@homeflare/alchemy 0.15.0 → 0.19.0

package/src/proxmox/generated/constraints/pve-nodes-qemu.ts

@@ -0,0 +1,125 @@
+/**
+ * Generated pve-manager parameter constraints for `/nodes/{node}/qemu` — DO NOT EDIT BY HAND.
+ *
+ * Run: bun codegen/constraints.ts
+ * Manifest entry: `pve-apidoc` — pve-manager 9.2.11/f6997e698c7933ea
+ *   sha256 9def8f13611184ee, read on a PVE cluster node from
+ *   /usr/share/pve-docs/api-viewer/apidoc.js
+ *
+ * 59 of this product's 258 POST/PUT endpoints are tabled across all areas: the ones
+ * this package writes to, named in its own source. Every other vendor write endpoint is UNTABLED
+ * and therefore unchecked at plan time.
+ *
+ * ⚠️ A `patternSource` with no `pattern` beside it is a rule that could NOT be carried into a
+ *   JavaScript RegExp faithfully (codegen/pattern.ts). It is recorded and NOT enforced.
+ * ⚠️ `pattern` IS NOT THE VENDOR'S SPELLING. For PVE it is anchored, because PVE applies
+ *   `m/^$pattern$/` itself (JSONSchema.pm); for PBS it is the vendor's own, which already
+ *   carries its anchors. `patternSource` is the spelling to quote at a human — param-rules.ts.
+ * ⚠️ `each: true` means the value rules describe every ELEMENT of a repeated key, because the
+ *   parameter is an array and stated its limits on `items`.
+ */
+import type { EndpointConstraints } from '../../constraints.ts';
+
+export const PVE_NODES_QEMU_CONSTRAINTS: Readonly<Record<string, EndpointConstraints>> = {
+  "pve:POST /nodes/{node}/qemu": {
+    "affinity": {"format":"pve-cpuset","type":"string"},
+    "amd-sev": {"format":"pve-qemu-sev-fmt","type":"string"},
+    "arch": {"enum":["x86_64","aarch64"],"type":"string"},
+    "archive": {"maxLength":255,"type":"string"},
+    "balloon": {"minimum":0,"type":"integer"},
+    "bios": {"default":"seabios","enum":["seabios","ovmf"],"type":"string"},
+    "boot": {"format":"pve-qm-boot","type":"string"},
+    "bootdisk": {"format":"pve-qm-bootdisk","pattern":"^(ide|sata|scsi|virtio)\\d+\\n?$","patternSource":"(ide|sata|scsi|virtio)\\d+","type":"string"},
+    "bwlimit": {"default":"restore limit from datacenter or storage config","minimum":0,"type":"integer"},
+    "cdrom": {"format":"pve-qm-ide","type":"string"},
+    "cicustom": {"format":"pve-qm-cicustom","type":"string"},
+    "citype": {"enum":["configdrive2","nocloud","opennebula"],"type":"string"},
+    "cores": {"default":"1","minimum":1,"type":"integer"},
+    "cpu": {"format":"pve-vm-cpu-conf","type":"string"},
+    "cpulimit": {"default":"0","maximum":128,"minimum":0,"type":"number"},
+    "cpuunits": {"default":"cgroup v1: 1024, cgroup v2: 100","maximum":262144,"minimum":1,"type":"integer"},
+    "description": {"maxLength":8192,"type":"string"},
+    "hookscript": {"format":"pve-volume-id","type":"string"},
+    "hostpci[n]": {"format":"pve-qm-hostpci","type":"string"},
+    "hotplug": {"default":"network,disk,usb","format":"pve-hotplug-features","type":"string"},
+    "hugepages": {"enum":["any","2","1024"],"type":"string"},
+    "import-working-storage": {"format":"pve-storage-id","type":"string"},
+    "intel-tdx": {"format":"pve-qemu-tdx-fmt","type":"string"},
+    "ipconfig[n]": {"format":"pve-qm-ipconfig","type":"string"},
+    "keyboard": {"enum":["de","de-ch","da","en-gb","en-us","es","fi","fr","fr-be","fr-ca","fr-ch","hu","is","it","ja","lt","mk","nl","no","pl","pt","pt-br","sv","sl","tr"],"type":"string"},
