@distilled.cloud/vercel 1.0.0-rc.7 → 1.0.0-rc.9

package/lib/services/kms.js

@@ -0,0 +1,982 @@
+// AUTO-GENERATED by scripts/generate.ts from .generated-specs (specs/spec-mirror-vercel/specs/openapi.json). Do not edit.
+import * as S from "@distilled.cloud/core/schema";
+import * as API from "@distilled.cloud/core/api";
+import * as C from "@distilled.cloud/core/category";
+import * as T from "../traits.js";
+import { VercelProtocol, } from "../protocol.js";
+import * as Retry from "../retry.js";
+export class BadRequest extends /*@__PURE__*/ /*@__PURE__*/ T.applyErrorMatchers(
+/*@__PURE__*/ S.TaggedError()("BadRequest", {
+    code: S.Number,
+    message: S.String,
+}).pipe(C.withBadRequestError), [{ status: 400 }]) {
+}
+export class Conflict extends /*@__PURE__*/ /*@__PURE__*/ T.applyErrorMatchers(
+/*@__PURE__*/ S.TaggedError()("Conflict", {
+    code: S.Number,
+    message: S.String,
+}).pipe(C.withConflictError), [{ status: 409 }]) {
+}
+export class Forbidden extends /*@__PURE__*/ /*@__PURE__*/ T.applyErrorMatchers(
+/*@__PURE__*/ S.TaggedError()("Forbidden", {
+    code: S.Number,
+    message: S.String,
+}).pipe(C.withAuthError), [{ status: 403 }]) {
+}
+export class NotFound extends /*@__PURE__*/ /*@__PURE__*/ T.applyErrorMatchers(
+/*@__PURE__*/ S.TaggedError()("NotFound", {
+    code: S.Number,
+    message: S.String,
+}).pipe(C.withBadRequestError), [{ status: 404 }]) {
+}
+export const ActivateKmsSigningKeyRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    issuerId: S.String.pipe(T.Label()),
+    keyId: S.String.pipe(T.Label()),
+    teamId: S.optional(S.String.pipe(T.Query())),
+    slug: S.optional(S.String.pipe(T.Query())),
+    revokePreviousAfterHours: S.optional(S.Number),
+}).pipe(T.Http({
+    method: "POST",
+    uri: "/v1/kms/issuers/{issuerId}/keys/{keyId}/activate",
+    code: 200,
+}))).annotate({
+    identifier: "ActivateKmsSigningKeyRequest",
+});
+export const ActivateKmsSigningKeyResponseStatus = /*@__PURE__*/ S.String;
+export const ActivateKmsSigningKeyResponsePublicKeyKeyOpsList = 
+/*@__PURE__*/ S.Array(S.String);
+export const ActivateKmsSigningKeyResponsePublicKeyX5cList = 
+/*@__PURE__*/ S.Array(S.String);
+export const ActivateKmsSigningKeyResponsePublicKey = /*@__PURE__*/ S.suspend(() => S.Struct({
+    kty: S.optional(S.String),
+    kid: S.optional(S.String),
+    alg: S.optional(S.String),
+    use: S.optional(S.String),
+    key_ops: S.optional(ActivateKmsSigningKeyResponsePublicKeyKeyOpsList),
+    x5c: S.optional(ActivateKmsSigningKeyResponsePublicKeyX5cList),
+    x5t_S256: S.optional(S.String.pipe(T.Body("x5t#S256"))),
+})).annotate({
+    identifier: "ActivateKmsSigningKeyResponsePublicKey",
+});
+export const ActivateKmsSigningKeyResponse = /*@__PURE__*/ S.suspend(() => S.Struct({
+    keyId: S.String,
+    importKeyId: S.optional(S.String),
+    issuerId: S.String,
+    algorithm: S.String,
+    status: ActivateKmsSigningKeyResponseStatus,
+    publicKey: S.optional(ActivateKmsSigningKeyResponsePublicKey),
+    publicKeyFingerprint: S.optional(S.String),
+    publicKeyPem: S.optional(S.String),
+    certificatePem: S.optional(S.String),
+    createdAt: S.String,
+    updatedAt: S.String,
+    revokeAt: S.optional(S.String),
+    activateAt: S.optional(S.String),
+    activatedAt: S.optional(S.String),
+})).annotate({
+    identifier: "ActivateKmsSigningKeyResponse",
+});
+export const CreateKmsIssuerRequestAlgorithm = /*@__PURE__*/ S.String;
+export const CreateKmsIssuerRequestClaimsSchemaMap = /*@__PURE__*/ S.Record(S.String, S.Unknown);
+export const CreateKmsIssuerRequestPolicyCase0Kind = /*@__PURE__*/ S.String;
+export const CreateKmsIssuerRequestPolicyCase0EnvironmentsList = 
+/*@__PURE__*/ S.Array(S.String);
+export const CreateKmsIssuerRequestPolicyCase0TokenClaimsMap = 
+/*@__PURE__*/ S.Record(S.String, S.Unknown);
+export const CreateKmsIssuerRequestPolicyCase0 = /*@__PURE__*/ S.suspend(() => S.Struct({
+    kind: CreateKmsIssuerRequestPolicyCase0Kind,
+    teamId: S.String,
+    projectId: S.String,
+    environments: CreateKmsIssuerRequestPolicyCase0EnvironmentsList,
+    tokenClaims: S.optional(CreateKmsIssuerRequestPolicyCase0TokenClaimsMap),
+})).annotate({
+    identifier: "CreateKmsIssuerRequestPolicyCase0",
+});
+export const CreateKmsIssuerRequestPolicyCase1Kind = /*@__PURE__*/ S.String;
+export const CreateKmsIssuerRequestPolicyCase1TokenClaimsMap = 
+/*@__PURE__*/ S.Record(S.String, S.Unknown);
+export const CreateKmsIssuerRequestPolicyCase1 = /*@__PURE__*/ S.suspend(() => S.Struct({
+    kind: CreateKmsIssuerRequestPolicyCase1Kind,
+    clientId: S.String,
+    tokenClaims: S.optional(CreateKmsIssuerRequestPolicyCase1TokenClaimsMap),
+})).annotate({
+    identifier: "CreateKmsIssuerRequestPolicyCase1",
+});
+export const CreateKmsIssuerRequestPolicy = 
+/*@__PURE__*/ S.Unknown;
+export const CreateKmsIssuerRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    teamId: S.optional(S.String.pipe(T.Query())),
+    slug: S.optional(S.String.pipe(T.Query())),
+    name: S.String,
+    algorithm: S.optional(CreateKmsIssuerRequestAlgorithm),
+    claimsSchema: S.optional(CreateKmsIssuerRequestClaimsSchemaMap),
+    policy: S.optional(CreateKmsIssuerRequestPolicy),
+    importKey: S.optional(S.String),
+    importKeyId: S.optional(S.String),
+}).pipe(T.Http({ method: "POST", uri: "/v1/kms/issuers", code: 200 }))).annotate({
+    identifier: "CreateKmsIssuerRequest",
+});
+export const CreateKmsIssuerResponseAlgorithm = /*@__PURE__*/ S.String;
+export const CreateKmsIssuerResponseOrigin = /*@__PURE__*/ S.String;
+export const CreateKmsIssuerResponseClaimsSchemaMap = /*@__PURE__*/ S.Record(S.String, S.Unknown);
