@homeflare/distilled-openbao 0.2.0

package/src/services/policies.ts

@@ -0,0 +1,689 @@
+// AUTO-GENERATED by scripts/generate.ts from .generated-specs (specs/spec-mirror-openbao, generated — see fetch-specs.ts). Do not edit.
+import * as S from "@distilled.cloud/core/schema";
+import * as API from "@distilled.cloud/core/api";
+import * as C from "@distilled.cloud/core/category";
+import * as T from "../traits.ts";
+import {
+  OpenBaoProtocol,
+  type OpenBaoOpError,
+  type OpenBaoOpContext,
+} from "../protocol.ts";
+import * as Retry from "../retry.ts";
+
+export type { OpenBaoOpError, OpenBaoOpContext };
+
+/** No ACL policy exists by that name. Measured on OpenBao 2.6.2 (ephemeral local dev server, 2026-09-24): `GET sys/policies/acl/<absent>` answers 404 with an EMPTY `errors` array — vault/logical_system.go's handlePoliciesRead returns no response, which RespondErrorCommon turns into a bare 404 (also cited at the kit's packages/alchemy/src/openbao/policy-wire.ts:23-25). There is no message text to match, so this matches on status alone. */
+export class PolicyNotFound
+  extends /*@__PURE__*/ T.applyErrorMatchers(
+    /*@__PURE__*/ S.TaggedError<PolicyNotFound>()("PolicyNotFound", {
+      message: S.String,
+    }).pipe(C.withBadRequestError),
+    [{ status: 404 }],
+  ) {}
+
+export interface ListPoliciesRequest {
+  /** Return a list if `true` */
+  list?: string;
+}
+export const ListPoliciesRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    list: S.optional(S.String.pipe(T.Query())),
+  }).pipe(T.Http({ method: "GET", uri: "/sys/policy", code: 200 })),
+).annotate({
+  identifier: "ListPoliciesRequest",
+}) as any as S.Schema<ListPoliciesRequest>;
+
+export type PoliciesListResponseKeysList = Array<string>;
+export const PoliciesListResponseKeysList = /*@__PURE__*/ S.Array(
+  S.String,
+) as any as S.Schema<PoliciesListResponseKeysList>;
+
+export type PoliciesListResponsePoliciesList = Array<string>;
+export const PoliciesListResponsePoliciesList = /*@__PURE__*/ S.Array(
+  S.String,
+) as any as S.Schema<PoliciesListResponsePoliciesList>;
+
+export interface PoliciesListResponse {
+  keys?: PoliciesListResponseKeysList;
+  policies?: PoliciesListResponsePoliciesList;
+}
+export const PoliciesListResponse = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    keys: S.optional(PoliciesListResponseKeysList),
+    policies: S.optional(PoliciesListResponsePoliciesList),
+  }),
+).annotate({
+  identifier: "PoliciesListResponse",
+}) as any as S.Schema<PoliciesListResponse>;
+
+export interface PoliciesDeleteAclPolicyRequest {
+  /** The name of the policy. Example: "ops" */
+  name: string;
+}
+export const PoliciesDeleteAclPolicyRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    name: S.String.pipe(T.Label()),
+  }).pipe(
+    T.Http({ method: "DELETE", uri: "/sys/policies/acl/{name}", code: 200 }),
+  ),
+).annotate({
+  identifier: "PoliciesDeleteAclPolicyRequest",
+}) as any as S.Schema<PoliciesDeleteAclPolicyRequest>;
+
+export interface PoliciesDeleteAclPolicyResponse {}
+export const PoliciesDeleteAclPolicyResponse = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({}),
+).annotate({
+  identifier: "PoliciesDeleteAclPolicyResponse",
+}) as any as S.Schema<PoliciesDeleteAclPolicyResponse>;
+
+export interface PoliciesDeleteAclPolicy2Request {
+  /** The name of the policy. Example: "ops" */
+  name: string;
+}