+    "lock": {"enum":["backup","clone","create","migrate","rollback","snapshot","snapshot-delete","suspending","suspended"],"type":"string"},
+    "migrate_downtime": {"default":"0.1","minimum":0,"type":"number"},
+    "migrate_speed": {"default":"0","minimum":0,"type":"integer"},
+    "name": {"format":"dns-name","type":"string"},
+    "nameserver": {"format":"address-list","type":"string"},
+    "ostype": {"default":"other","enum":["other","wxp","w2k","w2k3","w2k8","wvista","win7","win8","win10","win11","l24","l26","solaris"],"type":"string"},
+    "parallel[n]": {"pattern":"^/dev/parport\\d+|/dev/usb/lp\\d+\\n?$","patternSource":"/dev/parport\\d+|/dev/usb/lp\\d+","type":"string"},
+    "pool": {"format":"pve-poolid","type":"string"},
+    "rng0": {"format":"pve-qm-rng","type":"string"},
+    "scsihw": {"default":"lsi","enum":["lsi","lsi53c810","virtio-scsi-pci","virtio-scsi-single","megasas","pvscsi"],"type":"string"},
+    "serial[n]": {"pattern":"^(/dev/[^,]+|socket)\\n?$","patternSource":"(/dev/[^,]+|socket)","type":"string"},
+    "shares": {"default":"1000","maximum":50000,"minimum":0,"type":"integer"},
+    "smbios1": {"format":"pve-qm-smbios1","maxLength":512,"type":"string"},
+    "smp": {"default":"1","minimum":1,"type":"integer"},
+    "sockets": {"default":"1","minimum":1,"type":"integer"},
+    "sshkeys": {"format":"urlencoded","type":"string"},
+    "startdate": {"default":"now","pattern":"^(now|\\d{4}-\\d{1,2}-\\d{1,2}(T\\d{1,2}:\\d{1,2}:\\d{1,2})?)\\n?$","patternSource":"(now|\\d{4}-\\d{1,2}-\\d{1,2}(T\\d{1,2}:\\d{1,2}:\\d{1,2})?)","type":"string"},
+    "startup": {"format":"pve-startup-order","type":"string"},
+    "storage": {"format":"pve-storage-id","type":"string"},
+    "tags": {"format":"pve-tag-list","type":"string"},
+    "vcpus": {"default":"0","minimum":1,"type":"integer"},
+    "vmgenid": {"default":"1 (autogenerated)","pattern":"^(?:[a-fA-F0-9]{8}(?:-[a-fA-F0-9]{4}){3}-[a-fA-F0-9]{12}|[01])\\n?$","patternSource":"(?:[a-fA-F0-9]{8}(?:-[a-fA-F0-9]{4}){3}-[a-fA-F0-9]{12}|[01])","type":"string"},
+    "vmid": {"format":"pve-vmid","maximum":999999999,"minimum":100,"required":true,"type":"integer"},
+    "vmstatestorage": {"format":"pve-storage-id","type":"string"},
+    "watchdog": {"format":"pve-qm-watchdog","type":"string"},
+  },
+  "pve:PUT /nodes/{node}/qemu/{vmid}/config": {
+    "affinity": {"format":"pve-cpuset","type":"string"},
+    "amd-sev": {"format":"pve-qemu-sev-fmt","type":"string"},
+    "arch": {"enum":["x86_64","aarch64"],"type":"string"},
+    "balloon": {"minimum":0,"type":"integer"},
+    "bios": {"default":"seabios","enum":["seabios","ovmf"],"type":"string"},
+    "boot": {"format":"pve-qm-boot","type":"string"},
+    "bootdisk": {"format":"pve-qm-bootdisk","pattern":"^(ide|sata|scsi|virtio)\\d+\\n?$","patternSource":"(ide|sata|scsi|virtio)\\d+","type":"string"},
+    "cdrom": {"format":"pve-qm-ide","type":"string"},
+    "cicustom": {"format":"pve-qm-cicustom","type":"string"},
+    "citype": {"enum":["configdrive2","nocloud","opennebula"],"type":"string"},
+    "cores": {"default":"1","minimum":1,"type":"integer"},
+    "cpu": {"format":"pve-vm-cpu-conf","type":"string"},
+    "cpulimit": {"default":"0","maximum":128,"minimum":0,"type":"number"},
+    "cpuunits": {"default":"cgroup v1: 1024, cgroup v2: 100","maximum":262144,"minimum":1,"type":"integer"},
