    assertion: S.optional(S.String),
-    grant_type: CreateShortLivedAccessTokenRequestGrantType,
-    refresh_token: S.optional(S.String.pipe(T.SensitiveValue({}))),
-}).pipe(T.Http({
-    method: "POST",
-    uri: "/token",
-    code: 200,
-    baseUrl: "https://service-account.api.stackit.cloud",
-}))).annotate({
-    identifier: "CreateShortLivedAccessTokenRequest",
-});
-export const CreateShortLivedAccessTokenResponseTokenType = S.String;
-export const CreateShortLivedAccessTokenResponse = /*@__PURE__*/ S.suspend(() => S.Struct({
-    access_token: S.String.pipe(T.SensitiveValue({})),
-    expires_in: S.Number,
-    refresh_token: S.String.pipe(T.SensitiveValue({})),
-    scope: S.String,
-    token_type: CreateShortLivedAccessTokenResponseTokenType,
-})).annotate({
-    identifier: "CreateShortLivedAccessTokenResponse",
-});
-export const DeleteServiceAccountRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
-    projectId: S.String.pipe(T.Label()),
-    serviceAccountEmail: S.String.pipe(T.Label()),
-}).pipe(T.Http({
-    method: "DELETE",
-    uri: "/v2/projects/{projectId}/service-accounts/{serviceAccountEmail}",
-    code: 200,
-    baseUrl: "https://service-account.api.stackit.cloud",
-}))).annotate({
-    identifier: "DeleteServiceAccountRequest",
-});
-export const DeleteServiceAccountResponse = /*@__PURE__*/ S.suspend(() => S.Struct({})).annotate({
-    identifier: "DeleteServiceAccountResponse",
-});
-export const DeleteServiceAccountKeyRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
-    projectId: S.String.pipe(T.Label()),
-    serviceAccountEmail: S.String.pipe(T.Label()),
-    keyId: S.String.pipe(T.Label()),
-}).pipe(T.Http({
-    method: "DELETE",
-    uri: "/v2/projects/{projectId}/service-accounts/{serviceAccountEmail}/keys/{keyId}",
-    code: 200,
-    baseUrl: "https://service-account.api.stackit.cloud",
-}))).annotate({
-    identifier: "DeleteServiceAccountKeyRequest",
-});
-export const DeleteServiceAccountKeyResponse = /*@__PURE__*/ S.suspend(() => S.Struct({})).annotate({ identifier: "DeleteServiceAccountKeyResponse" });
-export const DeleteServiceFederatedIdentityProviderRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
-    projectId: S.String.pipe(T.Label()),
-    serviceAccountEmail: S.String.pipe(T.Label()),
-    federationId: S.String.pipe(T.Label()),
-}).pipe(T.Http({
-    method: "DELETE",
-    uri: "/v2/projects/{projectId}/service-accounts/{serviceAccountEmail}/federations/{federationId}",
-    code: 200,
-    baseUrl: "https://service-account.api.stackit.cloud",
-}))).annotate({
-    identifier: "DeleteServiceFederatedIdentityProviderRequest",
-});
-export const DeleteServiceFederatedIdentityProviderResponse = /*@__PURE__*/ S.suspend(() => S.Struct({})).annotate({
-    identifier: "DeleteServiceFederatedIdentityProviderResponse",
-});
-export const GetFederatedIdentityProviderRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
-    projectId: S.String.pipe(T.Label()),
-    serviceAccountEmail: S.String.pipe(T.Label()),
-    federationId: S.String.pipe(T.Label()),
-}).pipe(T.Http({
-    method: "GET",
-    uri: "/v2/projects/{projectId}/service-accounts/{serviceAccountEmail}/federations/{federationId}",
-    code: 200,
-    baseUrl: "https://service-account.api.stackit.cloud",
-}))).annotate({
-    identifier: "GetFederatedIdentityProviderRequest",
-});
-export const GetJWKSRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
-    serviceAccountEmail: S.String.pipe(T.Label()),
-}).pipe(T.Http({
-    method: "GET",
-    uri: "/v2/service-accounts/public/jwk/{serviceAccountEmail}",
