@homeflare/distilled-openbao 0.2.0

package/src/services/database.ts

@@ -0,0 +1,854 @@
+// AUTO-GENERATED by scripts/generate.ts from .generated-specs (specs/spec-mirror-openbao, generated — see fetch-specs.ts). Do not edit.
+import * as S from "@distilled.cloud/core/schema";
+import * as API from "@distilled.cloud/core/api";
+import * as T from "../traits.ts";
+import {
+  OpenBaoProtocol,
+  type OpenBaoOpError,
+  type OpenBaoOpContext,
+} from "../protocol.ts";
+import * as Retry from "../retry.ts";
+
+export type { OpenBaoOpError, OpenBaoOpContext };
+
+/** Comma separated string or array of the role names allowed to get creds from this database connection. If empty no roles are allowed. If "*" all roles are allowed. */
+export type DatabaseConfigureConnectionRequestAllowedRolesList = Array<string>;
+export const DatabaseConfigureConnectionRequestAllowedRolesList =
+  /*@__PURE__*/ S.Array(
+    S.String,
+  ) as any as S.Schema<DatabaseConfigureConnectionRequestAllowedRolesList>;
+
+/** Specifies the database statements to be executed to rotate the root user's credentials. See the plugin's API page for more information on support and formatting for this parameter. */
+export type DatabaseConfigureConnectionRequestRootRotationStatementsList =
+  Array<string>;
+export const DatabaseConfigureConnectionRequestRootRotationStatementsList =
+  /*@__PURE__*/ S.Array(
+    S.String,
+  ) as any as S.Schema<DatabaseConfigureConnectionRequestRootRotationStatementsList>;
+
+export interface DatabaseConfigureConnectionRequest {
+  /** Path that the backend was mounted at */
+  database_mount_path: string;
+  /** Name of this database connection */
+  name: string;
+  /** Comma separated string or array of the role names allowed to get creds from this database connection. If empty no roles are allowed. If "*" all roles are allowed. */
+  allowed_roles?: DatabaseConfigureConnectionRequestAllowedRolesList;
+  /** Password policy to use when generating passwords. */
+  password_policy?: string;
+  /** The name of a builtin or previously registered plugin known to OpenBao. This endpoint will create an instance of that plugin type. */
+  plugin_name?: string;
+  /** The version of the plugin to use. */
+  plugin_version?: string;
+  /** Specifies the database statements to be executed to rotate the root user's credentials. See the plugin's API page for more information on support and formatting for this parameter. */
+  root_rotation_statements?: DatabaseConfigureConnectionRequestRootRotationStatementsList;
+  /** If true, the connection details are verified by actually connecting to the database. Defaults to true. */
+  verify_connection?: boolean;
+}
+export const DatabaseConfigureConnectionRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    database_mount_path: S.String.pipe(T.Label()),
+    name: S.String.pipe(T.Label()),
+    allowed_roles: S.optional(
+      DatabaseConfigureConnectionRequestAllowedRolesList,
+    ),
+    password_policy: S.optional(S.String),
+    plugin_name: S.optional(S.String),
+    plugin_version: S.optional(S.String),
+    root_rotation_statements: S.optional(
+      DatabaseConfigureConnectionRequestRootRotationStatementsList,
+    ),
+    verify_connection: S.optional(S.Boolean),
+  }).pipe(
+    T.Http({
+      method: "POST",
+      uri: "/{database_mount_path}/config/{name}",
+      code: 200,
+    }),
+  ),
+).annotate({
+  identifier: "DatabaseConfigureConnectionRequest",
+}) as any as S.Schema<DatabaseConfigureConnectionRequest>;
+
+export interface DatabaseConfigureConnectionResponse {}
+export const DatabaseConfigureConnectionResponse = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({}),
+).annotate({
+  identifier: "DatabaseConfigureConnectionResponse",
+}) as any as S.Schema<DatabaseConfigureConnectionResponse>;
+
+export interface DatabaseDeleteConnectionConfigurationRequest {
+  /** Path that the backend was mounted at */
+  database_mount_path: string;
+  /** Name of this database connection */
+  name: string;
+}
+export const DatabaseDeleteConnectionConfigurationRequest =