+export const CreateKmsIssuerResponseSigningKeysItemStatus = 
+/*@__PURE__*/ S.String;
+export const CreateKmsIssuerResponseSigningKeysItemPublicKeyKeyOpsList = 
+/*@__PURE__*/ S.Array(S.String);
+export const CreateKmsIssuerResponseSigningKeysItemPublicKeyX5cList = 
+/*@__PURE__*/ S.Array(S.String);
+export const CreateKmsIssuerResponseSigningKeysItemPublicKey = 
+/*@__PURE__*/ S.suspend(() => S.Struct({
+    kty: S.optional(S.String),
+    kid: S.optional(S.String),
+    alg: S.optional(S.String),
+    use: S.optional(S.String),
+    key_ops: S.optional(CreateKmsIssuerResponseSigningKeysItemPublicKeyKeyOpsList),
+    x5c: S.optional(CreateKmsIssuerResponseSigningKeysItemPublicKeyX5cList),
+    x5t_S256: S.optional(S.String.pipe(T.Body("x5t#S256"))),
+})).annotate({
+    identifier: "CreateKmsIssuerResponseSigningKeysItemPublicKey",
+});
+export const CreateKmsIssuerResponseSigningKeysItem = /*@__PURE__*/ S.suspend(() => S.Struct({
+    keyId: S.String,
+    importKeyId: S.optional(S.String),
+    issuerId: S.String,
+    algorithm: S.String,
+    status: CreateKmsIssuerResponseSigningKeysItemStatus,
+    publicKey: S.optional(CreateKmsIssuerResponseSigningKeysItemPublicKey),
+    publicKeyFingerprint: S.optional(S.String),
+    publicKeyPem: S.optional(S.String),
+    certificatePem: S.optional(S.String),
+    createdAt: S.String,
+    updatedAt: S.String,
+    revokeAt: S.optional(S.String),
+    activateAt: S.optional(S.String),
+    activatedAt: S.optional(S.String),
+})).annotate({
+    identifier: "CreateKmsIssuerResponseSigningKeysItem",
+});
+export const CreateKmsIssuerResponseSigningKeysList = /*@__PURE__*/ S.Array(CreateKmsIssuerResponseSigningKeysItem);
+export const CreateKmsIssuerResponsePoliciesItemCase0Kind = 
+/*@__PURE__*/ S.String;
+export const CreateKmsIssuerResponsePoliciesItemCase0EnvironmentsList = 
+/*@__PURE__*/ S.Array(S.String);
+export const CreateKmsIssuerResponsePoliciesItemCase0TokenClaimsMap = 
+/*@__PURE__*/ S.Record(S.String, S.Unknown);
+export const CreateKmsIssuerResponsePoliciesItemCase0 = /*@__PURE__*/ S.suspend(() => S.Struct({
+    kind: CreateKmsIssuerResponsePoliciesItemCase0Kind,
+    teamId: S.String,
+    projectId: S.String,
+    environments: CreateKmsIssuerResponsePoliciesItemCase0EnvironmentsList,
+    tokenClaims: S.optional(CreateKmsIssuerResponsePoliciesItemCase0TokenClaimsMap),
+    createdAt: S.String,
+    updatedAt: S.String,
+})).annotate({
+    identifier: "CreateKmsIssuerResponsePoliciesItemCase0",
+});
+export const CreateKmsIssuerResponsePoliciesItemCase1Kind = 
+/*@__PURE__*/ S.String;
+export const CreateKmsIssuerResponsePoliciesItemCase1TokenClaimsMap = 
+/*@__PURE__*/ S.Record(S.String, S.Unknown);
+export const CreateKmsIssuerResponsePoliciesItemCase1 = /*@__PURE__*/ S.suspend(() => S.Struct({
+    kind: CreateKmsIssuerResponsePoliciesItemCase1Kind,
+    clientId: S.String,
+    tokenClaims: S.optional(CreateKmsIssuerResponsePoliciesItemCase1TokenClaimsMap),
+    createdAt: S.String,
+    updatedAt: S.String,
+})).annotate({
+    identifier: "CreateKmsIssuerResponsePoliciesItemCase1",
+});
+export const CreateKmsIssuerResponsePoliciesItem = 
+/*@__PURE__*/ S.Unknown;
+export const CreateKmsIssuerResponsePoliciesList = /*@__PURE__*/ S.Array(CreateKmsIssuerResponsePoliciesItem);
+export const CreateKmsIssuerResponse = /*@__PURE__*/ S.suspend(() => S.Struct({
+    id: S.String,
+    ownerId: S.String,
+    name: S.String,
+    algorithm: CreateKmsIssuerResponseAlgorithm,
+    origin: CreateKmsIssuerResponseOrigin,
+    managedBy: S.optional(S.String),
+    claimsSchema: S.optional(CreateKmsIssuerResponseClaimsSchemaMap),
+    createdAt: S.String,
+    updatedAt: S.String,
+    signingKeys: CreateKmsIssuerResponseSigningKeysList,
+    policies: CreateKmsIssuerResponsePoliciesList,
+})).annotate({
+    identifier: "CreateKmsIssuerResponse",
+});
+export const CreateKmsIssuerPolicyRequestKind = /*@__PURE__*/ S.String;
+export const CreateKmsIssuerPolicyRequestEnvironmentsList = 
+/*@__PURE__*/ S.Array(S.String);
+export const CreateKmsIssuerPolicyRequestTokenClaimsMap = 
+/*@__PURE__*/ S.Record(S.String, S.Unknown);
+export const CreateKmsIssuerPolicyRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    issuerId: S.String.pipe(T.Label()),
+    teamId: S.optional(S.String.pipe(T.Query())),
+    slug: S.optional(S.String.pipe(T.Query())),
+    kind: CreateKmsIssuerPolicyRequestKind,
+    projectId: S.String,
+    environments: CreateKmsIssuerPolicyRequestEnvironmentsList,
+    tokenClaims: S.optional(CreateKmsIssuerPolicyRequestTokenClaimsMap),
+}).pipe(T.Http({
+    method: "POST",
+    uri: "/v1/kms/issuers/{issuerId}/policies",
+    code: 200,
+}))).annotate({
+    identifier: "CreateKmsIssuerPolicyRequest",
+});
+export const CreateKmsIssuerPolicyResponseBodyCase0Kind = 
+/*@__PURE__*/ S.String;
+export const CreateKmsIssuerPolicyResponseBodyCase0EnvironmentsList = 
+/*@__PURE__*/ S.Array(S.String);
+export const CreateKmsIssuerPolicyResponseBodyCase0TokenClaimsMap = 
+/*@__PURE__*/ S.Record(S.String, S.Unknown);
+export const CreateKmsIssuerPolicyResponseBodyCase0 = /*@__PURE__*/ S.suspend(() => S.Struct({
+    kind: CreateKmsIssuerPolicyResponseBodyCase0Kind,
+    teamId: S.String,
+    projectId: S.String,
+    environments: CreateKmsIssuerPolicyResponseBodyCase0EnvironmentsList,
+    tokenClaims: S.optional(CreateKmsIssuerPolicyResponseBodyCase0TokenClaimsMap),
+    createdAt: S.String,
+    updatedAt: S.String,
+})).annotate({
+    identifier: "CreateKmsIssuerPolicyResponseBodyCase0",
+});
+export const CreateKmsIssuerPolicyResponseBodyCase1Kind = 
+/*@__PURE__*/ S.String;
+export const CreateKmsIssuerPolicyResponseBodyCase1TokenClaimsMap = 