+export const PoliciesDeleteAclPolicy2Request = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    name: S.String.pipe(T.Label()),
+  }).pipe(T.Http({ method: "DELETE", uri: "/sys/policy/{name}", code: 200 })),
+).annotate({
+  identifier: "PoliciesDeleteAclPolicy2Request",
+}) as any as S.Schema<PoliciesDeleteAclPolicy2Request>;
+
+export interface PoliciesDeleteAclPolicy2Response {}
+export const PoliciesDeleteAclPolicy2Response = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({}),
+).annotate({
+  identifier: "PoliciesDeleteAclPolicy2Response",
+}) as any as S.Schema<PoliciesDeleteAclPolicy2Response>;
+
+export interface PoliciesDeletePasswordPolicyRequest {
+  /** The name of the password policy. */
+  name: string;
+}
+export const PoliciesDeletePasswordPolicyRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    name: S.String.pipe(T.Label()),
+  }).pipe(
+    T.Http({
+      method: "DELETE",
+      uri: "/sys/policies/password/{name}",
+      code: 200,
+    }),
+  ),
+).annotate({
+  identifier: "PoliciesDeletePasswordPolicyRequest",
+}) as any as S.Schema<PoliciesDeletePasswordPolicyRequest>;
+
+export interface PoliciesDeletePasswordPolicyResponse {}
+export const PoliciesDeletePasswordPolicyResponse = /*@__PURE__*/ S.suspend(
+  () => S.Struct({}),
+).annotate({
+  identifier: "PoliciesDeletePasswordPolicyResponse",
+}) as any as S.Schema<PoliciesDeletePasswordPolicyResponse>;
+
+export interface PoliciesGeneratePasswordFromPasswordPolicyRequest {
+  /** The name of the password policy. */
+  name: string;
+}
+export const PoliciesGeneratePasswordFromPasswordPolicyRequest =
+  /*@__PURE__*/ S.suspend(() =>
+    S.Struct({
+      name: S.String.pipe(T.Label()),
+    }).pipe(
+      T.Http({
+        method: "GET",
+        uri: "/sys/policies/password/{name}/generate",
+        code: 200,
+      }),
+    ),
+  ).annotate({
+    identifier: "PoliciesGeneratePasswordFromPasswordPolicyRequest",
+  }) as any as S.Schema<PoliciesGeneratePasswordFromPasswordPolicyRequest>;
+
+export interface PoliciesGeneratePasswordFromPasswordPolicyResponse {
+  password?: string;
+}
+export const PoliciesGeneratePasswordFromPasswordPolicyResponse =
+  /*@__PURE__*/ S.suspend(() =>
+    S.Struct({
+      password: S.optional(S.String),
+    }),
+  ).annotate({
+    identifier: "PoliciesGeneratePasswordFromPasswordPolicyResponse",
+  }) as any as S.Schema<PoliciesGeneratePasswordFromPasswordPolicyResponse>;
+
+export type PoliciesListAclPoliciesRequestList = "true";
+export const PoliciesListAclPoliciesRequestList = S.String;
+
+export interface PoliciesListAclPoliciesRequest {
+  /** Must be set to `true` */
+  list: PoliciesListAclPoliciesRequestList | (string & {});
+}
+export const PoliciesListAclPoliciesRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    list: PoliciesListAclPoliciesRequestList.pipe(T.Query()),
+  }).pipe(T.Http({ method: "GET", uri: "/sys/policies/acl", code: 200 })),
+).annotate({
+  identifier: "PoliciesListAclPoliciesRequest",
+}) as any as S.Schema<PoliciesListAclPoliciesRequest>;
+
+export type PoliciesListAclPoliciesResponseKeysList = Array<string>;
+export const PoliciesListAclPoliciesResponseKeysList = /*@__PURE__*/ S.Array(
+  S.String,
+) as any as S.Schema<PoliciesListAclPoliciesResponseKeysList>;
+
+export type PoliciesListAclPoliciesResponsePoliciesList = Array<string>;
+export const PoliciesListAclPoliciesResponsePoliciesList =