+  /*@__PURE__*/ S.suspend(() =>
+    S.Struct({
+      database_mount_path: S.String.pipe(T.Label()),
+      name: S.String.pipe(T.Label()),
+    }).pipe(
+      T.Http({
+        method: "DELETE",
+        uri: "/{database_mount_path}/config/{name}",
+        code: 200,
+      }),
+    ),
+  ).annotate({
+    identifier: "DatabaseDeleteConnectionConfigurationRequest",
+  }) as any as S.Schema<DatabaseDeleteConnectionConfigurationRequest>;
+
+export interface DatabaseDeleteConnectionConfigurationResponse {}
+export const DatabaseDeleteConnectionConfigurationResponse =
+  /*@__PURE__*/ S.suspend(() => S.Struct({})).annotate({
+    identifier: "DatabaseDeleteConnectionConfigurationResponse",
+  }) as any as S.Schema<DatabaseDeleteConnectionConfigurationResponse>;
+
+export interface DatabaseDeleteRoleRequest {
+  /** Path that the backend was mounted at */
+  database_mount_path: string;
+  /** Name of the role. */
+  name: string;
+}
+export const DatabaseDeleteRoleRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    database_mount_path: S.String.pipe(T.Label()),
+    name: S.String.pipe(T.Label()),
+  }).pipe(
+    T.Http({
+      method: "DELETE",
+      uri: "/{database_mount_path}/roles/{name}",
+      code: 200,
+    }),
+  ),
+).annotate({
+  identifier: "DatabaseDeleteRoleRequest",
+}) as any as S.Schema<DatabaseDeleteRoleRequest>;
+
+export interface DatabaseDeleteRoleResponse {}
+export const DatabaseDeleteRoleResponse = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({}),
+).annotate({
+  identifier: "DatabaseDeleteRoleResponse",
+}) as any as S.Schema<DatabaseDeleteRoleResponse>;
+
+export interface DatabaseDeleteStaticRoleRequest {
+  /** Path that the backend was mounted at */
+  database_mount_path: string;
+  /** Name of the role. */
+  name: string;
+}
+export const DatabaseDeleteStaticRoleRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    database_mount_path: S.String.pipe(T.Label()),
+    name: S.String.pipe(T.Label()),
+  }).pipe(
+    T.Http({
+      method: "DELETE",
+      uri: "/{database_mount_path}/static-roles/{name}",
+      code: 200,
+    }),
+  ),
+).annotate({
+  identifier: "DatabaseDeleteStaticRoleRequest",
+}) as any as S.Schema<DatabaseDeleteStaticRoleRequest>;
+
+export interface DatabaseDeleteStaticRoleResponse {}
+export const DatabaseDeleteStaticRoleResponse = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({}),
+).annotate({
+  identifier: "DatabaseDeleteStaticRoleResponse",
+}) as any as S.Schema<DatabaseDeleteStaticRoleResponse>;
+
+export interface DatabaseGenerateCredentialsRequest {
+  /** Path that the backend was mounted at */
+  database_mount_path: string;
+  /** Name of the role. */
+  name: string;
+}
+export const DatabaseGenerateCredentialsRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    database_mount_path: S.String.pipe(T.Label()),
+    name: S.String.pipe(T.Label()),
+  }).pipe(
+    T.Http({
+      method: "GET",
+      uri: "/{database_mount_path}/creds/{name}",
+      code: 200,
+    }),
+  ),
+).annotate({
+  identifier: "DatabaseGenerateCredentialsRequest",
+}) as any as S.Schema<DatabaseGenerateCredentialsRequest>;
+
+export interface DatabaseGenerateCredentialsResponse {}
+export const DatabaseGenerateCredentialsResponse = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({}),
+).annotate({
+  identifier: "DatabaseGenerateCredentialsResponse",
+}) as any as S.Schema<DatabaseGenerateCredentialsResponse>;
+
+export type DatabaseListConnectionsRequestList = "true";
+export const DatabaseListConnectionsRequestList = S.String;
+
+export interface DatabaseListConnectionsRequest {
+  /** Path that the backend was mounted at */
+  database_mount_path: string;
+  /** Must be set to `true` */
+  list: DatabaseListConnectionsRequestList | (string & {});
+}
+export const DatabaseListConnectionsRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    database_mount_path: S.String.pipe(T.Label()),
+    list: DatabaseListConnectionsRequestList.pipe(T.Query()),
+  }).pipe(