+    "delete": {"format":"pve-configid-list","type":"string"},
+    "description": {"maxLength":8192,"type":"string"},
+    "digest": {"maxLength":40,"type":"string"},
+    "hookscript": {"format":"pve-volume-id","type":"string"},
+    "hostpci[n]": {"format":"pve-qm-hostpci","type":"string"},
+    "hotplug": {"default":"network,disk,usb","format":"pve-hotplug-features","type":"string"},
+    "hugepages": {"enum":["any","2","1024"],"type":"string"},
+    "intel-tdx": {"format":"pve-qemu-tdx-fmt","type":"string"},
+    "ipconfig[n]": {"format":"pve-qm-ipconfig","type":"string"},
+    "keyboard": {"enum":["de","de-ch","da","en-gb","en-us","es","fi","fr","fr-be","fr-ca","fr-ch","hu","is","it","ja","lt","mk","nl","no","pl","pt","pt-br","sv","sl","tr"],"type":"string"},
+    "lock": {"enum":["backup","clone","create","migrate","rollback","snapshot","snapshot-delete","suspending","suspended"],"type":"string"},
+    "migrate_downtime": {"default":"0.1","minimum":0,"type":"number"},
+    "migrate_speed": {"default":"0","minimum":0,"type":"integer"},
+    "name": {"format":"dns-name","type":"string"},
+    "nameserver": {"format":"address-list","type":"string"},
+    "ostype": {"default":"other","enum":["other","wxp","w2k","w2k3","w2k8","wvista","win7","win8","win10","win11","l24","l26","solaris"],"type":"string"},
+    "parallel[n]": {"pattern":"^/dev/parport\\d+|/dev/usb/lp\\d+\\n?$","patternSource":"/dev/parport\\d+|/dev/usb/lp\\d+","type":"string"},
+    "revert": {"format":"pve-configid-list","type":"string"},
+    "rng0": {"format":"pve-qm-rng","type":"string"},
+    "scsihw": {"default":"lsi","enum":["lsi","lsi53c810","virtio-scsi-pci","virtio-scsi-single","megasas","pvscsi"],"type":"string"},
+    "serial[n]": {"pattern":"^(/dev/[^,]+|socket)\\n?$","patternSource":"(/dev/[^,]+|socket)","type":"string"},
+    "shares": {"default":"1000","maximum":50000,"minimum":0,"type":"integer"},
+    "smbios1": {"format":"pve-qm-smbios1","maxLength":512,"type":"string"},
+    "smp": {"default":"1","minimum":1,"type":"integer"},
+    "sockets": {"default":"1","minimum":1,"type":"integer"},
+    "sshkeys": {"format":"urlencoded","type":"string"},
+    "startdate": {"default":"now","pattern":"^(now|\\d{4}-\\d{1,2}-\\d{1,2}(T\\d{1,2}:\\d{1,2}:\\d{1,2})?)\\n?$","patternSource":"(now|\\d{4}-\\d{1,2}-\\d{1,2}(T\\d{1,2}:\\d{1,2}:\\d{1,2})?)","type":"string"},
+    "startup": {"format":"pve-startup-order","type":"string"},
+    "tags": {"format":"pve-tag-list","type":"string"},
+    "vcpus": {"default":"0","minimum":1,"type":"integer"},
+    "vmgenid": {"default":"1 (autogenerated)","pattern":"^(?:[a-fA-F0-9]{8}(?:-[a-fA-F0-9]{4}){3}-[a-fA-F0-9]{12}|[01])\\n?$","patternSource":"(?:[a-fA-F0-9]{8}(?:-[a-fA-F0-9]{4}){3}-[a-fA-F0-9]{12}|[01])","type":"string"},
+    "vmstatestorage": {"format":"pve-storage-id","type":"string"},
+    "watchdog": {"format":"pve-qm-watchdog","type":"string"},
+  },
+};

package/src/proxmox/generated/constraints/pve-pools.ts

@@ -6,12 +6,17 @@
  *   sha256 9def8f13611184ee, read on a PVE cluster node from
  *   /usr/share/pve-docs/api-viewer/apidoc.js
  *
- * 27 of this product's 258 POST/PUT endpoints are tabled across all areas: the ones
+ * 59 of this product's 258 POST/PUT endpoints are tabled across all areas: the ones
  * this package writes to, named in its own source. Every other vendor write endpoint is UNTABLED
  * and therefore unchecked at plan time.