+  /*@__PURE__*/ S.Array(
+    S.String,
+  ) as any as S.Schema<PoliciesListAclPoliciesResponsePoliciesList>;
+
+export interface PoliciesListAclPoliciesResponse {
+  keys?: PoliciesListAclPoliciesResponseKeysList;
+  policies?: PoliciesListAclPoliciesResponsePoliciesList;
+}
+export const PoliciesListAclPoliciesResponse = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    keys: S.optional(PoliciesListAclPoliciesResponseKeysList),
+    policies: S.optional(PoliciesListAclPoliciesResponsePoliciesList),
+  }),
+).annotate({
+  identifier: "PoliciesListAclPoliciesResponse",
+}) as any as S.Schema<PoliciesListAclPoliciesResponse>;
+
+export type PoliciesListPasswordPoliciesRequestList = "true";
+export const PoliciesListPasswordPoliciesRequestList = S.String;
+
+export interface PoliciesListPasswordPoliciesRequest {
+  /** Must be set to `true` */
+  list: PoliciesListPasswordPoliciesRequestList | (string & {});
+}
+export const PoliciesListPasswordPoliciesRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    list: PoliciesListPasswordPoliciesRequestList.pipe(T.Query()),
+  }).pipe(T.Http({ method: "GET", uri: "/sys/policies/password", code: 200 })),
+).annotate({
+  identifier: "PoliciesListPasswordPoliciesRequest",
+}) as any as S.Schema<PoliciesListPasswordPoliciesRequest>;
+
+export type PoliciesListPasswordPoliciesResponseKeysList = Array<string>;
+export const PoliciesListPasswordPoliciesResponseKeysList =
+  /*@__PURE__*/ S.Array(
+    S.String,
+  ) as any as S.Schema<PoliciesListPasswordPoliciesResponseKeysList>;
+
+export interface PoliciesListPasswordPoliciesResponse {
+  keys?: PoliciesListPasswordPoliciesResponseKeysList;
+}
+export const PoliciesListPasswordPoliciesResponse = /*@__PURE__*/ S.suspend(
+  () =>
+    S.Struct({
+      keys: S.optional(PoliciesListPasswordPoliciesResponseKeysList),
+    }),
+).annotate({
+  identifier: "PoliciesListPasswordPoliciesResponse",
+}) as any as S.Schema<PoliciesListPasswordPoliciesResponse>;
+
+export interface PoliciesPatchAclPolicyRequest {
+  /** The name of the policy. Example: "ops" */
+  name: string;
+  allow_slashes_in_identity_templates?: boolean;
+  allow_wildcards_in_identity_templates?: boolean;
+  /** The rules of the policy. */
+  cas?: number;
+  /** The rules of the policy. */
+  cas_required?: boolean;
+  /** The rules of the policy. */
+  expiration?: string;
+  /** The rules of the policy. */
+  policy?: string;
+  /** The rules of the policy. */
+  ttl?: number;
+}
+export const PoliciesPatchAclPolicyRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    name: S.String.pipe(T.Label()),
+    allow_slashes_in_identity_templates: S.optional(S.Boolean),
+    allow_wildcards_in_identity_templates: S.optional(S.Boolean),
+    cas: S.optional(S.Number),
+    cas_required: S.optional(S.Boolean),
+    expiration: S.optional(S.String),
+    policy: S.optional(S.String),
+    ttl: S.optional(S.Number),
+  }).pipe(
+    T.Http({ method: "PATCH", uri: "/sys/policies/acl/{name}", code: 200 }),
+  ),
+).annotate({
+  identifier: "PoliciesPatchAclPolicyRequest",
+}) as any as S.Schema<PoliciesPatchAclPolicyRequest>;
+
+export interface PoliciesPatchAclPolicyResponse {}
+export const PoliciesPatchAclPolicyResponse = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({}),
+).annotate({
+  identifier: "PoliciesPatchAclPolicyResponse",