-    code: 200,
-    baseUrl: "https://service-account.api.stackit.cloud",
-}))).annotate({ identifier: "GetJWKSRequest" });
-export const JWK = /*@__PURE__*/ S.suspend(() => S.Struct({
-    alg: S.optional(S.String),
-    e: S.String,
-    kid: S.optional(S.String),
-    ks: S.optional(S.String),
-    n: S.String,
-    ops: S.optional(S.String),
-    use: S.optional(S.String),
-    x5c: S.optional(S.String),
-    x5t: S.optional(S.String),
-    x5t256: S.optional(S.String),
-    x5u: S.optional(S.String),
-})).annotate({ identifier: "JWK" });
-export const JWKSKeysList = /*@__PURE__*/ S.Array(JWK);
-export const JWKS = /*@__PURE__*/ S.suspend(() => S.Struct({
-    keys: JWKSKeysList,
-})).annotate({ identifier: "JWKS" });
-export const GetServiceAccountKeyRequestFormat = S.String;
-export const GetServiceAccountKeyRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
-    projectId: S.String.pipe(T.Label()),
-    serviceAccountEmail: S.String.pipe(T.Label()),
-    keyId: S.String.pipe(T.Label()),
-    format: S.optional(GetServiceAccountKeyRequestFormat.pipe(T.Query())),
-}).pipe(T.Http({
-    method: "GET",
-    uri: "/v2/projects/{projectId}/service-accounts/{serviceAccountEmail}/keys/{keyId}",
-    code: 200,
-    baseUrl: "https://service-account.api.stackit.cloud",
-}))).annotate({
-    identifier: "GetServiceAccountKeyRequest",
-});
-export const GetServiceAccountKeyResponseCredentials = /*@__PURE__*/ S.suspend(() => S.Struct({
-    aud: S.String,
-    iss: S.String,
-    kid: S.String,
-    sub: S.String,
-})).annotate({
-    identifier: "GetServiceAccountKeyResponseCredentials",
-});
-export const GetServiceAccountKeyResponseKeyAlgorithm = S.String;
-export const GetServiceAccountKeyResponseKeyOrigin = S.String;
-export const GetServiceAccountKeyResponseKeyType = S.String;
-export const GetServiceAccountKeyResponse = /*@__PURE__*/ S.suspend(() => S.Struct({
-    active: S.Boolean,
-    createdAt: S.String,
-    credentials: GetServiceAccountKeyResponseCredentials,
-    id: S.String,
-    keyAlgorithm: GetServiceAccountKeyResponseKeyAlgorithm,
-    keyOrigin: GetServiceAccountKeyResponseKeyOrigin,
-    keyType: GetServiceAccountKeyResponseKeyType,
-    publicKey: S.optional(S.String),
-    validUntil: S.optional(S.String),
-})).annotate({
-    identifier: "GetServiceAccountKeyResponse",
-});
-export const ListFederatedIdentityProvidersRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
-    projectId: S.String.pipe(T.Label()),
-    serviceAccountEmail: S.String.pipe(T.Label()),
-}).pipe(T.Http({
-    method: "GET",
-    uri: "/v2/projects/{projectId}/service-accounts/{serviceAccountEmail}/federations",
-    code: 200,
-    baseUrl: "https://service-account.api.stackit.cloud",
-}))).annotate({
-    identifier: "ListFederatedIdentityProvidersRequest",
-});
-export const FederatedListFederatedIdentityProvidersResponseResourcesList = /*@__PURE__*/ S.Array(FederatedIdentityProvider);
-export const FederatedListFederatedIdentityProvidersResponse = /*@__PURE__*/ S.suspend(() => S.Struct({
-    itemsPerPage: S.Number,
-    resources: FederatedListFederatedIdentityProvidersResponseResourcesList,
-    startIndex: S.Number,
-    totalResults: S.Number,
-})).annotate({
-    identifier: "FederatedListFederatedIdentityProvidersResponse",
-});
-export const ListServiceAccountKeysRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
-    projectId: S.String.pipe(T.Label()),
-    serviceAccountEmail: S.String.pipe(T.Label()),
-}).pipe(T.Http({
-    method: "GET",
-    uri: "/v2/projects/{projectId}/service-accounts/{serviceAccountEmail}/keys",