+    T.Http({ method: "GET", uri: "/{database_mount_path}/config", code: 200 }),
+  ),
+).annotate({
+  identifier: "DatabaseListConnectionsRequest",
+}) as any as S.Schema<DatabaseListConnectionsRequest>;
+
+export interface DatabaseListConnectionsResponse {}
+export const DatabaseListConnectionsResponse = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({}),
+).annotate({
+  identifier: "DatabaseListConnectionsResponse",
+}) as any as S.Schema<DatabaseListConnectionsResponse>;
+
+export type DatabaseListRolesRequestList = "true";
+export const DatabaseListRolesRequestList = S.String;
+
+export interface DatabaseListRolesRequest {
+  /** Path that the backend was mounted at */
+  database_mount_path: string;
+  /** Must be set to `true` */
+  list: DatabaseListRolesRequestList | (string & {});
+}
+export const DatabaseListRolesRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    database_mount_path: S.String.pipe(T.Label()),
+    list: DatabaseListRolesRequestList.pipe(T.Query()),
+  }).pipe(
+    T.Http({ method: "GET", uri: "/{database_mount_path}/roles", code: 200 }),
+  ),
+).annotate({
+  identifier: "DatabaseListRolesRequest",
+}) as any as S.Schema<DatabaseListRolesRequest>;
+
+export interface DatabaseListRolesResponse {}
+export const DatabaseListRolesResponse = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({}),
+).annotate({
+  identifier: "DatabaseListRolesResponse",
+}) as any as S.Schema<DatabaseListRolesResponse>;
+
+export type DatabaseListStaticRolesRequestList = "true";
+export const DatabaseListStaticRolesRequestList = S.String;
+
+export interface DatabaseListStaticRolesRequest {
+  /** Path that the backend was mounted at */
+  database_mount_path: string;
+  /** Must be set to `true` */
+  list: DatabaseListStaticRolesRequestList | (string & {});
+}
+export const DatabaseListStaticRolesRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    database_mount_path: S.String.pipe(T.Label()),
+    list: DatabaseListStaticRolesRequestList.pipe(T.Query()),
+  }).pipe(
+    T.Http({
+      method: "GET",
+      uri: "/{database_mount_path}/static-roles",
+      code: 200,
+    }),
+  ),
+).annotate({
+  identifier: "DatabaseListStaticRolesRequest",
+}) as any as S.Schema<DatabaseListStaticRolesRequest>;
+
+export interface DatabaseListStaticRolesResponse {}
+export const DatabaseListStaticRolesResponse = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({}),
+).annotate({
+  identifier: "DatabaseListStaticRolesResponse",
+}) as any as S.Schema<DatabaseListStaticRolesResponse>;
+
+export interface DatabaseReadConnectionConfigurationRequest {
+  /** Path that the backend was mounted at */
+  database_mount_path: string;
+  /** Name of this database connection */
+  name: string;
+}
+export const DatabaseReadConnectionConfigurationRequest =
+  /*@__PURE__*/ S.suspend(() =>
+    S.Struct({
+      database_mount_path: S.String.pipe(T.Label()),
+      name: S.String.pipe(T.Label()),
+    }).pipe(
+      T.Http({
+        method: "GET",
+        uri: "/{database_mount_path}/config/{name}",
+        code: 200,
+      }),
+    ),
+  ).annotate({
+    identifier: "DatabaseReadConnectionConfigurationRequest",
+  }) as any as S.Schema<DatabaseReadConnectionConfigurationRequest>;
+
+export interface DatabaseReadConnectionConfigurationResponse {}
+export const DatabaseReadConnectionConfigurationResponse =
+  /*@__PURE__*/ S.suspend(() => S.Struct({})).annotate({
+    identifier: "DatabaseReadConnectionConfigurationResponse",
+  }) as any as S.Schema<DatabaseReadConnectionConfigurationResponse>;
+
+export interface DatabaseReadRoleRequest {
+  /** Path that the backend was mounted at */
+  database_mount_path: string;
+  /** Name of the role. */
+  name: string;
+}
+export const DatabaseReadRoleRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    database_mount_path: S.String.pipe(T.Label()),
+    name: S.String.pipe(T.Label()),
+  }).pipe(
+    T.Http({
+      method: "GET",
+      uri: "/{database_mount_path}/roles/{name}",
+      code: 200,
+    }),
+  ),
+).annotate({
+  identifier: "DatabaseReadRoleRequest",