+}) as any as S.Schema<PoliciesPatchAclPolicyResponse>;
+
+export interface PoliciesReadAclPolicyRequest {
+  /** The name of the policy. Example: "ops" */
+  name: string;
+  /** Return a list if `true` */
+  list?: string;
+}
+export const PoliciesReadAclPolicyRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    name: S.String.pipe(T.Label()),
+    list: S.optional(S.String.pipe(T.Query())),
+  }).pipe(
+    T.Http({ method: "GET", uri: "/sys/policies/acl/{name}", code: 200 }),
+  ),
+).annotate({
+  identifier: "PoliciesReadAclPolicyRequest",
+}) as any as S.Schema<PoliciesReadAclPolicyRequest>;
+
+export interface PoliciesReadAclPolicyResponse {
+  allow_slashes_in_identity_templates?: boolean;
+  allow_wildcards_in_identity_templates?: boolean;
+  cas_required?: boolean;
+  expiration?: string;
+  modified?: string;
+  name?: string;
+  policy?: string;
+  rules?: string;
+  version?: number;
+}
+export const PoliciesReadAclPolicyResponse = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    allow_slashes_in_identity_templates: S.optional(S.Boolean),
+    allow_wildcards_in_identity_templates: S.optional(S.Boolean),
+    cas_required: S.optional(S.Boolean),
+    expiration: S.optional(S.String),
+    modified: S.optional(S.String),
+    name: S.optional(S.String),
+    policy: S.optional(S.String),
+    rules: S.optional(S.String),
+    version: S.optional(S.Number),
+  }),
+).annotate({
+  identifier: "PoliciesReadAclPolicyResponse",
+}) as any as S.Schema<PoliciesReadAclPolicyResponse>;
+
+export interface PoliciesReadAclPolicy2Request {
+  /** The name of the policy. Example: "ops" */
+  name: string;
+  /** Return a list if `true` */
+  list?: string;
+}
+export const PoliciesReadAclPolicy2Request = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    name: S.String.pipe(T.Label()),
+    list: S.optional(S.String.pipe(T.Query())),
+  }).pipe(T.Http({ method: "GET", uri: "/sys/policy/{name}", code: 200 })),
+).annotate({
+  identifier: "PoliciesReadAclPolicy2Request",
+}) as any as S.Schema<PoliciesReadAclPolicy2Request>;
+
+export interface PoliciesReadAclPolicy2Response {
+  allow_slashes_in_identity_templates?: boolean;
+  allow_wildcards_in_identity_templates?: boolean;
+  cas_required?: boolean;
+  expiration?: string;
+  modified?: string;
+  name?: string;
+  policy?: string;
+  rules?: string;
+  version?: number;
+}
+export const PoliciesReadAclPolicy2Response = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    allow_slashes_in_identity_templates: S.optional(S.Boolean),
+    allow_wildcards_in_identity_templates: S.optional(S.Boolean),
+    cas_required: S.optional(S.Boolean),
+    expiration: S.optional(S.String),
+    modified: S.optional(S.String),
+    name: S.optional(S.String),
+    policy: S.optional(S.String),
+    rules: S.optional(S.String),
+    version: S.optional(S.Number),
+  }),
+).annotate({
+  identifier: "PoliciesReadAclPolicy2Response",
+}) as any as S.Schema<PoliciesReadAclPolicy2Response>;
+
+export interface PoliciesReadPasswordPolicyRequest {
+  /** The name of the password policy. */
+  name: string;
+}
+export const PoliciesReadPasswordPolicyRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    name: S.String.pipe(T.Label()),
+  }).pipe(
+    T.Http({ method: "GET", uri: "/sys/policies/password/{name}", code: 200 }),
+  ),
+).annotate({
+  identifier: "PoliciesReadPasswordPolicyRequest",