  *
  * ⚠️ A `patternSource` with no `pattern` beside it is a rule that could NOT be carried into a
  *   JavaScript RegExp faithfully (codegen/pattern.ts). It is recorded and NOT enforced.
+ * ⚠️ `pattern` IS NOT THE VENDOR'S SPELLING. For PVE it is anchored, because PVE applies
+ *   `m/^$pattern$/` itself (JSONSchema.pm); for PBS it is the vendor's own, which already
+ *   carries its anchors. `patternSource` is the spelling to quote at a human — param-rules.ts.
+ * ⚠️ `each: true` means the value rules describe every ELEMENT of a repeated key, because the
+ *   parameter is an array and stated its limits on `items`.
  */
 import type { EndpointConstraints } from '../../constraints.ts';
 

package/src/proxmox/generated/constraints/pve-storage.ts

@@ -6,12 +6,17 @@
  *   sha256 9def8f13611184ee, read on a PVE cluster node from
  *   /usr/share/pve-docs/api-viewer/apidoc.js
  *
- * 27 of this product's 258 POST/PUT endpoints are tabled across all areas: the ones
+ * 59 of this product's 258 POST/PUT endpoints are tabled across all areas: the ones
  * this package writes to, named in its own source. Every other vendor write endpoint is UNTABLED
  * and therefore unchecked at plan time.
  *
  * ⚠️ A `patternSource` with no `pattern` beside it is a rule that could NOT be carried into a
  *   JavaScript RegExp faithfully (codegen/pattern.ts). It is recorded and NOT enforced.
+ * ⚠️ `pattern` IS NOT THE VENDOR'S SPELLING. For PVE it is anchored, because PVE applies
+ *   `m/^$pattern$/` itself (JSONSchema.pm); for PBS it is the vendor's own, which already
+ *   carries its anchors. `patternSource` is the spelling to quote at a human — param-rules.ts.
+ * ⚠️ `each: true` means the value rules describe every ELEMENT of a repeated key, because the
+ *   parameter is an array and stated its limits on `items`.
  */
 import type { EndpointConstraints } from '../../constraints.ts';
 
@@ -23,7 +28,7 @@ export const PVE_STORAGE_CONSTRAINTS: Readonly<Record<string, EndpointConstraint
     "content-dirs": {"format":"pve-dir-override-list","type":"string"},
     "domain": {"maxLength":256,"type":"string"},
     "export": {"format":"pve-storage-path","type":"string"},
-    "fingerprint": {"pattern":"([A-Fa-f0-9]{2}:){31}[A-Fa-f0-9]{2}","patternSource":"([A-Fa-f0-9]{2}:){31}[A-Fa-f0-9]{2}","type":"string"},
+    "fingerprint": {"pattern":"^([A-Fa-f0-9]{2}:){31}[A-Fa-f0-9]{2}\\n?$","patternSource":"([A-Fa-f0-9]{2}:){31}[A-Fa-f0-9]{2}","type":"string"},
     "format": {"enum":["raw","qcow2","subvol","vmdk"],"type":"string"},
     "fs-name": {"format":"pve-configid","type":"string"},
     "max-protected-backups": {"default":"Unlimited for users with Datastore.Allocate privilege, 5 for other users","minimum":-1,"type":"integer"},
@@ -54,7 +59,7 @@ export const PVE_STORAGE_CONSTRAINTS: Readonly<Record<string, EndpointConstraint
     "delete": {"format":"pve-configid-list","maxLength":4096,"type":"string"},
     "digest": {"maxLength":64,"type":"string"},
     "domain": {"maxLength":256,"type":"string"},
-    "fingerprint": {"pattern":"([A-Fa-f0-9]{2}:){31}[A-Fa-f0-9]{2}","patternSource":"([A-Fa-f0-9]{2}:){31}[A-Fa-f0-9]{2}","type":"string"},