+}) as any as S.Schema<DatabaseReadRoleRequest>;
+
+export interface DatabaseReadRoleResponse {}
+export const DatabaseReadRoleResponse = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({}),
+).annotate({
+  identifier: "DatabaseReadRoleResponse",
+}) as any as S.Schema<DatabaseReadRoleResponse>;
+
+export interface DatabaseReadStaticRoleRequest {
+  /** Path that the backend was mounted at */
+  database_mount_path: string;
+  /** Name of the role. */
+  name: string;
+}
+export const DatabaseReadStaticRoleRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    database_mount_path: S.String.pipe(T.Label()),
+    name: S.String.pipe(T.Label()),
+  }).pipe(
+    T.Http({
+      method: "GET",
+      uri: "/{database_mount_path}/static-roles/{name}",
+      code: 200,
+    }),
+  ),
+).annotate({
+  identifier: "DatabaseReadStaticRoleRequest",
+}) as any as S.Schema<DatabaseReadStaticRoleRequest>;
+
+export interface DatabaseReadStaticRoleResponse {}
+export const DatabaseReadStaticRoleResponse = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({}),
+).annotate({
+  identifier: "DatabaseReadStaticRoleResponse",
+}) as any as S.Schema<DatabaseReadStaticRoleResponse>;
+
+export interface DatabaseReadStaticRoleCredentialsRequest {
+  /** Path that the backend was mounted at */
+  database_mount_path: string;
+  /** Name of the static role. */
+  name: string;
+}
+export const DatabaseReadStaticRoleCredentialsRequest = /*@__PURE__*/ S.suspend(
+  () =>
+    S.Struct({
+      database_mount_path: S.String.pipe(T.Label()),
+      name: S.String.pipe(T.Label()),
+    }).pipe(
+      T.Http({
+        method: "GET",
+        uri: "/{database_mount_path}/static-creds/{name}",
+        code: 200,
+      }),
+    ),
+).annotate({
+  identifier: "DatabaseReadStaticRoleCredentialsRequest",
+}) as any as S.Schema<DatabaseReadStaticRoleCredentialsRequest>;
+
+export interface DatabaseReadStaticRoleCredentialsResponse {}
+export const DatabaseReadStaticRoleCredentialsResponse =
+  /*@__PURE__*/ S.suspend(() => S.Struct({})).annotate({
+    identifier: "DatabaseReadStaticRoleCredentialsResponse",
+  }) as any as S.Schema<DatabaseReadStaticRoleCredentialsResponse>;
+
+export interface DatabaseResetConnectionRequest {
+  /** Path that the backend was mounted at */
+  database_mount_path: string;
+  /** Name of this database connection */
+  name: string;
+}
+export const DatabaseResetConnectionRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    database_mount_path: S.String.pipe(T.Label()),
+    name: S.String.pipe(T.Label()),
+  }).pipe(
+    T.Http({
+      method: "POST",
+      uri: "/{database_mount_path}/reset/{name}",
+      code: 200,
+    }),
+  ),
+).annotate({
+  identifier: "DatabaseResetConnectionRequest",
+}) as any as S.Schema<DatabaseResetConnectionRequest>;
+
+export interface DatabaseResetConnectionResponse {}
+export const DatabaseResetConnectionResponse = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({}),
+).annotate({
+  identifier: "DatabaseResetConnectionResponse",
+}) as any as S.Schema<DatabaseResetConnectionResponse>;
+
+export interface DatabaseRotateRootCredentialsRequest {
+  /** Path that the backend was mounted at */
+  database_mount_path: string;
+  /** Name of this database connection */
+  name: string;
+}
+export const DatabaseRotateRootCredentialsRequest = /*@__PURE__*/ S.suspend(
+  () =>
+    S.Struct({
+      database_mount_path: S.String.pipe(T.Label()),
+      name: S.String.pipe(T.Label()),
+    }).pipe(
+      T.Http({
+        method: "POST",
+        uri: "/{database_mount_path}/rotate-root/{name}",
+        code: 200,
+      }),
+    ),
+).annotate({
+  identifier: "DatabaseRotateRootCredentialsRequest",
+}) as any as S.Schema<DatabaseRotateRootCredentialsRequest>;
+
+export interface DatabaseRotateRootCredentialsResponse {}
+export const DatabaseRotateRootCredentialsResponse = /*@__PURE__*/ S.suspend(
+  () => S.Struct({}),
+).annotate({
+  identifier: "DatabaseRotateRootCredentialsResponse",
+}) as any as S.Schema<DatabaseRotateRootCredentialsResponse>;
