@homeflare/distilled-openbao 0.2.0

package/src/services/leader.ts

@@ -0,0 +1,57 @@
+// AUTO-GENERATED by scripts/generate.ts from .generated-specs (specs/spec-mirror-openbao, generated — see fetch-specs.ts). Do not edit.
+import * as S from "@distilled.cloud/core/schema";
+import * as API from "@distilled.cloud/core/api";
+import * as T from "../traits.ts";
+import {
+  OpenBaoProtocol,
+  type OpenBaoOpError,
+  type OpenBaoOpContext,
+} from "../protocol.ts";
+import * as Retry from "../retry.ts";
+
+export type { OpenBaoOpError, OpenBaoOpContext };
+
+export interface LeaderStatusRequest {}
+export const LeaderStatusRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({}).pipe(T.Http({ method: "GET", uri: "/sys/leader", code: 200 })),
+).annotate({
+  identifier: "LeaderStatusRequest",
+}) as any as S.Schema<LeaderStatusRequest>;
+
+export interface LeaderStatusResponse {
+  active_time?: string;
+  ha_enabled?: boolean;
+  is_self?: boolean;
+  leader_address?: string;
+  leader_cluster_address?: string;
+  raft_applied_index?: number;
+  raft_committed_index?: number;
+}
+export const LeaderStatusResponse = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    active_time: S.optional(S.String),
+    ha_enabled: S.optional(S.Boolean),
+    is_self: S.optional(S.Boolean),
+    leader_address: S.optional(S.String),
+    leader_cluster_address: S.optional(S.String),
+    raft_applied_index: S.optional(S.Number),
+    raft_committed_index: S.optional(S.Number),
+  }),
+).annotate({
+  identifier: "LeaderStatusResponse",
+}) as any as S.Schema<LeaderStatusResponse>;
+
+export type LeaderStatusError = OpenBaoOpError;
+/** Returns the high availability status and current leader instance of OpenBao. */
+export const leaderStatus: API.OperationMethod<
+  LeaderStatusRequest,
+  LeaderStatusResponse,
+  LeaderStatusError,
+  OpenBaoOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: LeaderStatusRequest,
+  output: LeaderStatusResponse,
+  errors: [],
+  protocol: OpenBaoProtocol,
+  retry: Retry.Retry,
+}));

package/src/services/leases.ts

@@ -0,0 +1,532 @@
+// AUTO-GENERATED by scripts/generate.ts from .generated-specs (specs/spec-mirror-openbao, generated — see fetch-specs.ts). Do not edit.
+import * as S from "@distilled.cloud/core/schema";
+import * as API from "@distilled.cloud/core/api";
+import * as T from "../traits.ts";
+import {
+  OpenBaoProtocol,
+  type OpenBaoOpError,
+  type OpenBaoOpContext,
+} from "../protocol.ts";
+import * as Retry from "../retry.ts";
+
+export type { OpenBaoOpError, OpenBaoOpContext };
+
+export interface LeasesCountRequest {}
+export const LeasesCountRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({}).pipe(
+    T.Http({ method: "GET", uri: "/sys/leases/count", code: 200 }),
+  ),
+).annotate({
+  identifier: "LeasesCountRequest",
+}) as any as S.Schema<LeasesCountRequest>;
+
+export interface LeasesCountResponse {
+  /** Number of matching leases per mount */
+  counts?: number;
+  /** Number of matching leases */
+  lease_count?: number;
+}
+export const LeasesCountResponse = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    counts: S.optional(S.Number),
+    lease_count: S.optional(S.Number),
+  }),
+).annotate({
+  identifier: "LeasesCountResponse",
+}) as any as S.Schema<LeasesCountResponse>;
+
+export interface LeasesForceRevokeLeaseWithPrefix2Request {
+  /** The path to revoke keys under. Example: "prod/aws/ops" */
+  prefix: string;
+}
+export const LeasesForceRevokeLeaseWithPrefix2Request = /*@__PURE__*/ S.suspend(
+  () =>
+    S.Struct({
+      prefix: S.String.pipe(T.Label()),
+    }).pipe(
+      T.Http({
+        method: "POST",
+        uri: "/sys/leases/revoke-force/{prefix}",
+        code: 200,
+      }),
+    ),
+).annotate({
+  identifier: "LeasesForceRevokeLeaseWithPrefix2Request",
+}) as any as S.Schema<LeasesForceRevokeLeaseWithPrefix2Request>;
+
+export interface LeasesForceRevokeLeaseWithPrefix2Response {}
+export const LeasesForceRevokeLeaseWithPrefix2Response =
+  /*@__PURE__*/ S.suspend(() => S.Struct({})).annotate({