+    "fingerprint": {"pattern":"^([A-Fa-f0-9]{2}:){31}[A-Fa-f0-9]{2}\\n?$","patternSource":"([A-Fa-f0-9]{2}:){31}[A-Fa-f0-9]{2}","type":"string"},
     "format": {"enum":["raw","qcow2","subvol","vmdk"],"type":"string"},
     "fs-name": {"format":"pve-configid","type":"string"},
     "max-protected-backups": {"default":"Unlimited for users with Datastore.Allocate privilege, 5 for other users","minimum":-1,"type":"integer"},

package/src/proxmox/generated/pbs/access-users.ts

@@ -0,0 +1,137 @@
+/**
+ * Generated proxmox-backup-server API types for `/access/users` — DO NOT EDIT BY HAND.
+ *
+ * Run: bun codegen/types.ts    (`--check` compares without writing)
+ * Manifest entry: `pbs-apidoc` — proxmox-backup-server 4.2.6-1 (running 4.2.3)
+ *   sha256 274ab9f6fc075aea, read on a PBS host from
+ *   /usr/share/doc/proxmox-backup/html/api-viewer/apidoc.js
+ *
+ * ⚠️ A REQUEST PARAMETER IS TEXT ON THE WIRE. `client.ts` sends form encoding, so an integer is
+ *   `\`${number}\`` and a boolean is `'0' | '1'` — the spellings that reach the server. The
+ *   vendor's BOUNDS on those values are enforced separately, at plan time, from
+ *   pbs/../constraints (codegen/README.md). A response is JSON and is not spelled that way.
+ */
+
+/** GET /access/users — form/query parameters (path segments omitted). */
+export type AccessUsersGetParams = { include_tokens?: '0' | '1' };
+/** GET /access/users — `data` payload after client unwrap. */
+export type AccessUsersGetReturn = readonly {
+  comment?: string;
+  email?: string;
+  enable?: boolean | 0 | 1;
+  expire?: number;
+  firstname?: string;
+  lastname?: string;
+  'tfa-locked-until'?: number;
+  tokens?: readonly {
+    comment?: string;
+    enable?: boolean | 0 | 1;
+    expire?: number;
+    tokenid: string;
+  }[];
+  'totp-locked'?: boolean | 0 | 1;
+  userid: string;
+}[];
+
+/** POST /access/users — form/query parameters (path segments omitted). */
+export type AccessUsersPostParams = {
+  comment?: string;
+  email?: string;
+  enable?: '0' | '1';
+  expire?: `${number}`;
+  firstname?: string;
+  lastname?: string;
+  password?: string;
+  userid: string;
+};
+/** POST /access/users — `data` payload after client unwrap. */
+export type AccessUsersPostReturn = null;
+
+/** GET /access/users/{userid} — `data` payload after client unwrap. */
+export type AccessUsersUseridGetReturn = {
+  comment?: string;
+  email?: string;
+  enable?: boolean | 0 | 1;
+  expire?: number;
+  firstname?: string;
+  lastname?: string;
+  userid: string;
+};
+
+/** PUT /access/users/{userid} — form/query parameters (path segments omitted). */
+export type AccessUsersUseridPutParams = {
+  comment?: string;
+  delete?: readonly ('comment' | 'firstname' | 'lastname' | 'email')[];
+  digest?: string;
+  email?: string;
+  enable?: '0' | '1';
+  expire?: `${number}`;
+  firstname?: string;
+  lastname?: string;
+  password?: string;
+};
+/** PUT /access/users/{userid} — `data` payload after client unwrap. */
+export type AccessUsersUseridPutReturn = null;
+
+/** DELETE /access/users/{userid} — form/query parameters (path segments omitted). */
+export type AccessUsersUseridDeleteParams = { digest?: string };