-    code: 200,
-    baseUrl: "https://service-account.api.stackit.cloud",
-}))).annotate({
-    identifier: "ListServiceAccountKeysRequest",
-});
-export const ServiceAccountKeyListResponseKeyAlgorithm = S.String;
-export const ServiceAccountKeyListResponseKeyOrigin = S.String;
-export const ServiceAccountKeyListResponseKeyType = S.String;
-export const ServiceAccountKeyListResponse = /*@__PURE__*/ S.suspend(() => S.Struct({
-    active: S.Boolean,
-    createdAt: S.String,
-    id: S.String,
-    keyAlgorithm: ServiceAccountKeyListResponseKeyAlgorithm,
-    keyOrigin: ServiceAccountKeyListResponseKeyOrigin,
-    keyType: ServiceAccountKeyListResponseKeyType,
-    validUntil: S.optional(S.String),
-})).annotate({
-    identifier: "ServiceAccountKeyListResponse",
-});
-export const ListServiceAccountKeysResponseItemsList = /*@__PURE__*/ S.Array(ServiceAccountKeyListResponse);
-export const ListServiceAccountKeysResponse = /*@__PURE__*/ S.suspend(() => S.Struct({
-    items: ListServiceAccountKeysResponseItemsList,
-})).annotate({
-    identifier: "ListServiceAccountKeysResponse",
-});
-export const ListServiceAccountsRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
-    projectId: S.String.pipe(T.Label()),
-}).pipe(T.Http({
-    method: "GET",
-    uri: "/v2/projects/{projectId}/service-accounts",
-    code: 200,
-    baseUrl: "https://service-account.api.stackit.cloud",
-}))).annotate({
-    identifier: "ListServiceAccountsRequest",
-});
-export const ListServiceAccountsResponseItemsList = /*@__PURE__*/ S.Array(ServiceAccount2);
-export const ListServiceAccountsResponse = /*@__PURE__*/ S.suspend(() => S.Struct({
-    items: ListServiceAccountsResponseItemsList,
-})).annotate({
-    identifier: "ListServiceAccountsResponse",
-});
-export const PartialUpdateServiceAccountFederatedIdentityProviderRequestAssertionsItem = CreateFederatedIdentityProviderRequestAssertionsItem;
-export const PartialUpdateServiceAccountFederatedIdentityProviderRequestAssertionsList = 
-/*@__PURE__*/ S.Array(CreateFederatedIdentityProviderRequestAssertionsItem);
-export const PartialUpdateServiceAccountFederatedIdentityProviderRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
-    projectId: S.String.pipe(T.Label()),
-    serviceAccountEmail: S.String.pipe(T.Label()),
-    federationId: S.String.pipe(T.Label()),
-    assertions: S.optional(PartialUpdateServiceAccountFederatedIdentityProviderRequestAssertionsList),
-    issuer: S.String,
-    name: S.String,
-}).pipe(T.Http({
-    method: "PATCH",
-    uri: "/v2/projects/{projectId}/service-accounts/{serviceAccountEmail}/federations/{federationId}",
-    code: 200,
-    baseUrl: "https://service-account.api.stackit.cloud",
-}))).annotate({
-    identifier: "PartialUpdateServiceAccountFederatedIdentityProviderRequest",
-});
-export const PartialUpdateServiceAccountKeyRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
-    projectId: S.String.pipe(T.Label()),
-    serviceAccountEmail: S.String.pipe(T.Label()),
-    keyId: S.String.pipe(T.Label()),
-    active: S.optional(S.Boolean),
-    validUntil: S.optional(S.String),
-}).pipe(T.Http({
-    method: "PATCH",
-    uri: "/v2/projects/{projectId}/service-accounts/{serviceAccountEmail}/keys/{keyId}",
-    code: 200,
-    baseUrl: "https://service-account.api.stackit.cloud",
-}))).annotate({
-    identifier: "PartialUpdateServiceAccountKeyRequest",
-});
-export const PartialUpdateServiceAccountKeyResponseKeyAlgorithm = S.String;
-export const PartialUpdateServiceAccountKeyResponseKeyOrigin = S.String;
-export const PartialUpdateServiceAccountKeyResponseKeyType = S.String;