+    identifier: "LeasesForceRevokeLeaseWithPrefix2Response",
+  }) as any as S.Schema<LeasesForceRevokeLeaseWithPrefix2Response>;
+
+export type LeasesLookUpRequestList = "true";
+export const LeasesLookUpRequestList = S.String;
+
+export interface LeasesLookUpRequest {
+  /** Must be set to `true` */
+  list: LeasesLookUpRequestList | (string & {});
+}
+export const LeasesLookUpRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    list: LeasesLookUpRequestList.pipe(T.Query()),
+  }).pipe(T.Http({ method: "GET", uri: "/sys/leases/lookup/", code: 200 })),
+).annotate({
+  identifier: "LeasesLookUpRequest",
+}) as any as S.Schema<LeasesLookUpRequest>;
+
+/** A list of lease ids */
+export type LeasesLookUpResponseKeysList = Array<string>;
+export const LeasesLookUpResponseKeysList = /*@__PURE__*/ S.Array(
+  S.String,
+) as any as S.Schema<LeasesLookUpResponseKeysList>;
+
+export interface LeasesLookUpResponse {
+  /** A list of lease ids */
+  keys?: LeasesLookUpResponseKeysList;
+}
+export const LeasesLookUpResponse = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    keys: S.optional(LeasesLookUpResponseKeysList),
+  }),
+).annotate({
+  identifier: "LeasesLookUpResponse",
+}) as any as S.Schema<LeasesLookUpResponse>;
+
+export type LeasesLookUpWithPrefixRequestList = "true";
+export const LeasesLookUpWithPrefixRequestList = S.String;
+
+export interface LeasesLookUpWithPrefixRequest {
+  /** The path to list leases under. Example: "aws/creds/deploy" */
+  prefix: string;
+  /** Must be set to `true` */
+  list: LeasesLookUpWithPrefixRequestList | (string & {});
+}
+export const LeasesLookUpWithPrefixRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    prefix: S.String.pipe(T.Label()),
+    list: LeasesLookUpWithPrefixRequestList.pipe(T.Query()),
+  }).pipe(
+    T.Http({ method: "GET", uri: "/sys/leases/lookup/{prefix}", code: 200 }),
+  ),
+).annotate({
+  identifier: "LeasesLookUpWithPrefixRequest",
+}) as any as S.Schema<LeasesLookUpWithPrefixRequest>;
+
+/** A list of lease ids */
+export type LeasesLookUpWithPrefixResponseKeysList = Array<string>;
+export const LeasesLookUpWithPrefixResponseKeysList = /*@__PURE__*/ S.Array(
+  S.String,
+) as any as S.Schema<LeasesLookUpWithPrefixResponseKeysList>;
+
+export interface LeasesLookUpWithPrefixResponse {
+  /** A list of lease ids */
+  keys?: LeasesLookUpWithPrefixResponseKeysList;
+}
+export const LeasesLookUpWithPrefixResponse = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    keys: S.optional(LeasesLookUpWithPrefixResponseKeysList),
+  }),
+).annotate({
+  identifier: "LeasesLookUpWithPrefixResponse",
+}) as any as S.Schema<LeasesLookUpWithPrefixResponse>;
+
+export interface LeasesRenewLeaseRequest {
+  /** The lease identifier to renew. This is included with a lease. */
+  url_lease_id: string;
+  /** The desired increment in seconds to the lease */
+  increment?: number;
+  /** The lease identifier to renew. This is included with a lease. */
+  lease_id?: string;
+}
+export const LeasesRenewLeaseRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    url_lease_id: S.String.pipe(T.Label()),
+    increment: S.optional(S.Number),
+    lease_id: S.optional(S.String),
+  }).pipe(
+    T.Http({
+      method: "POST",
+      uri: "/sys/leases/renew/{url_lease_id}",
+      code: 200,
+    }),
+  ),
+).annotate({
+  identifier: "LeasesRenewLeaseRequest",
+}) as any as S.Schema<LeasesRenewLeaseRequest>;
+
+export interface LeasesRenewLeaseResponse {}
+export const LeasesRenewLeaseResponse = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({}),
+).annotate({
+  identifier: "LeasesRenewLeaseResponse",
+}) as any as S.Schema<LeasesRenewLeaseResponse>;
+
+export interface LeasesRenewLease2Request {
+  /** The desired increment in seconds to the lease */
+  increment?: number;
+  /** The lease identifier to renew. This is included with a lease. */
+  lease_id?: string;
+  /** The lease identifier to renew. This is included with a lease. */
+  url_lease_id?: string;
+}