+/** DELETE /access/users/{userid} — `data` payload after client unwrap. */
+export type AccessUsersUseridDeleteReturn = null;
+
+/** GET /access/users/{userid}/token — `data` payload after client unwrap. */
+export type AccessUsersUseridTokenGetReturn = readonly {
+  comment?: string;
+  enable?: boolean | 0 | 1;
+  expire?: number;
+  'token-name': string;
+  tokenid: string;
+}[];
+
+/** GET /access/users/{userid}/token/{token-name} — `data` payload after client unwrap. */
+export type AccessUsersUseridTokenTokenNameGetReturn = {
+  comment?: string;
+  enable?: boolean | 0 | 1;
+  expire?: number;
+  tokenid: string;
+};
+
+/** POST /access/users/{userid}/token/{token-name} — form/query parameters (path segments omitted). */
+export type AccessUsersUseridTokenTokenNamePostParams = {
+  comment?: string;
+  digest?: string;
+  enable?: '0' | '1';
+  expire?: `${number}`;
+};
+/** POST /access/users/{userid}/token/{token-name} — `data` payload after client unwrap. */
+export type AccessUsersUseridTokenTokenNamePostReturn = { tokenid: string; value: string };
+
+/** PUT /access/users/{userid}/token/{token-name} — form/query parameters (path segments omitted). */
+export type AccessUsersUseridTokenTokenNamePutParams = {
+  comment?: string;
+  delete?: readonly ('comment')[];
+  digest?: string;
+  enable?: '0' | '1';
+  expire?: `${number}`;
+  regenerate?: '0' | '1';
+};
+/** PUT /access/users/{userid}/token/{token-name} — `data` payload after client unwrap. */
+export type AccessUsersUseridTokenTokenNamePutReturn = { secret?: string };
+
+/** DELETE /access/users/{userid}/token/{token-name} — form/query parameters (path segments omitted). */
+export type AccessUsersUseridTokenTokenNameDeleteParams = { digest?: string };
+/** DELETE /access/users/{userid}/token/{token-name} — `data` payload after client unwrap. */
+export type AccessUsersUseridTokenTokenNameDeleteReturn = null;
+
+/** PUT /access/users/{userid}/unlock-tfa — `data` payload after client unwrap. */
+export type AccessUsersUseridUnlockTfaPutReturn = boolean | 0 | 1;
+
+/** POST /access/vncticket — form/query parameters (path segments omitted). */
+export type AccessVncticketPostParams = {
+  authid: string;
+  path: string;
+  port?: `${number}`;
+  privs: string;
+  vncticket: string;
+};
+/** POST /access/vncticket — `data` payload after client unwrap. */
+export type AccessVncticketPostReturn = null;

package/src/proxmox/generated/pbs/access.ts

@@ -0,0 +1,232 @@
+/**
+ * Generated proxmox-backup-server API types for `/access` — DO NOT EDIT BY HAND.
+ *
+ * Run: bun codegen/types.ts    (`--check` compares without writing)
+ * Manifest entry: `pbs-apidoc` — proxmox-backup-server 4.2.6-1 (running 4.2.3)
+ *   sha256 274ab9f6fc075aea, read on a PBS host from
+ *   /usr/share/doc/proxmox-backup/html/api-viewer/apidoc.js
+ *
+ * ⚠️ A REQUEST PARAMETER IS TEXT ON THE WIRE. `client.ts` sends form encoding, so an integer is
+ *   `\`${number}\`` and a boolean is `'0' | '1'` — the spellings that reach the server. The
+ *   vendor's BOUNDS on those values are enforced separately, at plan time, from
+ *   pbs/../constraints (codegen/README.md). A response is JSON and is not spelled that way.