+/*@__PURE__*/ S.Record(S.String, S.Unknown);
+export const CreateKmsIssuerPolicyResponseBodyCase1 = /*@__PURE__*/ S.suspend(() => S.Struct({
+    kind: CreateKmsIssuerPolicyResponseBodyCase1Kind,
+    clientId: S.String,
+    tokenClaims: S.optional(CreateKmsIssuerPolicyResponseBodyCase1TokenClaimsMap),
+    createdAt: S.String,
+    updatedAt: S.String,
+})).annotate({
+    identifier: "CreateKmsIssuerPolicyResponseBodyCase1",
+});
+export const CreateKmsIssuerPolicyResponseBody = 
+/*@__PURE__*/ S.Unknown;
+export const CreateKmsIssuerPolicyResponse = /*@__PURE__*/ S.suspend(() => CreateKmsIssuerPolicyResponseBody.pipe(T.RawResponseRoot())).annotate({
+    identifier: "CreateKmsIssuerPolicyResponse",
+});
+export const CreateKmsSigningKeyRequestActivation = /*@__PURE__*/ S.String;
+export const CreateKmsSigningKeyRequestRevokePreviousAt = 
+/*@__PURE__*/ S.Unknown;
+export const CreateKmsSigningKeyRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    issuerId: S.String.pipe(T.Label()),
+    teamId: S.optional(S.String.pipe(T.Query())),
+    slug: S.optional(S.String.pipe(T.Query())),
+    activation: S.optional(CreateKmsSigningKeyRequestActivation),
+    revokePreviousAfterHours: S.optional(S.Number),
+    revokePreviousAt: S.optional(CreateKmsSigningKeyRequestRevokePreviousAt),
+    importKey: S.optional(S.String),
+    importKeyId: S.optional(S.String),
+}).pipe(T.Http({
+    method: "POST",
+    uri: "/v1/kms/issuers/{issuerId}/keys",
+    code: 200,
+}))).annotate({
+    identifier: "CreateKmsSigningKeyRequest",
+});
+export const CreateKmsSigningKeyResponseStatus = /*@__PURE__*/ S.String;
+export const CreateKmsSigningKeyResponsePublicKeyKeyOpsList = 
+/*@__PURE__*/ S.Array(S.String);
+export const CreateKmsSigningKeyResponsePublicKeyX5cList = 
+/*@__PURE__*/ S.Array(S.String);
+export const CreateKmsSigningKeyResponsePublicKey = /*@__PURE__*/ S.suspend(() => S.Struct({
+    kty: S.optional(S.String),
+    kid: S.optional(S.String),
+    alg: S.optional(S.String),
+    use: S.optional(S.String),
+    key_ops: S.optional(CreateKmsSigningKeyResponsePublicKeyKeyOpsList),
+    x5c: S.optional(CreateKmsSigningKeyResponsePublicKeyX5cList),
+    x5t_S256: S.optional(S.String.pipe(T.Body("x5t#S256"))),
+})).annotate({
+    identifier: "CreateKmsSigningKeyResponsePublicKey",
+});
+export const CreateKmsSigningKeyResponse = /*@__PURE__*/ S.suspend(() => S.Struct({
+    keyId: S.String,
+    importKeyId: S.optional(S.String),
+    issuerId: S.String,
+    algorithm: S.String,
+    status: CreateKmsSigningKeyResponseStatus,
+    publicKey: S.optional(CreateKmsSigningKeyResponsePublicKey),
+    publicKeyFingerprint: S.optional(S.String),
+    publicKeyPem: S.optional(S.String),
+    certificatePem: S.optional(S.String),
+    createdAt: S.String,
+    updatedAt: S.String,
+    revokeAt: S.optional(S.String),
+    activateAt: S.optional(S.String),
+    activatedAt: S.optional(S.String),
+})).annotate({
+    identifier: "CreateKmsSigningKeyResponse",
+});
+export const DeleteKmsIssuerRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    issuerId: S.String.pipe(T.Label()),
+    teamId: S.optional(S.String.pipe(T.Query())),
+    slug: S.optional(S.String.pipe(T.Query())),
+}).pipe(T.Http({ method: "DELETE", uri: "/v1/kms/issuers/{issuerId}", code: 200 }))).annotate({
+    identifier: "DeleteKmsIssuerRequest",
+});
+export const DeleteKmsIssuerResponse = /*@__PURE__*/ S.suspend(() => S.Struct({})).annotate({
+    identifier: "DeleteKmsIssuerResponse",
+});
+export const DeleteKmsIssuerPolicyRequestKind = /*@__PURE__*/ S.String;
+export const DeleteKmsIssuerPolicyRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    issuerId: S.String.pipe(T.Label()),
+    kind: DeleteKmsIssuerPolicyRequestKind.pipe(T.Label()),
+    policyKey: S.String.pipe(T.Label()),
+    teamId: S.optional(S.String.pipe(T.Query())),
+    slug: S.optional(S.String.pipe(T.Query())),
+}).pipe(T.Http({
+    method: "DELETE",
+    uri: "/v1/kms/issuers/{issuerId}/policies/{kind}/{policyKey}",
+    code: 200,
+}))).annotate({
+    identifier: "DeleteKmsIssuerPolicyRequest",
+});
+export const DeleteKmsIssuerPolicyResponse = /*@__PURE__*/ S.suspend(() => S.Struct({})).annotate({
+    identifier: "DeleteKmsIssuerPolicyResponse",
+});
+export const GetKmsIssuerRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    issuerId: S.String.pipe(T.Label()),
+    teamId: S.optional(S.String.pipe(T.Query())),
+    slug: S.optional(S.String.pipe(T.Query())),
+}).pipe(T.Http({ method: "GET", uri: "/v1/kms/issuers/{issuerId}", code: 200 }))).annotate({
+    identifier: "GetKmsIssuerRequest",
+});
+export const GetKmsIssuerResponseAlgorithm = /*@__PURE__*/ S.String;
+export const GetKmsIssuerResponseOrigin = /*@__PURE__*/ S.String;
+export const GetKmsIssuerResponseClaimsSchemaMap = /*@__PURE__*/ S.Record(S.String, S.Unknown);
+export const GetKmsIssuerResponseSigningKeysItemStatus = /*@__PURE__*/ S.String;
+export const GetKmsIssuerResponseSigningKeysItemPublicKeyKeyOpsList = 
+/*@__PURE__*/ S.Array(S.String);
+export const GetKmsIssuerResponseSigningKeysItemPublicKeyX5cList = 
+/*@__PURE__*/ S.Array(S.String);
+export const GetKmsIssuerResponseSigningKeysItemPublicKey = 
+/*@__PURE__*/ S.suspend(() => S.Struct({
+    kty: S.optional(S.String),
+    kid: S.optional(S.String),
+    alg: S.optional(S.String),
+    use: S.optional(S.String),
+    key_ops: S.optional(GetKmsIssuerResponseSigningKeysItemPublicKeyKeyOpsList),
+    x5c: S.optional(GetKmsIssuerResponseSigningKeysItemPublicKeyX5cList),
+    x5t_S256: S.optional(S.String.pipe(T.Body("x5t#S256"))),
+})).annotate({
+    identifier: "GetKmsIssuerResponseSigningKeysItemPublicKey",