+export const LeasesRenewLease2Request = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    increment: S.optional(S.Number),
+    lease_id: S.optional(S.String),
+    url_lease_id: S.optional(S.String),
+  }).pipe(T.Http({ method: "POST", uri: "/sys/leases/renew", code: 200 })),
+).annotate({
+  identifier: "LeasesRenewLease2Request",
+}) as any as S.Schema<LeasesRenewLease2Request>;
+
+export interface LeasesRenewLease2Response {}
+export const LeasesRenewLease2Response = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({}),
+).annotate({
+  identifier: "LeasesRenewLease2Response",
+}) as any as S.Schema<LeasesRenewLease2Response>;
+
+export interface LeasesRevokeLease2Request {
+  /** The lease identifier to renew. This is included with a lease. */
+  lease_id?: string;
+  /** Whether or not to perform the revocation synchronously */
+  sync?: boolean;
+  /** The lease identifier to renew. This is included with a lease. */
+  url_lease_id?: string;
+}
+export const LeasesRevokeLease2Request = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    lease_id: S.optional(S.String),
+    sync: S.optional(S.Boolean),
+    url_lease_id: S.optional(S.String),
+  }).pipe(T.Http({ method: "POST", uri: "/sys/leases/revoke", code: 200 })),
+).annotate({
+  identifier: "LeasesRevokeLease2Request",
+}) as any as S.Schema<LeasesRevokeLease2Request>;
+
+export interface LeasesRevokeLease2Response {}
+export const LeasesRevokeLease2Response = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({}),
+).annotate({
+  identifier: "LeasesRevokeLease2Response",
+}) as any as S.Schema<LeasesRevokeLease2Response>;
+
+export interface LeasesTidyRequest {}
+export const LeasesTidyRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({}).pipe(
+    T.Http({ method: "POST", uri: "/sys/leases/tidy", code: 200 }),
+  ),
+).annotate({
+  identifier: "LeasesTidyRequest",
+}) as any as S.Schema<LeasesTidyRequest>;
+
+export interface LeasesTidyResponse {}
+export const LeasesTidyResponse = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({}),
+).annotate({
+  identifier: "LeasesTidyResponse",
+}) as any as S.Schema<LeasesTidyResponse>;
+
+export interface ListLeasesRequest {}
+export const ListLeasesRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({}).pipe(T.Http({ method: "GET", uri: "/sys/leases", code: 200 })),
+).annotate({
+  identifier: "ListLeasesRequest",
+}) as any as S.Schema<ListLeasesRequest>;
+
+export interface LeasesListResponse {
+  /** Number of matching leases per mount */
+  counts?: number;
+  /** Number of matching leases */
+  lease_count?: number;
+}
+export const LeasesListResponse = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    counts: S.optional(S.Number),
+    lease_count: S.optional(S.Number),
+  }),
+).annotate({
+  identifier: "LeasesListResponse",
+}) as any as S.Schema<LeasesListResponse>;
+
+export interface ReadLeaseRequest {
+  /** The lease identifier to renew. This is included with a lease. */
+  lease_id?: string;
+}
+export const ReadLeaseRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    lease_id: S.optional(S.String),
+  }).pipe(T.Http({ method: "POST", uri: "/sys/leases/lookup", code: 200 })),
+).annotate({
+  identifier: "ReadLeaseRequest",
+}) as any as S.Schema<ReadLeaseRequest>;
+
+export interface LeasesReadLeaseResponse {
+  /** Optional lease expiry time */
+  expire_time?: string;
+  /** Lease id */
+  id?: string;
+  /** Timestamp for the lease's issue time */
+  issue_time?: string;
+  /** Optional Timestamp of the last time the lease was renewed */
+  last_renewal?: string;
+  /** Path of the namespace of the lease */
+  namespace_path?: string;
+  /** Lease path (will start with the mount path) */
+  path?: string;
+  /** True if the lease is able to be renewed */
+  renewable?: boolean;
+  /** Details about errors during last time revocation was tried (if any) */
+  revoke_error?: string;
+  /** Time to Live set for the lease, returns 0 if unset */
+  ttl?: number;
+}
+export const LeasesReadLeaseResponse = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    expire_time: S.optional(S.String),