+ */
+
+/** GET /access — `data` payload after client unwrap. */
+export type AccessGetReturn = null;
+
+/** GET /access/acl — form/query parameters (path segments omitted). */
+export type AccessAclGetParams = { exact?: '0' | '1'; path?: string };
+/** GET /access/acl — `data` payload after client unwrap. */
+export type AccessAclGetReturn = readonly {
+  path: string;
+  propagate: boolean | 0 | 1;
+  roleid:
+    | 'Admin'
+    | 'Audit'
+    | 'NoAccess'
+    | 'DatastoreAdmin'
+    | 'DatastoreReader'
+    | 'DatastoreBackup'
+    | 'DatastorePowerUser'
+    | 'DatastoreAudit'
+    | 'RemoteAudit'
+    | 'RemoteAdmin'
+    | 'RemoteSyncOperator'
+    | 'RemoteSyncPushOperator'
+    | 'RemoteDatastorePowerUser'
+    | 'RemoteDatastoreAdmin'
+    | 'TapeAudit'
+    | 'TapeAdmin'
+    | 'TapeOperator'
+    | 'TapeReader';
+  ugid: string;
+  ugid_type: 'user' | 'group';
+}[];
+
+/** PUT /access/acl — form/query parameters (path segments omitted). */
+export type AccessAclPutParams = {
+  'auth-id'?: string;
+  delete?: '0' | '1';
+  digest?: string;
+  group?: string;
+  path: string;
+  propagate?: '0' | '1';
+  role:
+    | 'Admin'
+    | 'Audit'
+    | 'NoAccess'
+    | 'DatastoreAdmin'
+    | 'DatastoreReader'
+    | 'DatastoreBackup'
+    | 'DatastorePowerUser'
+    | 'DatastoreAudit'
+    | 'RemoteAudit'
+    | 'RemoteAdmin'
+    | 'RemoteSyncOperator'
+    | 'RemoteSyncPushOperator'
+    | 'RemoteDatastorePowerUser'
+    | 'RemoteDatastoreAdmin'
+    | 'TapeAudit'
+    | 'TapeAdmin'
+    | 'TapeOperator'
+    | 'TapeReader';
+};
+/** PUT /access/acl — `data` payload after client unwrap. */
+export type AccessAclPutReturn = null;
+
+/** GET /access/domains — `data` payload after client unwrap. */
+export type AccessDomainsGetReturn = readonly {
+  comment?: string;
+  default?: boolean | 0 | 1;
+  realm: string;
+  type: 'pam' | 'pbs' | 'openid' | 'ldap' | 'ad';
+}[];
+
+/** POST /access/domains/{realm}/sync — form/query parameters (path segments omitted). */
+export type AccessDomainsRealmSyncPostParams = {
+  'dry-run'?: '0' | '1';
+  'enable-new'?: '0' | '1';
+  'remove-vanished'?: string;
+};
+/** POST /access/domains/{realm}/sync — `data` payload after client unwrap. */
+export type AccessDomainsRealmSyncPostReturn = string;
+
+/** GET /access/openid — `data` payload after client unwrap. */
+export type AccessOpenidGetReturn = null;
+
+/** POST /access/openid/auth-url — form/query parameters (path segments omitted). */
+export type AccessOpenidAuthUrlPostParams = { realm: string; 'redirect-url': string };
+/** POST /access/openid/auth-url — `data` payload after client unwrap. */
+export type AccessOpenidAuthUrlPostReturn = string;
+
+/** POST /access/openid/login — form/query parameters (path segments omitted). */
+export type AccessOpenidLoginPostParams = {
+  code: string;
+  'http-only'?: '0' | '1';
+  'redirect-url': string;
+  state: string;
+};
+/** POST /access/openid/login — `data` payload after client unwrap. */
+export type AccessOpenidLoginPostReturn = {
+  CSRFPreventionToken: string;
+  ticket?: string;
+  'ticket-info'?: string;
+  username: string;
+};
+
+/** PUT /access/password — form/query parameters (path segments omitted). */
+export type AccessPasswordPutParams = {
+  'confirmation-password'?: string;
+  password: string;
+  userid: string;
+};
+/** PUT /access/password — `data` payload after client unwrap. */
+export type AccessPasswordPutReturn = null;