+}) as any as S.Schema<PoliciesReadPasswordPolicyRequest>;
+
+export interface PoliciesReadPasswordPolicyResponse {
+  policy?: string;
+}
+export const PoliciesReadPasswordPolicyResponse = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    policy: S.optional(S.String),
+  }),
+).annotate({
+  identifier: "PoliciesReadPasswordPolicyResponse",
+}) as any as S.Schema<PoliciesReadPasswordPolicyResponse>;
+
+export interface PoliciesWriteAclPolicyRequest {
+  /** The name of the policy. Example: "ops" */
+  name: string;
+  allow_slashes_in_identity_templates?: boolean;
+  allow_wildcards_in_identity_templates?: boolean;
+  /** The rules of the policy. */
+  cas?: number;
+  /** The rules of the policy. */
+  cas_required?: boolean;
+  /** The rules of the policy. */
+  expiration?: string;
+  /** The rules of the policy. */
+  policy?: string;
+  /** The rules of the policy. */
+  ttl?: number;
+}
+export const PoliciesWriteAclPolicyRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    name: S.String.pipe(T.Label()),
+    allow_slashes_in_identity_templates: S.optional(S.Boolean),
+    allow_wildcards_in_identity_templates: S.optional(S.Boolean),
+    cas: S.optional(S.Number),
+    cas_required: S.optional(S.Boolean),
+    expiration: S.optional(S.String),
+    policy: S.optional(S.String),
+    ttl: S.optional(S.Number),
+  }).pipe(
+    T.Http({ method: "POST", uri: "/sys/policies/acl/{name}", code: 200 }),
+  ),
+).annotate({
+  identifier: "PoliciesWriteAclPolicyRequest",
+}) as any as S.Schema<PoliciesWriteAclPolicyRequest>;
+
+export interface PoliciesWriteAclPolicyResponse {}
+export const PoliciesWriteAclPolicyResponse = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({}),
+).annotate({
+  identifier: "PoliciesWriteAclPolicyResponse",
+}) as any as S.Schema<PoliciesWriteAclPolicyResponse>;
+
+export interface PoliciesWriteAclPolicy2Request {
+  /** The name of the policy. Example: "ops" */
+  name: string;
+  allow_slashes_in_identity_templates?: boolean;
+  allow_wildcards_in_identity_templates?: boolean;
+  /** The rules of the policy. */
+  cas?: number;
+  /** The rules of the policy. */
+  cas_required?: boolean;
+  /** The rules of the policy. */
+  expiration?: string;
+  /** The rules of the policy. */
+  policy?: string;
+  /** The rules of the policy. */
+  rules?: string;
+  /** The rules of the policy. */
+  ttl?: number;
+}
+export const PoliciesWriteAclPolicy2Request = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    name: S.String.pipe(T.Label()),
+    allow_slashes_in_identity_templates: S.optional(S.Boolean),
+    allow_wildcards_in_identity_templates: S.optional(S.Boolean),
+    cas: S.optional(S.Number),
+    cas_required: S.optional(S.Boolean),
+    expiration: S.optional(S.String),
+    policy: S.optional(S.String),
+    rules: S.optional(S.String),
+    ttl: S.optional(S.Number),
+  }).pipe(T.Http({ method: "POST", uri: "/sys/policy/{name}", code: 200 })),
+).annotate({
+  identifier: "PoliciesWriteAclPolicy2Request",
+}) as any as S.Schema<PoliciesWriteAclPolicy2Request>;
+
+export interface PoliciesWriteAclPolicy2Response {}
+export const PoliciesWriteAclPolicy2Response = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({}),
+).annotate({
+  identifier: "PoliciesWriteAclPolicy2Response",
+}) as any as S.Schema<PoliciesWriteAclPolicy2Response>;
+
+export interface PoliciesWritePasswordPolicyRequest {