+    id: S.optional(S.String),
+    issue_time: S.optional(S.String),
+    last_renewal: S.optional(S.String),
+    namespace_path: S.optional(S.String),
+    path: S.optional(S.String),
+    renewable: S.optional(S.Boolean),
+    revoke_error: S.optional(S.String),
+    ttl: S.optional(S.Number),
+  }),
+).annotate({
+  identifier: "LeasesReadLeaseResponse",
+}) as any as S.Schema<LeasesReadLeaseResponse>;
+
+export interface RevokeLeaseRequest {
+  /** The lease identifier to renew. This is included with a lease. */
+  url_lease_id: string;
+  /** The lease identifier to renew. This is included with a lease. */
+  lease_id?: string;
+  /** Whether or not to perform the revocation synchronously */
+  sync?: boolean;
+}
+export const RevokeLeaseRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    url_lease_id: S.String.pipe(T.Label()),
+    lease_id: S.optional(S.String),
+    sync: S.optional(S.Boolean),
+  }).pipe(
+    T.Http({
+      method: "POST",
+      uri: "/sys/leases/revoke/{url_lease_id}",
+      code: 200,
+    }),
+  ),
+).annotate({
+  identifier: "RevokeLeaseRequest",
+}) as any as S.Schema<RevokeLeaseRequest>;
+
+export interface RevokeLeaseResponse {}
+export const RevokeLeaseResponse = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({}),
+).annotate({
+  identifier: "RevokeLeaseResponse",
+}) as any as S.Schema<RevokeLeaseResponse>;
+
+export interface RevokeLeaseWithPrefix2Request {
+  /** The path to revoke keys under. Example: "prod/aws/ops" */
+  prefix: string;
+  /** Whether or not to perform the revocation synchronously */
+  sync?: boolean;
+}
+export const RevokeLeaseWithPrefix2Request = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    prefix: S.String.pipe(T.Label()),
+    sync: S.optional(S.Boolean),
+  }).pipe(
+    T.Http({
+      method: "POST",
+      uri: "/sys/leases/revoke-prefix/{prefix}",
+      code: 200,
+    }),
+  ),
+).annotate({
+  identifier: "RevokeLeaseWithPrefix2Request",
+}) as any as S.Schema<RevokeLeaseWithPrefix2Request>;
+
+export interface RevokeLeaseWithPrefix2Response {}
+export const RevokeLeaseWithPrefix2Response = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({}),
+).annotate({
+  identifier: "RevokeLeaseWithPrefix2Response",
+}) as any as S.Schema<RevokeLeaseWithPrefix2Response>;
+
+export type LeasesCountError = OpenBaoOpError;
+export const leasesCount: API.OperationMethod<
+  LeasesCountRequest,
+  LeasesCountResponse,
+  LeasesCountError,
+  OpenBaoOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: LeasesCountRequest,
+  output: LeasesCountResponse,
+  errors: [],
+  protocol: OpenBaoProtocol,
+  retry: Retry.Retry,
+}));
+
+export type LeasesForceRevokeLeaseWithPrefix2Error = OpenBaoOpError;
+/** Revokes all secrets or tokens generated under a given prefix immediately Unlike `/sys/leases/revoke-prefix`, this path ignores backend errors encountered during revocation. This is potentially very dangerous and should only be used in specific emergency situations where errors in the backend or the connected backend service prevent normal revocation. By ignoring these errors, OpenBao abdicates responsibility for ensuring that the issued credentials or secrets are properly revoked and/or cleaned up. Access to this endpoint should be tightly controlled. */
+export const leasesForceRevokeLeaseWithPrefix2: API.OperationMethod<
+  LeasesForceRevokeLeaseWithPrefix2Request,
+  LeasesForceRevokeLeaseWithPrefix2Response,
+  LeasesForceRevokeLeaseWithPrefix2Error,
+  OpenBaoOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: LeasesForceRevokeLeaseWithPrefix2Request,
+  output: LeasesForceRevokeLeaseWithPrefix2Response,
+  errors: [],
+  protocol: OpenBaoProtocol,
+  retry: Retry.Retry,
+}));
+
+export type LeasesLookUpError = OpenBaoOpError;
+export const leasesLookUp: API.OperationMethod<
+  LeasesLookUpRequest,
+  LeasesLookUpResponse,
+  LeasesLookUpError,
+  OpenBaoOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: LeasesLookUpRequest,
+  output: LeasesLookUpResponse,