+});
+export const GetKmsIssuerResponseSigningKeysItem = /*@__PURE__*/ S.suspend(() => S.Struct({
+    keyId: S.String,
+    importKeyId: S.optional(S.String),
+    issuerId: S.String,
+    algorithm: S.String,
+    status: GetKmsIssuerResponseSigningKeysItemStatus,
+    publicKey: S.optional(GetKmsIssuerResponseSigningKeysItemPublicKey),
+    publicKeyFingerprint: S.optional(S.String),
+    publicKeyPem: S.optional(S.String),
+    certificatePem: S.optional(S.String),
+    createdAt: S.String,
+    updatedAt: S.String,
+    revokeAt: S.optional(S.String),
+    activateAt: S.optional(S.String),
+    activatedAt: S.optional(S.String),
+})).annotate({
+    identifier: "GetKmsIssuerResponseSigningKeysItem",
+});
+export const GetKmsIssuerResponseSigningKeysList = /*@__PURE__*/ S.Array(GetKmsIssuerResponseSigningKeysItem);
+export const GetKmsIssuerResponsePoliciesItemCase0Kind = /*@__PURE__*/ S.String;
+export const GetKmsIssuerResponsePoliciesItemCase0EnvironmentsList = 
+/*@__PURE__*/ S.Array(S.String);
+export const GetKmsIssuerResponsePoliciesItemCase0TokenClaimsMap = 
+/*@__PURE__*/ S.Record(S.String, S.Unknown);
+export const GetKmsIssuerResponsePoliciesItemCase0 = /*@__PURE__*/ S.suspend(() => S.Struct({
+    kind: GetKmsIssuerResponsePoliciesItemCase0Kind,
+    teamId: S.String,
+    projectId: S.String,
+    environments: GetKmsIssuerResponsePoliciesItemCase0EnvironmentsList,
+    tokenClaims: S.optional(GetKmsIssuerResponsePoliciesItemCase0TokenClaimsMap),
+    createdAt: S.String,
+    updatedAt: S.String,
+})).annotate({
+    identifier: "GetKmsIssuerResponsePoliciesItemCase0",
+});
+export const GetKmsIssuerResponsePoliciesItemCase1Kind = /*@__PURE__*/ S.String;
+export const GetKmsIssuerResponsePoliciesItemCase1TokenClaimsMap = 
+/*@__PURE__*/ S.Record(S.String, S.Unknown);
+export const GetKmsIssuerResponsePoliciesItemCase1 = /*@__PURE__*/ S.suspend(() => S.Struct({
+    kind: GetKmsIssuerResponsePoliciesItemCase1Kind,
+    clientId: S.String,
+    tokenClaims: S.optional(GetKmsIssuerResponsePoliciesItemCase1TokenClaimsMap),
+    createdAt: S.String,
+    updatedAt: S.String,
+})).annotate({
+    identifier: "GetKmsIssuerResponsePoliciesItemCase1",
+});
+export const GetKmsIssuerResponsePoliciesItem = 
+/*@__PURE__*/ S.Unknown;
+export const GetKmsIssuerResponsePoliciesList = /*@__PURE__*/ S.Array(GetKmsIssuerResponsePoliciesItem);
+export const GetKmsIssuerResponse = /*@__PURE__*/ S.suspend(() => S.Struct({
+    id: S.String,
+    ownerId: S.String,
+    name: S.String,
+    algorithm: GetKmsIssuerResponseAlgorithm,
+    origin: GetKmsIssuerResponseOrigin,
+    managedBy: S.optional(S.String),
+    claimsSchema: S.optional(GetKmsIssuerResponseClaimsSchemaMap),
+    createdAt: S.String,
+    updatedAt: S.String,
+    signingKeys: GetKmsIssuerResponseSigningKeysList,
+    policies: GetKmsIssuerResponsePoliciesList,
+})).annotate({
+    identifier: "GetKmsIssuerResponse",
+});
+export const ListKmsIssuersRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    limit: S.optional(S.Number.pipe(T.Query())),
+    next: S.optional(S.String.pipe(T.Query())),
+    teamId: S.optional(S.String.pipe(T.Query())),
+    slug: S.optional(S.String.pipe(T.Query())),
+}).pipe(T.Http({ method: "GET", uri: "/v1/kms/issuers", code: 200 }))).annotate({
+    identifier: "ListKmsIssuersRequest",
+});
+export const ListKmsIssuersResponseIssuersItemAlgorithm = 
+/*@__PURE__*/ S.String;
+export const ListKmsIssuersResponseIssuersItemOrigin = /*@__PURE__*/ S.String;
+export const ListKmsIssuersResponseIssuersItemClaimsSchemaMap = 
+/*@__PURE__*/ S.Record(S.String, S.Unknown);
+export const ListKmsIssuersResponseIssuersItemSigningKeysItemStatus = 
+/*@__PURE__*/ S.String;
+export const ListKmsIssuersResponseIssuersItemSigningKeysItemPublicKeyKeyOpsList = 
+/*@__PURE__*/ S.Array(S.String);
+export const ListKmsIssuersResponseIssuersItemSigningKeysItemPublicKeyX5cList = 
+/*@__PURE__*/ S.Array(S.String);
+export const ListKmsIssuersResponseIssuersItemSigningKeysItemPublicKey = 
+/*@__PURE__*/ S.suspend(() => S.Struct({
+    kty: S.optional(S.String),
+    kid: S.optional(S.String),
+    alg: S.optional(S.String),
+    use: S.optional(S.String),
+    key_ops: S.optional(ListKmsIssuersResponseIssuersItemSigningKeysItemPublicKeyKeyOpsList),
+    x5c: S.optional(ListKmsIssuersResponseIssuersItemSigningKeysItemPublicKeyX5cList),
+    x5t_S256: S.optional(S.String.pipe(T.Body("x5t#S256"))),
+})).annotate({
+    identifier: "ListKmsIssuersResponseIssuersItemSigningKeysItemPublicKey",
+});
+export const ListKmsIssuersResponseIssuersItemSigningKeysItem = 
+/*@__PURE__*/ S.suspend(() => S.Struct({
+    keyId: S.String,
+    importKeyId: S.optional(S.String),
+    issuerId: S.String,
+    algorithm: S.String,
+    status: ListKmsIssuersResponseIssuersItemSigningKeysItemStatus,
+    publicKey: S.optional(ListKmsIssuersResponseIssuersItemSigningKeysItemPublicKey),
+    publicKeyFingerprint: S.optional(S.String),
+    publicKeyPem: S.optional(S.String),
+    certificatePem: S.optional(S.String),
+    createdAt: S.String,
+    updatedAt: S.String,
+    revokeAt: S.optional(S.String),
+    activateAt: S.optional(S.String),
+    activatedAt: S.optional(S.String),
+})).annotate({
+    identifier: "ListKmsIssuersResponseIssuersItemSigningKeysItem",
+});
+export const ListKmsIssuersResponseIssuersItemSigningKeysList = 
+/*@__PURE__*/ S.Array(ListKmsIssuersResponseIssuersItemSigningKeysItem);
+export const ListKmsIssuersResponseIssuersItemPoliciesItemCase0Kind = 
+/*@__PURE__*/ S.String;
+export const ListKmsIssuersResponseIssuersItemPoliciesItemCase0EnvironmentsList = 
+/*@__PURE__*/ S.Array(S.String);