+
+export interface DatabaseRotateStaticRoleCredentialsRequest {
+  /** Path that the backend was mounted at */
+  database_mount_path: string;
+  /** Name of the static role */
+  name: string;
+}
+export const DatabaseRotateStaticRoleCredentialsRequest =
+  /*@__PURE__*/ S.suspend(() =>
+    S.Struct({
+      database_mount_path: S.String.pipe(T.Label()),
+      name: S.String.pipe(T.Label()),
+    }).pipe(
+      T.Http({
+        method: "POST",
+        uri: "/{database_mount_path}/rotate-role/{name}",
+        code: 200,
+      }),
+    ),
+  ).annotate({
+    identifier: "DatabaseRotateStaticRoleCredentialsRequest",
+  }) as any as S.Schema<DatabaseRotateStaticRoleCredentialsRequest>;
+
+export interface DatabaseRotateStaticRoleCredentialsResponse {}
+export const DatabaseRotateStaticRoleCredentialsResponse =
+  /*@__PURE__*/ S.suspend(() => S.Struct({})).annotate({
+    identifier: "DatabaseRotateStaticRoleCredentialsResponse",
+  }) as any as S.Schema<DatabaseRotateStaticRoleCredentialsResponse>;
+
+/** Specifies the database statements executed to create and configure a user. See the plugin's API page for more information on support and formatting for this parameter. */
+export type DatabaseWriteRoleRequestCreationStatementsList = Array<string>;
+export const DatabaseWriteRoleRequestCreationStatementsList =
+  /*@__PURE__*/ S.Array(
+    S.String,
+  ) as any as S.Schema<DatabaseWriteRoleRequestCreationStatementsList>;
+
+/** Specifies the database statements to be executed to renew a user. Not every plugin type will support this functionality. See the plugin's API page for more information on support and formatting for this parameter. */
+export type DatabaseWriteRoleRequestRenewStatementsList = Array<string>;
+export const DatabaseWriteRoleRequestRenewStatementsList =
+  /*@__PURE__*/ S.Array(
+    S.String,
+  ) as any as S.Schema<DatabaseWriteRoleRequestRenewStatementsList>;
+
+/** Specifies the database statements to be executed to revoke a user. See the plugin's API page for more information on support and formatting for this parameter. */
+export type DatabaseWriteRoleRequestRevocationStatementsList = Array<string>;
+export const DatabaseWriteRoleRequestRevocationStatementsList =
+  /*@__PURE__*/ S.Array(
+    S.String,
+  ) as any as S.Schema<DatabaseWriteRoleRequestRevocationStatementsList>;
+
+/** Specifies the database statements to be executed rollback a create operation in the event of an error. Not every plugin type will support this functionality. See the plugin's API page for more information on support and formatting for this parameter. */
+export type DatabaseWriteRoleRequestRollbackStatementsList = Array<string>;
+export const DatabaseWriteRoleRequestRollbackStatementsList =
+  /*@__PURE__*/ S.Array(
+    S.String,
+  ) as any as S.Schema<DatabaseWriteRoleRequestRollbackStatementsList>;
+
+export interface DatabaseWriteRoleRequest {
+  /** Path that the backend was mounted at */
+  database_mount_path: string;
+  /** Name of the role. */
+  name: string;
+  /** Specifies the database statements executed to create and configure a user. See the plugin's API page for more information on support and formatting for this parameter. */
+  creation_statements?: DatabaseWriteRoleRequestCreationStatementsList;
+  /** The configuration for the given credential_type. */
+  credential_config?: unknown;
+  /** The type of credential to manage. Options include: 'password', 'rsa_private_key'. Defaults to 'password'. */
+  credential_type?: string;
+  /** Name of the database this role acts on. */
+  db_name?: string;
+  /** Default ttl for role. */
+  default_ttl?: number;
+  /** Maximum time a credential is valid for */
+  max_ttl?: number;
+  /** Specifies the database statements to be executed to renew a user. Not every plugin type will support this functionality. See the plugin's API page for more information on support and formatting for this parameter. */
+  renew_statements?: DatabaseWriteRoleRequestRenewStatementsList;