+  errors: [],
+  protocol: OpenBaoProtocol,
+  retry: Retry.Retry,
+}));
+
+export type LeasesLookUpWithPrefixError = OpenBaoOpError;
+export const leasesLookUpWithPrefix: API.OperationMethod<
+  LeasesLookUpWithPrefixRequest,
+  LeasesLookUpWithPrefixResponse,
+  LeasesLookUpWithPrefixError,
+  OpenBaoOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: LeasesLookUpWithPrefixRequest,
+  output: LeasesLookUpWithPrefixResponse,
+  errors: [],
+  protocol: OpenBaoProtocol,
+  retry: Retry.Retry,
+}));
+
+export type LeasesRenewLeaseError = OpenBaoOpError;
+/** Renews a lease, requesting to extend the lease. */
+export const leasesRenewLease: API.OperationMethod<
+  LeasesRenewLeaseRequest,
+  LeasesRenewLeaseResponse,
+  LeasesRenewLeaseError,
+  OpenBaoOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: LeasesRenewLeaseRequest,
+  output: LeasesRenewLeaseResponse,
+  errors: [],
+  protocol: OpenBaoProtocol,
+  retry: Retry.Retry,
+}));
+
+export type LeasesRenewLease2Error = OpenBaoOpError;
+/** Renews a lease, requesting to extend the lease. */
+export const leasesRenewLease2: API.OperationMethod<
+  LeasesRenewLease2Request,
+  LeasesRenewLease2Response,
+  LeasesRenewLease2Error,
+  OpenBaoOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: LeasesRenewLease2Request,
+  output: LeasesRenewLease2Response,
+  errors: [],
+  protocol: OpenBaoProtocol,
+  retry: Retry.Retry,
+}));
+
+export type LeasesRevokeLease2Error = OpenBaoOpError;
+/** Revokes a lease immediately. */
+export const leasesRevokeLease2: API.OperationMethod<
+  LeasesRevokeLease2Request,
+  LeasesRevokeLease2Response,
+  LeasesRevokeLease2Error,
+  OpenBaoOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: LeasesRevokeLease2Request,
+  output: LeasesRevokeLease2Response,
+  errors: [],
+  protocol: OpenBaoProtocol,
+  retry: Retry.Retry,
+}));
+
+export type LeasesTidyError = OpenBaoOpError;
+export const leasesTidy: API.OperationMethod<
+  LeasesTidyRequest,
+  LeasesTidyResponse,
+  LeasesTidyError,
+  OpenBaoOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: LeasesTidyRequest,
+  output: LeasesTidyResponse,
+  errors: [],
+  protocol: OpenBaoProtocol,
+  retry: Retry.Retry,
+}));
+
+export type ListLeasesError = OpenBaoOpError;
+export const listLeases: API.OperationMethod<
+  ListLeasesRequest,
+  LeasesListResponse,
+  ListLeasesError,
+  OpenBaoOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: ListLeasesRequest,
+  output: LeasesListResponse,
+  errors: [],
+  protocol: OpenBaoProtocol,
+  retry: Retry.Retry,
+}));
+
+export type ReadLeaseError = OpenBaoOpError;
+export const readLease: API.OperationMethod<
+  ReadLeaseRequest,
+  LeasesReadLeaseResponse,
+  ReadLeaseError,
+  OpenBaoOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: ReadLeaseRequest,
+  output: LeasesReadLeaseResponse,
+  errors: [],
+  protocol: OpenBaoProtocol,
+  retry: Retry.Retry,
+}));
+
+export type RevokeLeaseError = OpenBaoOpError;
+/** Revokes a lease immediately. */
+export const revokeLease: API.OperationMethod<
+  RevokeLeaseRequest,
+  RevokeLeaseResponse,
+  RevokeLeaseError,
+  OpenBaoOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: RevokeLeaseRequest,
+  output: RevokeLeaseResponse,
+  errors: [],
+  protocol: OpenBaoProtocol,
+  retry: Retry.Retry,
+}));
+
+export type RevokeLeaseWithPrefix2Error = OpenBaoOpError;
+/** Revokes all secrets (via a lease ID prefix) or tokens (via the tokens' path property) generated under a given prefix immediately. */
+export const revokeLeaseWithPrefix2: API.OperationMethod<
+  RevokeLeaseWithPrefix2Request,
+  RevokeLeaseWithPrefix2Response,
+  RevokeLeaseWithPrefix2Error,
+  OpenBaoOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: RevokeLeaseWithPrefix2Request,
+  output: RevokeLeaseWithPrefix2Response,
+  errors: [],
+  protocol: OpenBaoProtocol,
+  retry: Retry.Retry,
+}));

package/src/services/locked.ts

@@ -0,0 +1,86 @@
+// AUTO-GENERATED by scripts/generate.ts from .generated-specs (specs/spec-mirror-openbao, generated — see fetch-specs.ts). Do not edit.