-export const PartialUpdateServiceAccountKeyResponse = /*@__PURE__*/ S.suspend(() => S.Struct({
-    active: S.Boolean,
-    createdAt: S.String,
-    id: S.String,
-    keyAlgorithm: PartialUpdateServiceAccountKeyResponseKeyAlgorithm,
-    keyOrigin: PartialUpdateServiceAccountKeyResponseKeyOrigin,
-    keyType: PartialUpdateServiceAccountKeyResponseKeyType,
-    validUntil: S.optional(S.String),
-})).annotate({
-    identifier: "PartialUpdateServiceAccountKeyResponse",
-});
-/** Create a new Federated Identity Provider Federate the service account with an identity provider. */
-export const createFederatedIdentityProvider = /*@__PURE__*/ API.make(() => ({
-    input: CreateFederatedIdentityProviderRequest,
-    output: FederatedIdentityProvider,
-    errors: [BadRequest, Forbidden, Conflict, UnknownStackitError],
-    protocol: StackitProtocol,
-    retry: Retry.Retry,
-}));
-/** Create a new Service Account Create a new Service Account in a project. The service account only resides in the project, and initially has no roles or permissions on any resources. After creation, the service account can be assigned to this project, other projects in the parent organization or to the parent organization. */
-export const createServiceAccount = /*@__PURE__*/ API.make(() => ({
-    input: CreateServiceAccountRequest,
-    output: ServiceAccount2,
-    errors: [BadRequest, Forbidden, Conflict, UnknownStackitError],
-    protocol: StackitProtocol,
-    retry: Retry.Retry,
-}));
-/** Create a new Service Account key Create a new key to the service account. You can generate an RSA keypair, and post the PUBLIC part of the keypair, or leave empty, then the service will generate a pair. Maximum of 10 key can be added. A new key cannot be created using the same service account (authenticated using the short lived token of another key of the same service account). */
-export const createServiceAccountKey = /*@__PURE__*/ API.make(() => ({
-    input: CreateServiceAccountKeyRequest,
-    output: CreateServiceAccountKeyResponse,
-    errors: [BadRequest, Forbidden, Conflict, UnknownStackitError],
-    protocol: StackitProtocol,
-    retry: Retry.Retry,
-}));
-/** Request short lived API access token (OAUTH2). Request a short lived API access token with OAUTH2. Compatible with [Using JWTs as Authorization Grants](https://www.rfc-editor.org/rfc/rfc7523.html#section-2.1) You can request a token with a self signed token, or with a refresh token. */
-export const createShortLivedAccessToken = /*@__PURE__*/ API.make(() => ({
-    input: CreateShortLivedAccessTokenRequest,
-    output: CreateShortLivedAccessTokenResponse,
-    errors: [BadRequest, Forbidden, UnknownStackitError],
-    protocol: StackitProtocol,
-    retry: Retry.Retry,
-}));
-/** Delete Service Account Delete a Service Account. */
-export const deleteServiceAccount = /*@__PURE__*/ API.make(() => ({
-    input: DeleteServiceAccountRequest,
-    output: DeleteServiceAccountResponse,
-    errors: [BadRequest, Forbidden, NotFound, UnknownStackitError],
-    protocol: StackitProtocol,
-    retry: Retry.Retry,
-}));
-/** Delete a service account key Delete a key */
-export const deleteServiceAccountKey = /*@__PURE__*/ API.make(() => ({
-    input: DeleteServiceAccountKeyRequest,
-    output: DeleteServiceAccountKeyResponse,
-    errors: [BadRequest, Forbidden, UnknownStackitError],
-    protocol: StackitProtocol,
-    retry: Retry.Retry,
-}));
-/** Delete a service account Federated Identity Provider Delete a Federated Identity Provider */
-export const deleteServiceFederatedIdentityProvider = /*@__PURE__*/ API.make(() => ({