+
+/** GET /access/permissions — form/query parameters (path segments omitted). */
+export type AccessPermissionsGetParams = { 'auth-id'?: string; path?: string };
+/** GET /access/permissions — `data` payload after client unwrap. */
+export type AccessPermissionsGetReturn = Record<string, unknown>;
+
+/** GET /access/roles — `data` payload after client unwrap. */
+export type AccessRolesGetReturn = readonly {
+  comment?: string;
+  privs: readonly string[];
+  roleid:
+    | 'Admin'
+    | 'Audit'
+    | 'NoAccess'
+    | 'DatastoreAdmin'
+    | 'DatastoreReader'
+    | 'DatastoreBackup'
+    | 'DatastorePowerUser'
+    | 'DatastoreAudit'
+    | 'RemoteAudit'
+    | 'RemoteAdmin'
+    | 'RemoteSyncOperator'
+    | 'RemoteSyncPushOperator'
+    | 'RemoteDatastorePowerUser'
+    | 'RemoteDatastoreAdmin'
+    | 'TapeAudit'
+    | 'TapeAdmin'
+    | 'TapeOperator'
+    | 'TapeReader';
+}[];
+
+/** GET /access/tfa — `data` payload after client unwrap. */
+export type AccessTfaGetReturn = readonly {
+  entries: readonly {
+    created: number;
+    description: string;
+    enable: boolean | 0 | 1;
+    id: string;
+    type: 'totp' | 'u2f' | 'webauthn' | 'recovery' | 'yubico';
+  }[];
+  'tfa-locked-until'?: number;
+  'totp-locked': boolean | 0 | 1;
+  userid: string;
+}[];
+
+/** GET /access/tfa/{userid} — `data` payload after client unwrap. */
+export type AccessTfaUseridGetReturn = readonly {
+  created: number;
+  description: string;
+  enable: boolean | 0 | 1;
+  id: string;
+  type: 'totp' | 'u2f' | 'webauthn' | 'recovery' | 'yubico';
+}[];
+
+/** POST /access/tfa/{userid} — form/query parameters (path segments omitted). */
+export type AccessTfaUseridPostParams = {
+  challenge?: string;
+  description?: string;
+  password?: string;
+  totp?: string;
+  type: 'totp' | 'u2f' | 'webauthn' | 'recovery' | 'yubico';
+  value?: string;
+};
+/** POST /access/tfa/{userid} — `data` payload after client unwrap. */
+export type AccessTfaUseridPostReturn = {
+  challenge?: string;
+  id?: string;
+  recovery: readonly number[];
+};
+
+/** GET /access/tfa/{userid}/{id} — `data` payload after client unwrap. */
+export type AccessTfaUseridIdGetReturn = null;
+
+/** PUT /access/tfa/{userid}/{id} — form/query parameters (path segments omitted). */
+export type AccessTfaUseridIdPutParams = {
+  description?: string;
+  enable?: '0' | '1';
+  password?: string;
+};
+/** PUT /access/tfa/{userid}/{id} — `data` payload after client unwrap. */
+export type AccessTfaUseridIdPutReturn = null;
+
+/** DELETE /access/tfa/{userid}/{id} — form/query parameters (path segments omitted). */
+export type AccessTfaUseridIdDeleteParams = { password?: string };
+/** DELETE /access/tfa/{userid}/{id} — `data` payload after client unwrap. */
+export type AccessTfaUseridIdDeleteReturn = null;
+
+/** POST /access/ticket — form/query parameters (path segments omitted). */
+export type AccessTicketPostParams = {
+  'http-only'?: '0' | '1';
+  password?: string;
+  path?: string;
+  port?: `${number}`;
+  privs?: string;
+  'tfa-challenge'?: string;
+  username: string;
+};
+/** POST /access/ticket — `data` payload after client unwrap. */
+export type AccessTicketPostReturn = {
+  CSRFPreventionToken?: string;
+  ticket?: string;
+  'ticket-info'?: string;
+  username: string;
+};
+
+/** DELETE /access/ticket — `data` payload after client unwrap. */
+export type AccessTicketDeleteReturn = null;