+import * as S from "@distilled.cloud/core/schema";
+import * as API from "@distilled.cloud/core/api";
+import * as T from "../traits.ts";
+import {
+  OpenBaoProtocol,
+  type OpenBaoOpError,
+  type OpenBaoOpContext,
+} from "../protocol.ts";
+import * as Retry from "../retry.ts";
+
+export type { OpenBaoOpError, OpenBaoOpContext };
+
+export interface ListLockedUsersRequest {}
+export const ListLockedUsersRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({}).pipe(
+    T.Http({ method: "GET", uri: "/sys/locked-users", code: 200 }),
+  ),
+).annotate({
+  identifier: "ListLockedUsersRequest",
+}) as any as S.Schema<ListLockedUsersRequest>;
+
+export interface ListLockedUsersResponse {}
+export const ListLockedUsersResponse = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({}),
+).annotate({
+  identifier: "ListLockedUsersResponse",
+}) as any as S.Schema<ListLockedUsersResponse>;
+
+export interface UnlockLockedUserRequest {
+  /** MountAccessor is the identifier of the mount entry to which the user belongs */
+  mount_accessor: string;
+  /** It is the name of the alias (user). For example, if the alias belongs to userpass backend, the name should be a valid username within userpass auth method. If the alias belongs to an approle auth method, the name should be a valid RoleID */
+  alias_identifier: string;
+}
+export const UnlockLockedUserRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    mount_accessor: S.String.pipe(T.Label()),
+    alias_identifier: S.String.pipe(T.Label()),
+  }).pipe(
+    T.Http({
+      method: "POST",
+      uri: "/sys/locked-users/{mount_accessor}/unlock/{alias_identifier}",
+      code: 200,
+    }),
+  ),
+).annotate({
+  identifier: "UnlockLockedUserRequest",
+}) as any as S.Schema<UnlockLockedUserRequest>;
+
+export interface UnlockLockedUserResponse {}
+export const UnlockLockedUserResponse = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({}),
+).annotate({
+  identifier: "UnlockLockedUserResponse",
+}) as any as S.Schema<UnlockLockedUserResponse>;
+
+export type ListLockedUsersError = OpenBaoOpError;
+/** Report the locked user count metrics, for this namespace and all child namespaces. */
+export const listLockedUsers: API.OperationMethod<
+  ListLockedUsersRequest,
+  ListLockedUsersResponse,
+  ListLockedUsersError,
+  OpenBaoOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: ListLockedUsersRequest,
+  output: ListLockedUsersResponse,
+  errors: [],
+  protocol: OpenBaoProtocol,
+  retry: Retry.Retry,
+}));
+
+export type UnlockLockedUserError = OpenBaoOpError;
+/** Unlocks the user with given mount_accessor and alias_identifier */
+export const unlockLockedUser: API.OperationMethod<
+  UnlockLockedUserRequest,
+  UnlockLockedUserResponse,
+  UnlockLockedUserError,
+  OpenBaoOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: UnlockLockedUserRequest,
+  output: UnlockLockedUserResponse,
+  errors: [],
+  protocol: OpenBaoProtocol,
+  retry: Retry.Retry,
+}));