-    input: DeleteServiceFederatedIdentityProviderRequest,
-    output: DeleteServiceFederatedIdentityProviderResponse,
-    errors: [BadRequest, Forbidden, UnknownStackitError],
-    protocol: StackitProtocol,
-    retry: Retry.Retry,
-}));
-/** Get a service account Federated Identity Provider Get a Federated Identity Provider of the service account by its ID. */
-export const getFederatedIdentityProvider = /*@__PURE__*/ API.make(() => ({
-    input: GetFederatedIdentityProviderRequest,
-    output: FederatedIdentityProvider,
-    errors: [BadRequest, Forbidden, NotFound, UnknownStackitError],
-    protocol: StackitProtocol,
-    retry: Retry.Retry,
-}));
-/** Get JSON Web Key set of the service account Get JSON Web Key set of the service account */
-export const getJWKS = 
-/*@__PURE__*/ API.make(() => ({
-    input: GetJWKSRequest,
-    output: JWKS,
-    errors: [UnknownStackitError],
-    protocol: StackitProtocol,
-    retry: Retry.Retry,
-}));
-/** Get service account key details Get key details */
-export const getServiceAccountKey = /*@__PURE__*/ API.make(() => ({
-    input: GetServiceAccountKeyRequest,
-    output: GetServiceAccountKeyResponse,
-    errors: [BadRequest, Forbidden, UnknownStackitError],
-    protocol: StackitProtocol,
-    retry: Retry.Retry,
-}));
-/** List all federated identity providers List all the identity providers the service account is federated with. */
-export const listFederatedIdentityProviders = /*@__PURE__*/ API.make(() => ({
-    input: ListFederatedIdentityProvidersRequest,
-    output: FederatedListFederatedIdentityProvidersResponse,
-    errors: [BadRequest, Forbidden, UnknownStackitError],
-    protocol: StackitProtocol,
-    retry: Retry.Retry,
-}));
-/** List all keys that belong to the service account List all keys that belong to the service account */
-export const listServiceAccountKeys = /*@__PURE__*/ API.make(() => ({
-    input: ListServiceAccountKeysRequest,
-    output: ListServiceAccountKeysResponse,
-    errors: [BadRequest, Forbidden, UnknownStackitError],
-    protocol: StackitProtocol,
-    retry: Retry.Retry,
-}));
-/** List all Service Accounts List all Service Account resources in a project. Returns the service account resources, not the service accounts that has access to the project. */
-export const listServiceAccounts = /*@__PURE__*/ API.make(() => ({
-    input: ListServiceAccountsRequest,
-    output: ListServiceAccountsResponse,
-    errors: [BadRequest, Forbidden, UnknownStackitError],
-    protocol: StackitProtocol,
-    retry: Retry.Retry,
-}));
-/** Update Service Account Federated Identity Provider Update a Federated Identity Provider. */
-export const partialUpdateServiceAccountFederatedIdentityProvider = /*@__PURE__*/ API.make(() => ({
-    input: PartialUpdateServiceAccountFederatedIdentityProviderRequest,
-    output: FederatedIdentityProvider,
-    errors: [BadRequest, Forbidden, Conflict, UnknownStackitError],
-    protocol: StackitProtocol,
-    retry: Retry.Retry,
-}));
-/** Update Service Account key Update a key. You can activate or deactivate a key, or set/delete validUntil. The key cannot be updated using the same service account (authenticated using the short lived token of the key). */
-export const partialUpdateServiceAccountKey = /*@__PURE__*/ API.make(() => ({
-    input: PartialUpdateServiceAccountKeyRequest,
-    output: PartialUpdateServiceAccountKeyResponse,
-    errors: [BadRequest, Forbidden, Conflict, UnknownStackitError],
-    protocol: StackitProtocol,
-    retry: Retry.Retry,
-}));
-//# sourceMappingURL=service_account.js.map