+  /** The name of the password policy. */
+  name: string;
+  /** The password policy */
+  policy?: string;
+}
+export const PoliciesWritePasswordPolicyRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    name: S.String.pipe(T.Label()),
+    policy: S.optional(S.String),
+  }).pipe(
+    T.Http({ method: "POST", uri: "/sys/policies/password/{name}", code: 200 }),
+  ),
+).annotate({
+  identifier: "PoliciesWritePasswordPolicyRequest",
+}) as any as S.Schema<PoliciesWritePasswordPolicyRequest>;
+
+export interface PoliciesWritePasswordPolicyResponse {}
+export const PoliciesWritePasswordPolicyResponse = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({}),
+).annotate({
+  identifier: "PoliciesWritePasswordPolicyResponse",
+}) as any as S.Schema<PoliciesWritePasswordPolicyResponse>;
+
+export type ListPoliciesError = OpenBaoOpError;
+export const listPolicies: API.OperationMethod<
+  ListPoliciesRequest,
+  PoliciesListResponse,
+  ListPoliciesError,
+  OpenBaoOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: ListPoliciesRequest,
+  output: PoliciesListResponse,
+  errors: [],
+  protocol: OpenBaoProtocol,
+  retry: Retry.Retry,
+}));
+
+export type PoliciesDeleteAclPolicyError = OpenBaoOpError;
+/** Delete the ACL policy with the given name. */
+export const policiesDeleteAclPolicy: API.OperationMethod<
+  PoliciesDeleteAclPolicyRequest,
+  PoliciesDeleteAclPolicyResponse,
+  PoliciesDeleteAclPolicyError,
+  OpenBaoOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: PoliciesDeleteAclPolicyRequest,
+  output: PoliciesDeleteAclPolicyResponse,
+  errors: [],
+  protocol: OpenBaoProtocol,
+  retry: Retry.Retry,
+}));
+
+export type PoliciesDeleteAclPolicy2Error = OpenBaoOpError;
+/** Delete the policy with the given name. */
+export const policiesDeleteAclPolicy2: API.OperationMethod<
+  PoliciesDeleteAclPolicy2Request,
+  PoliciesDeleteAclPolicy2Response,
+  PoliciesDeleteAclPolicy2Error,
+  OpenBaoOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: PoliciesDeleteAclPolicy2Request,
+  output: PoliciesDeleteAclPolicy2Response,
+  errors: [],
+  protocol: OpenBaoProtocol,
+  retry: Retry.Retry,
+}));
+
+export type PoliciesDeletePasswordPolicyError = OpenBaoOpError;
+/** Delete a password policy. */
+export const policiesDeletePasswordPolicy: API.OperationMethod<
+  PoliciesDeletePasswordPolicyRequest,
+  PoliciesDeletePasswordPolicyResponse,
+  PoliciesDeletePasswordPolicyError,
+  OpenBaoOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: PoliciesDeletePasswordPolicyRequest,
+  output: PoliciesDeletePasswordPolicyResponse,
+  errors: [],
+  protocol: OpenBaoProtocol,
+  retry: Retry.Retry,
+}));
+
+export type PoliciesGeneratePasswordFromPasswordPolicyError = OpenBaoOpError;
+/** Generate a password from an existing password policy. */
+export const policiesGeneratePasswordFromPasswordPolicy: API.OperationMethod<
+  PoliciesGeneratePasswordFromPasswordPolicyRequest,
+  PoliciesGeneratePasswordFromPasswordPolicyResponse,
+  PoliciesGeneratePasswordFromPasswordPolicyError,
+  OpenBaoOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: PoliciesGeneratePasswordFromPasswordPolicyRequest,
+  output: PoliciesGeneratePasswordFromPasswordPolicyResponse,
+  errors: [],
+  protocol: OpenBaoProtocol,
+  retry: Retry.Retry,
+}));
+
+export type PoliciesListAclPoliciesError = OpenBaoOpError;
+export const policiesListAclPolicies: API.OperationMethod<