+  /** Specifies the database statements to be executed to revoke a user. See the plugin's API page for more information on support and formatting for this parameter. */
+  revocation_statements?: DatabaseWriteRoleRequestRevocationStatementsList;
+  /** Specifies the database statements to be executed rollback a create operation in the event of an error. Not every plugin type will support this functionality. See the plugin's API page for more information on support and formatting for this parameter. */
+  rollback_statements?: DatabaseWriteRoleRequestRollbackStatementsList;
+}
+export const DatabaseWriteRoleRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    database_mount_path: S.String.pipe(T.Label()),
+    name: S.String.pipe(T.Label()),
+    creation_statements: S.optional(
+      DatabaseWriteRoleRequestCreationStatementsList,
+    ),
+    credential_config: S.optional(S.Unknown),
+    credential_type: S.optional(S.String),
+    db_name: S.optional(S.String),
+    default_ttl: S.optional(S.Number),
+    max_ttl: S.optional(S.Number),
+    renew_statements: S.optional(DatabaseWriteRoleRequestRenewStatementsList),
+    revocation_statements: S.optional(
+      DatabaseWriteRoleRequestRevocationStatementsList,
+    ),
+    rollback_statements: S.optional(
+      DatabaseWriteRoleRequestRollbackStatementsList,
+    ),
+  }).pipe(
+    T.Http({
+      method: "POST",
+      uri: "/{database_mount_path}/roles/{name}",
+      code: 200,
+    }),
+  ),
+).annotate({
+  identifier: "DatabaseWriteRoleRequest",
+}) as any as S.Schema<DatabaseWriteRoleRequest>;
+
+export interface DatabaseWriteRoleResponse {}
+export const DatabaseWriteRoleResponse = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({}),
+).annotate({
+  identifier: "DatabaseWriteRoleResponse",
+}) as any as S.Schema<DatabaseWriteRoleResponse>;
+
+/** Specifies the database statements to be executed to rotate the accounts credentials. Not every plugin type will support this functionality. See the plugin's API page for more information on support and formatting for this parameter. */
+export type DatabaseWriteStaticRoleRequestRotationStatementsList =
+  Array<string>;
+export const DatabaseWriteStaticRoleRequestRotationStatementsList =
+  /*@__PURE__*/ S.Array(
+    S.String,
+  ) as any as S.Schema<DatabaseWriteStaticRoleRequestRotationStatementsList>;
+
+export interface DatabaseWriteStaticRoleRequest {
+  /** Path that the backend was mounted at */
+  database_mount_path: string;
+  /** Name of the role. */
+  name: string;
+  /** The configuration for the given credential_type. */
+  credential_config?: unknown;
+  /** The type of credential to manage. Options include: 'password', 'rsa_private_key'. Defaults to 'password'. */
+  credential_type?: string;
+  /** Name of the database this role acts on. */
+  db_name?: string;
+  /** Period for automatic credential rotation of the given username. Not valid unless used with "username". */
+  rotation_period?: number;
+  /** Specifies the database statements to be executed to rotate the accounts credentials. Not every plugin type will support this functionality. See the plugin's API page for more information on support and formatting for this parameter. */
+  rotation_statements?: DatabaseWriteStaticRoleRequestRotationStatementsList;
+  /** Name of the static user account for OpenBao to manage. Requires "rotation_period" to be specified */
+  username?: string;
+}
+export const DatabaseWriteStaticRoleRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    database_mount_path: S.String.pipe(T.Label()),
+    name: S.String.pipe(T.Label()),
+    credential_config: S.optional(S.Unknown),
+    credential_type: S.optional(S.String),
+    db_name: S.optional(S.String),
+    rotation_period: S.optional(S.Number),
+    rotation_statements: S.optional(
+      DatabaseWriteStaticRoleRequestRotationStatementsList,
+    ),
+    username: S.optional(S.String),
+  }).pipe(
+    T.Http({
+      method: "POST",
+      uri: "/{database_mount_path}/static-roles/{name}",
+      code: 200,
+    }),
+  ),
+).annotate({