+export const ListKmsIssuersResponseIssuersItemPoliciesItemCase0TokenClaimsMap = 
+/*@__PURE__*/ S.Record(S.String, S.Unknown);
+export const ListKmsIssuersResponseIssuersItemPoliciesItemCase0 = 
+/*@__PURE__*/ S.suspend(() => S.Struct({
+    kind: ListKmsIssuersResponseIssuersItemPoliciesItemCase0Kind,
+    teamId: S.String,
+    projectId: S.String,
+    environments: ListKmsIssuersResponseIssuersItemPoliciesItemCase0EnvironmentsList,
+    tokenClaims: S.optional(ListKmsIssuersResponseIssuersItemPoliciesItemCase0TokenClaimsMap),
+    createdAt: S.String,
+    updatedAt: S.String,
+})).annotate({
+    identifier: "ListKmsIssuersResponseIssuersItemPoliciesItemCase0",
+});
+export const ListKmsIssuersResponseIssuersItemPoliciesItemCase1Kind = 
+/*@__PURE__*/ S.String;
+export const ListKmsIssuersResponseIssuersItemPoliciesItemCase1TokenClaimsMap = 
+/*@__PURE__*/ S.Record(S.String, S.Unknown);
+export const ListKmsIssuersResponseIssuersItemPoliciesItemCase1 = 
+/*@__PURE__*/ S.suspend(() => S.Struct({
+    kind: ListKmsIssuersResponseIssuersItemPoliciesItemCase1Kind,
+    clientId: S.String,
+    tokenClaims: S.optional(ListKmsIssuersResponseIssuersItemPoliciesItemCase1TokenClaimsMap),
+    createdAt: S.String,
+    updatedAt: S.String,
+})).annotate({
+    identifier: "ListKmsIssuersResponseIssuersItemPoliciesItemCase1",
+});
+export const ListKmsIssuersResponseIssuersItemPoliciesItem = 
+/*@__PURE__*/ S.Unknown;
+export const ListKmsIssuersResponseIssuersItemPoliciesList = 
+/*@__PURE__*/ S.Array(ListKmsIssuersResponseIssuersItemPoliciesItem);
+export const ListKmsIssuersResponseIssuersItem = /*@__PURE__*/ S.suspend(() => S.Struct({
+    id: S.String,
+    ownerId: S.String,
+    name: S.String,
+    algorithm: ListKmsIssuersResponseIssuersItemAlgorithm,
+    origin: ListKmsIssuersResponseIssuersItemOrigin,
+    managedBy: S.optional(S.String),
+    claimsSchema: S.optional(ListKmsIssuersResponseIssuersItemClaimsSchemaMap),
+    createdAt: S.String,
+    updatedAt: S.String,
+    signingKeys: ListKmsIssuersResponseIssuersItemSigningKeysList,
+    policies: ListKmsIssuersResponseIssuersItemPoliciesList,
+})).annotate({
+    identifier: "ListKmsIssuersResponseIssuersItem",
+});
+export const ListKmsIssuersResponseIssuersList = /*@__PURE__*/ S.Array(ListKmsIssuersResponseIssuersItem);
+export const ListKmsIssuersResponsePagination = /*@__PURE__*/ S.suspend(() => S.Struct({
+    count: S.Number,
+    next: S.NullOr(S.String),
+})).annotate({
+    identifier: "ListKmsIssuersResponsePagination",
+});
+export const ListKmsIssuersResponse = /*@__PURE__*/ S.suspend(() => S.Struct({
+    issuers: ListKmsIssuersResponseIssuersList,
+    pagination: ListKmsIssuersResponsePagination,
+})).annotate({
+    identifier: "ListKmsIssuersResponse",
+});
+export const RevokeKmsSigningKeyRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    issuerId: S.String.pipe(T.Label()),
+    keyId: S.String.pipe(T.Label()),
+    teamId: S.optional(S.String.pipe(T.Query())),
+    slug: S.optional(S.String.pipe(T.Query())),
+}).pipe(T.Http({
+    method: "POST",
+    uri: "/v1/kms/issuers/{issuerId}/keys/{keyId}/revoke",
+    code: 200,
+}))).annotate({
+    identifier: "RevokeKmsSigningKeyRequest",
+});
+export const RevokeKmsSigningKeyResponseAlgorithm = /*@__PURE__*/ S.String;
+export const RevokeKmsSigningKeyResponseOrigin = /*@__PURE__*/ S.String;
+export const RevokeKmsSigningKeyResponseClaimsSchemaMap = 
+/*@__PURE__*/ S.Record(S.String, S.Unknown);
+export const RevokeKmsSigningKeyResponseSigningKeysItemStatus = 
+/*@__PURE__*/ S.String;
+export const RevokeKmsSigningKeyResponseSigningKeysItemPublicKeyKeyOpsList = 
+/*@__PURE__*/ S.Array(S.String);
+export const RevokeKmsSigningKeyResponseSigningKeysItemPublicKeyX5cList = 
+/*@__PURE__*/ S.Array(S.String);
+export const RevokeKmsSigningKeyResponseSigningKeysItemPublicKey = 
+/*@__PURE__*/ S.suspend(() => S.Struct({
+    kty: S.optional(S.String),
+    kid: S.optional(S.String),
+    alg: S.optional(S.String),
+    use: S.optional(S.String),
+    key_ops: S.optional(RevokeKmsSigningKeyResponseSigningKeysItemPublicKeyKeyOpsList),
+    x5c: S.optional(RevokeKmsSigningKeyResponseSigningKeysItemPublicKeyX5cList),
+    x5t_S256: S.optional(S.String.pipe(T.Body("x5t#S256"))),
+})).annotate({
+    identifier: "RevokeKmsSigningKeyResponseSigningKeysItemPublicKey",
+});
+export const RevokeKmsSigningKeyResponseSigningKeysItem = 
+/*@__PURE__*/ S.suspend(() => S.Struct({
+    keyId: S.String,
+    importKeyId: S.optional(S.String),
+    issuerId: S.String,
+    algorithm: S.String,
+    status: RevokeKmsSigningKeyResponseSigningKeysItemStatus,
+    publicKey: S.optional(RevokeKmsSigningKeyResponseSigningKeysItemPublicKey),
+    publicKeyFingerprint: S.optional(S.String),
+    publicKeyPem: S.optional(S.String),
+    certificatePem: S.optional(S.String),
+    createdAt: S.String,
+    updatedAt: S.String,
+    revokeAt: S.optional(S.String),
+    activateAt: S.optional(S.String),
+    activatedAt: S.optional(S.String),
+})).annotate({
+    identifier: "RevokeKmsSigningKeyResponseSigningKeysItem",
+});
+export const RevokeKmsSigningKeyResponseSigningKeysList = /*@__PURE__*/ S.Array(RevokeKmsSigningKeyResponseSigningKeysItem);
+export const RevokeKmsSigningKeyResponsePoliciesItemCase0Kind = 
+/*@__PURE__*/ S.String;
+export const RevokeKmsSigningKeyResponsePoliciesItemCase0EnvironmentsList = 
+/*@__PURE__*/ S.Array(S.String);
+export const RevokeKmsSigningKeyResponsePoliciesItemCase0TokenClaimsMap = 
+/*@__PURE__*/ S.Record(S.String, S.Unknown);
+export const RevokeKmsSigningKeyResponsePoliciesItemCase0 = 
+/*@__PURE__*/ S.suspend(() => S.Struct({