+  identifier: "DatabaseWriteStaticRoleRequest",
+}) as any as S.Schema<DatabaseWriteStaticRoleRequest>;
+
+export interface DatabaseWriteStaticRoleResponse {}
+export const DatabaseWriteStaticRoleResponse = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({}),
+).annotate({
+  identifier: "DatabaseWriteStaticRoleResponse",
+}) as any as S.Schema<DatabaseWriteStaticRoleResponse>;
+
+export type DatabaseConfigureConnectionError = OpenBaoOpError;
+export const databaseConfigureConnection: API.OperationMethod<
+  DatabaseConfigureConnectionRequest,
+  DatabaseConfigureConnectionResponse,
+  DatabaseConfigureConnectionError,
+  OpenBaoOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: DatabaseConfigureConnectionRequest,
+  output: DatabaseConfigureConnectionResponse,
+  errors: [],
+  protocol: OpenBaoProtocol,
+  retry: Retry.Retry,
+}));
+
+export type DatabaseDeleteConnectionConfigurationError = OpenBaoOpError;
+export const databaseDeleteConnectionConfiguration: API.OperationMethod<
+  DatabaseDeleteConnectionConfigurationRequest,
+  DatabaseDeleteConnectionConfigurationResponse,
+  DatabaseDeleteConnectionConfigurationError,
+  OpenBaoOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: DatabaseDeleteConnectionConfigurationRequest,
+  output: DatabaseDeleteConnectionConfigurationResponse,
+  errors: [],
+  protocol: OpenBaoProtocol,
+  retry: Retry.Retry,
+}));
+
+export type DatabaseDeleteRoleError = OpenBaoOpError;
+export const databaseDeleteRole: API.OperationMethod<
+  DatabaseDeleteRoleRequest,
+  DatabaseDeleteRoleResponse,
+  DatabaseDeleteRoleError,
+  OpenBaoOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: DatabaseDeleteRoleRequest,
+  output: DatabaseDeleteRoleResponse,
+  errors: [],
+  protocol: OpenBaoProtocol,
+  retry: Retry.Retry,
+}));
+
+export type DatabaseDeleteStaticRoleError = OpenBaoOpError;
+export const databaseDeleteStaticRole: API.OperationMethod<
+  DatabaseDeleteStaticRoleRequest,
+  DatabaseDeleteStaticRoleResponse,
+  DatabaseDeleteStaticRoleError,
+  OpenBaoOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: DatabaseDeleteStaticRoleRequest,
+  output: DatabaseDeleteStaticRoleResponse,
+  errors: [],
+  protocol: OpenBaoProtocol,
+  retry: Retry.Retry,
+}));
+
+export type DatabaseGenerateCredentialsError = OpenBaoOpError;
+export const databaseGenerateCredentials: API.OperationMethod<
+  DatabaseGenerateCredentialsRequest,
+  DatabaseGenerateCredentialsResponse,
+  DatabaseGenerateCredentialsError,
+  OpenBaoOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: DatabaseGenerateCredentialsRequest,
+  output: DatabaseGenerateCredentialsResponse,
+  errors: [],
+  protocol: OpenBaoProtocol,
+  retry: Retry.Retry,
+}));
+
+export type DatabaseListConnectionsError = OpenBaoOpError;
+export const databaseListConnections: API.OperationMethod<
+  DatabaseListConnectionsRequest,
+  DatabaseListConnectionsResponse,
+  DatabaseListConnectionsError,
+  OpenBaoOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: DatabaseListConnectionsRequest,
+  output: DatabaseListConnectionsResponse,
+  errors: [],
+  protocol: OpenBaoProtocol,
+  retry: Retry.Retry,
+}));
+
+export type DatabaseListRolesError = OpenBaoOpError;
+export const databaseListRoles: API.OperationMethod<
+  DatabaseListRolesRequest,
+  DatabaseListRolesResponse,
+  DatabaseListRolesError,
+  OpenBaoOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: DatabaseListRolesRequest,
+  output: DatabaseListRolesResponse,
+  errors: [],
+  protocol: OpenBaoProtocol,
+  retry: Retry.Retry,
+}));
+
+export type DatabaseListStaticRolesError = OpenBaoOpError;
+export const databaseListStaticRoles: API.OperationMethod<
+  DatabaseListStaticRolesRequest,
+  DatabaseListStaticRolesResponse,
+  DatabaseListStaticRolesError,
+  OpenBaoOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: DatabaseListStaticRolesRequest,
+  output: DatabaseListStaticRolesResponse,
+  errors: [],
+  protocol: OpenBaoProtocol,
+  retry: Retry.Retry,
+}));
+
+export type DatabaseReadConnectionConfigurationError = OpenBaoOpError;
+export const databaseReadConnectionConfiguration: API.OperationMethod<
+  DatabaseReadConnectionConfigurationRequest,
+  DatabaseReadConnectionConfigurationResponse,
+  DatabaseReadConnectionConfigurationError,
+  OpenBaoOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: DatabaseReadConnectionConfigurationRequest,
+  output: DatabaseReadConnectionConfigurationResponse,
+  errors: [],
+  protocol: OpenBaoProtocol,
+  retry: Retry.Retry,
+}));
+
+export type DatabaseReadRoleError = OpenBaoOpError;
+export const databaseReadRole: API.OperationMethod<
+  DatabaseReadRoleRequest,
+  DatabaseReadRoleResponse,
+  DatabaseReadRoleError,
+  OpenBaoOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: DatabaseReadRoleRequest,
+  output: DatabaseReadRoleResponse,
+  errors: [],
+  protocol: OpenBaoProtocol,
+  retry: Retry.Retry,
+}));
+
+export type DatabaseReadStaticRoleError = OpenBaoOpError;
+export const databaseReadStaticRole: API.OperationMethod<
+  DatabaseReadStaticRoleRequest,
+  DatabaseReadStaticRoleResponse,
+  DatabaseReadStaticRoleError,
+  OpenBaoOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: DatabaseReadStaticRoleRequest,
+  output: DatabaseReadStaticRoleResponse,
+  errors: [],
+  protocol: OpenBaoProtocol,
+  retry: Retry.Retry,
+}));
+
+export type DatabaseReadStaticRoleCredentialsError = OpenBaoOpError;
+export const databaseReadStaticRoleCredentials: API.OperationMethod<
+  DatabaseReadStaticRoleCredentialsRequest,
+  DatabaseReadStaticRoleCredentialsResponse,
+  DatabaseReadStaticRoleCredentialsError,
+  OpenBaoOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: DatabaseReadStaticRoleCredentialsRequest,
+  output: DatabaseReadStaticRoleCredentialsResponse,
+  errors: [],
+  protocol: OpenBaoProtocol,
+  retry: Retry.Retry,
+}));
+
+export type DatabaseResetConnectionError = OpenBaoOpError;
+export const databaseResetConnection: API.OperationMethod<
+  DatabaseResetConnectionRequest,
+  DatabaseResetConnectionResponse,
+  DatabaseResetConnectionError,
+  OpenBaoOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: DatabaseResetConnectionRequest,
+  output: DatabaseResetConnectionResponse,
+  errors: [],
+  protocol: OpenBaoProtocol,
+  retry: Retry.Retry,
+}));
+
+export type DatabaseRotateRootCredentialsError = OpenBaoOpError;
+export const databaseRotateRootCredentials: API.OperationMethod<
+  DatabaseRotateRootCredentialsRequest,
+  DatabaseRotateRootCredentialsResponse,
+  DatabaseRotateRootCredentialsError,
+  OpenBaoOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: DatabaseRotateRootCredentialsRequest,
+  output: DatabaseRotateRootCredentialsResponse,
+  errors: [],
+  protocol: OpenBaoProtocol,
+  retry: Retry.Retry,
+}));
+
+export type DatabaseRotateStaticRoleCredentialsError = OpenBaoOpError;
+export const databaseRotateStaticRoleCredentials: API.OperationMethod<
+  DatabaseRotateStaticRoleCredentialsRequest,
+  DatabaseRotateStaticRoleCredentialsResponse,
+  DatabaseRotateStaticRoleCredentialsError,
+  OpenBaoOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: DatabaseRotateStaticRoleCredentialsRequest,
+  output: DatabaseRotateStaticRoleCredentialsResponse,
+  errors: [],
+  protocol: OpenBaoProtocol,
+  retry: Retry.Retry,
+}));
+
+export type DatabaseWriteRoleError = OpenBaoOpError;
+export const databaseWriteRole: API.OperationMethod<
+  DatabaseWriteRoleRequest,
+  DatabaseWriteRoleResponse,
+  DatabaseWriteRoleError,
+  OpenBaoOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: DatabaseWriteRoleRequest,
+  output: DatabaseWriteRoleResponse,
+  errors: [],
+  protocol: OpenBaoProtocol,
+  retry: Retry.Retry,
+}));
+
+export type DatabaseWriteStaticRoleError = OpenBaoOpError;
+export const databaseWriteStaticRole: API.OperationMethod<
+  DatabaseWriteStaticRoleRequest,
+  DatabaseWriteStaticRoleResponse,
+  DatabaseWriteStaticRoleError,
+  OpenBaoOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: DatabaseWriteStaticRoleRequest,
+  output: DatabaseWriteStaticRoleResponse,
+  errors: [],
+  protocol: OpenBaoProtocol,
+  retry: Retry.Retry,
+}));