+    kind: RevokeKmsSigningKeyResponsePoliciesItemCase0Kind,
+    teamId: S.String,
+    projectId: S.String,
+    environments: RevokeKmsSigningKeyResponsePoliciesItemCase0EnvironmentsList,
+    tokenClaims: S.optional(RevokeKmsSigningKeyResponsePoliciesItemCase0TokenClaimsMap),
+    createdAt: S.String,
+    updatedAt: S.String,
+})).annotate({
+    identifier: "RevokeKmsSigningKeyResponsePoliciesItemCase0",
+});
+export const RevokeKmsSigningKeyResponsePoliciesItemCase1Kind = 
+/*@__PURE__*/ S.String;
+export const RevokeKmsSigningKeyResponsePoliciesItemCase1TokenClaimsMap = 
+/*@__PURE__*/ S.Record(S.String, S.Unknown);
+export const RevokeKmsSigningKeyResponsePoliciesItemCase1 = 
+/*@__PURE__*/ S.suspend(() => S.Struct({
+    kind: RevokeKmsSigningKeyResponsePoliciesItemCase1Kind,
+    clientId: S.String,
+    tokenClaims: S.optional(RevokeKmsSigningKeyResponsePoliciesItemCase1TokenClaimsMap),
+    createdAt: S.String,
+    updatedAt: S.String,
+})).annotate({
+    identifier: "RevokeKmsSigningKeyResponsePoliciesItemCase1",
+});
+export const RevokeKmsSigningKeyResponsePoliciesItem = 
+/*@__PURE__*/ S.Unknown;
+export const RevokeKmsSigningKeyResponsePoliciesList = /*@__PURE__*/ S.Array(RevokeKmsSigningKeyResponsePoliciesItem);
+export const RevokeKmsSigningKeyResponse = /*@__PURE__*/ S.suspend(() => S.Struct({
+    id: S.String,
+    ownerId: S.String,
+    name: S.String,
+    algorithm: RevokeKmsSigningKeyResponseAlgorithm,
+    origin: RevokeKmsSigningKeyResponseOrigin,
+    managedBy: S.optional(S.String),
+    claimsSchema: S.optional(RevokeKmsSigningKeyResponseClaimsSchemaMap),
+    createdAt: S.String,
+    updatedAt: S.String,
+    signingKeys: RevokeKmsSigningKeyResponseSigningKeysList,
+    policies: RevokeKmsSigningKeyResponsePoliciesList,
+})).annotate({
+    identifier: "RevokeKmsSigningKeyResponse",
+});
+export const SignKmsMessageRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    issuerId: S.String.pipe(T.Label()),
+    message: S.String,
+}).pipe(T.Http({
+    method: "POST",
+    uri: "/v1/kms/issuers/{issuerId}/sign/message",
+    code: 200,
+}))).annotate({
+    identifier: "SignKmsMessageRequest",
+});
+export const SignKmsMessageResponseSignatureHeaderCritList = 
+/*@__PURE__*/ S.Array(S.String);
+export const SignKmsMessageResponseSignatureHeaderX5cList = 
+/*@__PURE__*/ S.Array(S.String);
+export const SignKmsMessageResponseSignatureHeaderJwk = /*@__PURE__*/ S.suspend(() => S.Struct({
+    n: S.optional(S.String),
+    e: S.optional(S.String),
+    kty: S.optional(S.String),
+    crv: S.optional(S.String),
+    x: S.optional(S.String),
+    y: S.optional(S.String),
+    alg: S.optional(S.String),
+    pub: S.optional(S.String),
+})).annotate({
+    identifier: "SignKmsMessageResponseSignatureHeaderJwk",
+});
+export const SignKmsMessageResponseSignatureHeader = /*@__PURE__*/ S.suspend(() => S.Struct({
+    alg: S.optional(S.String),
+    b64: S.optional(S.Boolean),
+    crit: S.optional(SignKmsMessageResponseSignatureHeaderCritList),
+    kid: S.optional(S.String),
+    x5t: S.optional(S.String),
+    x5c: S.optional(SignKmsMessageResponseSignatureHeaderX5cList),
+    x5u: S.optional(S.String),
+    jku: S.optional(S.String),
+    jwk: S.optional(SignKmsMessageResponseSignatureHeaderJwk),
+    typ: S.optional(S.String),
+    cty: S.optional(S.String),
+})).annotate({
+    identifier: "SignKmsMessageResponseSignatureHeader",
+});
+export const SignKmsMessageResponseSignature = /*@__PURE__*/ S.suspend(() => S.Struct({
+    payload: S.String,
+    signature: S.String,
+    header: S.optional(SignKmsMessageResponseSignatureHeader),
+    protected: S.optional(S.String),
+})).annotate({
+    identifier: "SignKmsMessageResponseSignature",
+});
+export const SignKmsMessageResponse = /*@__PURE__*/ S.suspend(() => S.Struct({
+    signature: SignKmsMessageResponseSignature,
+})).annotate({
+    identifier: "SignKmsMessageResponse",
+});
+export const SignKmsTokenRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    issuerId: S.String.pipe(T.Label()),
+    claims: S.optional(S.Unknown),
+    headers: S.optional(S.Unknown),
+    ttl: S.optional(S.NullOr(S.Number)),
+}).pipe(T.Http({
+    method: "POST",
+    uri: "/v1/kms/issuers/{issuerId}/sign/token",
+    code: 200,
+}))).annotate({
+    identifier: "SignKmsTokenRequest",
+});
+export const SignKmsTokenResponse = /*@__PURE__*/ S.suspend(() => S.Struct({
+    token: S.String,
+})).annotate({
+    identifier: "SignKmsTokenResponse",
+});
+export const UpdateKmsIssuerRequestClaimsSchemaMap = /*@__PURE__*/ S.Record(S.String, S.Unknown);
+export const UpdateKmsIssuerRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    issuerId: S.String.pipe(T.Label()),
+    teamId: S.optional(S.String.pipe(T.Query())),
+    slug: S.optional(S.String.pipe(T.Query())),
+    name: S.optional(S.String),
+    claimsSchema: S.optional(S.NullOr(UpdateKmsIssuerRequestClaimsSchemaMap)),
+}).pipe(T.Http({ method: "PATCH", uri: "/v1/kms/issuers/{issuerId}", code: 200 }))).annotate({
+    identifier: "UpdateKmsIssuerRequest",
+});
+export const UpdateKmsIssuerResponseAlgorithm = /*@__PURE__*/ S.String;
+export const UpdateKmsIssuerResponseOrigin = /*@__PURE__*/ S.String;
+export const UpdateKmsIssuerResponseClaimsSchemaMap = /*@__PURE__*/ S.Record(S.String, S.Unknown);
+export const UpdateKmsIssuerResponseSigningKeysItemStatus = 
+/*@__PURE__*/ S.String;
+export const UpdateKmsIssuerResponseSigningKeysItemPublicKeyKeyOpsList = 
+/*@__PURE__*/ S.Array(S.String);
+export const UpdateKmsIssuerResponseSigningKeysItemPublicKeyX5cList = 
+/*@__PURE__*/ S.Array(S.String);
+export const UpdateKmsIssuerResponseSigningKeysItemPublicKey = 
+/*@__PURE__*/ S.suspend(() => S.Struct({
+    kty: S.optional(S.String),
+    kid: S.optional(S.String),
+    alg: S.optional(S.String),
+    use: S.optional(S.String),
+    key_ops: S.optional(UpdateKmsIssuerResponseSigningKeysItemPublicKeyKeyOpsList),
+    x5c: S.optional(UpdateKmsIssuerResponseSigningKeysItemPublicKeyX5cList),
+    x5t_S256: S.optional(S.String.pipe(T.Body("x5t#S256"))),
+})).annotate({
+    identifier: "UpdateKmsIssuerResponseSigningKeysItemPublicKey",
+});
+export const UpdateKmsIssuerResponseSigningKeysItem = /*@__PURE__*/ S.suspend(() => S.Struct({
+    keyId: S.String,
+    importKeyId: S.optional(S.String),
+    issuerId: S.String,
+    algorithm: S.String,
+    status: UpdateKmsIssuerResponseSigningKeysItemStatus,
+    publicKey: S.optional(UpdateKmsIssuerResponseSigningKeysItemPublicKey),
+    publicKeyFingerprint: S.optional(S.String),
+    publicKeyPem: S.optional(S.String),
+    certificatePem: S.optional(S.String),
+    createdAt: S.String,
+    updatedAt: S.String,
+    revokeAt: S.optional(S.String),
+    activateAt: S.optional(S.String),
+    activatedAt: S.optional(S.String),
+})).annotate({
+    identifier: "UpdateKmsIssuerResponseSigningKeysItem",
+});
+export const UpdateKmsIssuerResponseSigningKeysList = /*@__PURE__*/ S.Array(UpdateKmsIssuerResponseSigningKeysItem);
+export const UpdateKmsIssuerResponsePoliciesItemCase0Kind = 
+/*@__PURE__*/ S.String;
+export const UpdateKmsIssuerResponsePoliciesItemCase0EnvironmentsList = 
+/*@__PURE__*/ S.Array(S.String);
+export const UpdateKmsIssuerResponsePoliciesItemCase0TokenClaimsMap = 
+/*@__PURE__*/ S.Record(S.String, S.Unknown);
+export const UpdateKmsIssuerResponsePoliciesItemCase0 = /*@__PURE__*/ S.suspend(() => S.Struct({
+    kind: UpdateKmsIssuerResponsePoliciesItemCase0Kind,
+    teamId: S.String,
+    projectId: S.String,
+    environments: UpdateKmsIssuerResponsePoliciesItemCase0EnvironmentsList,
+    tokenClaims: S.optional(UpdateKmsIssuerResponsePoliciesItemCase0TokenClaimsMap),
+    createdAt: S.String,
+    updatedAt: S.String,
+})).annotate({
+    identifier: "UpdateKmsIssuerResponsePoliciesItemCase0",
+});
+export const UpdateKmsIssuerResponsePoliciesItemCase1Kind = 
+/*@__PURE__*/ S.String;
+export const UpdateKmsIssuerResponsePoliciesItemCase1TokenClaimsMap = 
+/*@__PURE__*/ S.Record(S.String, S.Unknown);
+export const UpdateKmsIssuerResponsePoliciesItemCase1 = /*@__PURE__*/ S.suspend(() => S.Struct({
+    kind: UpdateKmsIssuerResponsePoliciesItemCase1Kind,
+    clientId: S.String,
+    tokenClaims: S.optional(UpdateKmsIssuerResponsePoliciesItemCase1TokenClaimsMap),
+    createdAt: S.String,
+    updatedAt: S.String,
+})).annotate({
+    identifier: "UpdateKmsIssuerResponsePoliciesItemCase1",
+});
+export const UpdateKmsIssuerResponsePoliciesItem = 
+/*@__PURE__*/ S.Unknown;
+export const UpdateKmsIssuerResponsePoliciesList = /*@__PURE__*/ S.Array(UpdateKmsIssuerResponsePoliciesItem);
+export const UpdateKmsIssuerResponse = /*@__PURE__*/ S.suspend(() => S.Struct({
+    id: S.String,
+    ownerId: S.String,
+    name: S.String,
+    algorithm: UpdateKmsIssuerResponseAlgorithm,
+    origin: UpdateKmsIssuerResponseOrigin,
+    managedBy: S.optional(S.String),
+    claimsSchema: S.optional(UpdateKmsIssuerResponseClaimsSchemaMap),
+    createdAt: S.String,
+    updatedAt: S.String,
+    signingKeys: UpdateKmsIssuerResponseSigningKeysList,
+    policies: UpdateKmsIssuerResponsePoliciesList,
+})).annotate({
+    identifier: "UpdateKmsIssuerResponse",
+});
+export const UpdateKmsIssuerPolicyRequestKind = /*@__PURE__*/ S.String;
+export const UpdateKmsIssuerPolicyRequestEnvironmentsList = 
+/*@__PURE__*/ S.Array(S.String);
+export const UpdateKmsIssuerPolicyRequestTokenClaimsMap = 
+/*@__PURE__*/ S.Record(S.String, S.Unknown);
+export const UpdateKmsIssuerPolicyRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    issuerId: S.String.pipe(T.Label()),
+    kind: UpdateKmsIssuerPolicyRequestKind.pipe(T.Label()),
+    policyKey: S.String.pipe(T.Label()),
+    teamId: S.optional(S.String.pipe(T.Query())),
+    slug: S.optional(S.String.pipe(T.Query())),
+    environments: S.optional(UpdateKmsIssuerPolicyRequestEnvironmentsList),
+    tokenClaims: S.optional(S.NullOr(UpdateKmsIssuerPolicyRequestTokenClaimsMap)),
+}).pipe(T.Http({
+    method: "PATCH",
+    uri: "/v1/kms/issuers/{issuerId}/policies/{kind}/{policyKey}",
+    code: 200,
+}))).annotate({
+    identifier: "UpdateKmsIssuerPolicyRequest",
+});
+export const UpdateKmsIssuerPolicyResponseBodyCase0Kind = 
+/*@__PURE__*/ S.String;
+export const UpdateKmsIssuerPolicyResponseBodyCase0EnvironmentsList = 
+/*@__PURE__*/ S.Array(S.String);
+export const UpdateKmsIssuerPolicyResponseBodyCase0TokenClaimsMap = 
+/*@__PURE__*/ S.Record(S.String, S.Unknown);
+export const UpdateKmsIssuerPolicyResponseBodyCase0 = /*@__PURE__*/ S.suspend(() => S.Struct({
+    kind: UpdateKmsIssuerPolicyResponseBodyCase0Kind,
+    teamId: S.String,
+    projectId: S.String,
+    environments: UpdateKmsIssuerPolicyResponseBodyCase0EnvironmentsList,
+    tokenClaims: S.optional(UpdateKmsIssuerPolicyResponseBodyCase0TokenClaimsMap),
+    createdAt: S.String,
+    updatedAt: S.String,
+})).annotate({
+    identifier: "UpdateKmsIssuerPolicyResponseBodyCase0",
+});
+export const UpdateKmsIssuerPolicyResponseBodyCase1Kind = 
+/*@__PURE__*/ S.String;
+export const UpdateKmsIssuerPolicyResponseBodyCase1TokenClaimsMap = 
+/*@__PURE__*/ S.Record(S.String, S.Unknown);
+export const UpdateKmsIssuerPolicyResponseBodyCase1 = /*@__PURE__*/ S.suspend(() => S.Struct({
+    kind: UpdateKmsIssuerPolicyResponseBodyCase1Kind,
+    clientId: S.String,
+    tokenClaims: S.optional(UpdateKmsIssuerPolicyResponseBodyCase1TokenClaimsMap),
+    createdAt: S.String,
+    updatedAt: S.String,
+})).annotate({
+    identifier: "UpdateKmsIssuerPolicyResponseBodyCase1",
+});
+export const UpdateKmsIssuerPolicyResponseBody = 
+/*@__PURE__*/ S.Unknown;
+export const UpdateKmsIssuerPolicyResponse = /*@__PURE__*/ S.suspend(() => UpdateKmsIssuerPolicyResponseBody.pipe(T.RawResponseRoot())).annotate({
+    identifier: "UpdateKmsIssuerPolicyResponse",
+});
+/** Activate a signing key Activate a pending signing key so the issuer starts signing with it. */
+export const activateKmsSigningKey = /*@__PURE__*/ API.make(() => ({
+    input: ActivateKmsSigningKeyRequest,
+    output: ActivateKmsSigningKeyResponse,
+    errors: [BadRequest, Forbidden, NotFound, Conflict],
+    protocol: VercelProtocol,
+    retry: Retry.Retry,
+}));
+/** Create an issuer Create a new KMS issuer for the authenticated team. An issuer owns the asymmetric signing keys that are used to sign tokens and messages. */
+export const createKmsIssuer = /*@__PURE__*/ API.make(() => ({
+    input: CreateKmsIssuerRequest,
+    output: CreateKmsIssuerResponse,
+    errors: [BadRequest, Forbidden, NotFound],
+    protocol: VercelProtocol,
+    retry: Retry.Retry,
+}));
+/** Create an issuer policy Attach a policy to a KMS issuer that grants a project's deployments permission to sign with it. */
+export const createKmsIssuerPolicy = /*@__PURE__*/ API.make(() => ({
+    input: CreateKmsIssuerPolicyRequest,
+    output: CreateKmsIssuerPolicyResponse,
+    errors: [BadRequest, Forbidden, NotFound],
+    protocol: VercelProtocol,
+    retry: Retry.Retry,
+}));
+/** Create a signing key Create a new signing key for a KMS issuer. Depending on the activation mode, the key is activated automatically once its public key has propagated, or manually via the activate endpoint. */
+export const createKmsSigningKey = /*@__PURE__*/ API.make(() => ({
+    input: CreateKmsSigningKeyRequest,
+    output: CreateKmsSigningKeyResponse,
+    errors: [BadRequest, Forbidden, NotFound, Conflict],
+    protocol: VercelProtocol,
+    retry: Retry.Retry,
+}));
+/** Delete an issuer Delete a KMS issuer and its signing keys. */
+export const deleteKmsIssuer = /*@__PURE__*/ API.make(() => ({
+    input: DeleteKmsIssuerRequest,
+    output: DeleteKmsIssuerResponse,
+    errors: [BadRequest, Forbidden, NotFound],
+    protocol: VercelProtocol,
+    retry: Retry.Retry,
+}));
+/** Delete an issuer policy Remove a policy from a KMS issuer. */
+export const deleteKmsIssuerPolicy = /*@__PURE__*/ API.make(() => ({
+    input: DeleteKmsIssuerPolicyRequest,
+    output: DeleteKmsIssuerPolicyResponse,
+    errors: [BadRequest, Forbidden, NotFound],
+    protocol: VercelProtocol,
+    retry: Retry.Retry,
+}));
+/** Get an issuer Retrieve a single KMS issuer by its ID. Accepts either a team bearer token (existing path) or an OIDC token authorized by one of the issuer's policies (e.g. a connex-grant token). The OIDC path returns the issuer without policies, since a policy token only proves signing access, not management access. */
+export const getKmsIssuer = /*@__PURE__*/ API.make(() => ({
+    input: GetKmsIssuerRequest,
+    output: GetKmsIssuerResponse,
+    errors: [BadRequest, Forbidden, NotFound],
+    protocol: VercelProtocol,
+    retry: Retry.Retry,
+}));
+/** List issuers Retrieve the list of KMS issuers that belong to the authenticated team. The results are paginated. */
+export const listKmsIssuers = /*@__PURE__*/ API.make(() => ({
+    input: ListKmsIssuersRequest,
+    output: ListKmsIssuersResponse,
+    errors: [BadRequest, Forbidden],
+    protocol: VercelProtocol,
+    retry: Retry.Retry,
+}));
+/** Revoke a signing key Immediately revoke a signing key that is already scheduled for revocation. */
+export const revokeKmsSigningKey = /*@__PURE__*/ API.make(() => ({
+    input: RevokeKmsSigningKeyRequest,
+    output: RevokeKmsSigningKeyResponse,
+    errors: [BadRequest, Forbidden, NotFound, Conflict],
+    protocol: VercelProtocol,
+    retry: Retry.Retry,
+}));
+/** Sign a message Sign a raw message with a KMS issuer's active signing key. Authenticate the request with a Vercel OIDC token in the `Authorization: Bearer` header; the issuer's policies decide which workloads are allowed to sign. */
+export const signKmsMessage = /*@__PURE__*/ API.make(() => ({
+    input: SignKmsMessageRequest,
+    output: SignKmsMessageResponse,
+    errors: [BadRequest, Forbidden, NotFound],
+    protocol: VercelProtocol,
+    retry: Retry.Retry,
+}));
+/** Sign a token Sign a JWT with a KMS issuer's active signing key. Authenticate the request with a Vercel OIDC token in the `Authorization: Bearer` header; the issuer's policies decide which workloads are allowed to sign. */
+export const signKmsToken = /*@__PURE__*/ API.make(() => ({
+    input: SignKmsTokenRequest,
+    output: SignKmsTokenResponse,
+    errors: [BadRequest, Forbidden, NotFound],
+    protocol: VercelProtocol,
+    retry: Retry.Retry,
+}));
+/** Update an issuer Update a KMS issuer's name or claims schema. */
+export const updateKmsIssuer = /*@__PURE__*/ API.make(() => ({
+    input: UpdateKmsIssuerRequest,
+    output: UpdateKmsIssuerResponse,
+    errors: [BadRequest, Forbidden, NotFound],
+    protocol: VercelProtocol,
+    retry: Retry.Retry,
+}));
+/** Update an issuer policy Update an existing KMS issuer policy's environments or token claims. */
+export const updateKmsIssuerPolicy = /*@__PURE__*/ API.make(() => ({
+    input: UpdateKmsIssuerPolicyRequest,
+    output: UpdateKmsIssuerPolicyResponse,
+    errors: [BadRequest, Forbidden, NotFound],
+    protocol: VercelProtocol,
+    retry: Retry.Retry,
+}));
+//# sourceMappingURL=kms.js.map