+  PoliciesListAclPoliciesRequest,
+  PoliciesListAclPoliciesResponse,
+  PoliciesListAclPoliciesError,
+  OpenBaoOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: PoliciesListAclPoliciesRequest,
+  output: PoliciesListAclPoliciesResponse,
+  errors: [],
+  protocol: OpenBaoProtocol,
+  retry: Retry.Retry,
+}));
+
+export type PoliciesListPasswordPoliciesError = OpenBaoOpError;
+/** List the existing password policies. */
+export const policiesListPasswordPolicies: API.OperationMethod<
+  PoliciesListPasswordPoliciesRequest,
+  PoliciesListPasswordPoliciesResponse,
+  PoliciesListPasswordPoliciesError,
+  OpenBaoOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: PoliciesListPasswordPoliciesRequest,
+  output: PoliciesListPasswordPoliciesResponse,
+  errors: [],
+  protocol: OpenBaoProtocol,
+  retry: Retry.Retry,
+}));
+
+export type PoliciesPatchAclPolicyError = OpenBaoOpError;
+/** Patches an existing ACL policy. */
+export const policiesPatchAclPolicy: API.OperationMethod<
+  PoliciesPatchAclPolicyRequest,
+  PoliciesPatchAclPolicyResponse,
+  PoliciesPatchAclPolicyError,
+  OpenBaoOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: PoliciesPatchAclPolicyRequest,
+  output: PoliciesPatchAclPolicyResponse,
+  errors: [],
+  protocol: OpenBaoProtocol,
+  retry: Retry.Retry,
+}));
+
+export type PoliciesReadAclPolicyError = PolicyNotFound | OpenBaoOpError;
+/** Retrieve information about the named ACL policy. */
+export const policiesReadAclPolicy: API.OperationMethod<
+  PoliciesReadAclPolicyRequest,
+  PoliciesReadAclPolicyResponse,
+  PoliciesReadAclPolicyError,
+  OpenBaoOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: PoliciesReadAclPolicyRequest,
+  output: PoliciesReadAclPolicyResponse,
+  errors: [PolicyNotFound],
+  protocol: OpenBaoProtocol,
+  retry: Retry.Retry,
+}));
+
+export type PoliciesReadAclPolicy2Error = OpenBaoOpError;
+/** Retrieve the policy body for the named policy. */
+export const policiesReadAclPolicy2: API.OperationMethod<
+  PoliciesReadAclPolicy2Request,
+  PoliciesReadAclPolicy2Response,
+  PoliciesReadAclPolicy2Error,
+  OpenBaoOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: PoliciesReadAclPolicy2Request,
+  output: PoliciesReadAclPolicy2Response,
+  errors: [],
+  protocol: OpenBaoProtocol,
+  retry: Retry.Retry,
+}));
+
+export type PoliciesReadPasswordPolicyError = OpenBaoOpError;
+/** Retrieve an existing password policy. */
+export const policiesReadPasswordPolicy: API.OperationMethod<
+  PoliciesReadPasswordPolicyRequest,
+  PoliciesReadPasswordPolicyResponse,
+  PoliciesReadPasswordPolicyError,
+  OpenBaoOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: PoliciesReadPasswordPolicyRequest,
+  output: PoliciesReadPasswordPolicyResponse,
+  errors: [],
+  protocol: OpenBaoProtocol,
+  retry: Retry.Retry,
+}));
+
+export type PoliciesWriteAclPolicyError = OpenBaoOpError;
+/** Add a new or update an existing ACL policy. */
+export const policiesWriteAclPolicy: API.OperationMethod<
+  PoliciesWriteAclPolicyRequest,
+  PoliciesWriteAclPolicyResponse,
+  PoliciesWriteAclPolicyError,
+  OpenBaoOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: PoliciesWriteAclPolicyRequest,
+  output: PoliciesWriteAclPolicyResponse,
+  errors: [],
+  protocol: OpenBaoProtocol,
+  retry: Retry.Retry,
+}));
+
+export type PoliciesWriteAclPolicy2Error = OpenBaoOpError;
+/** Add a new or update an existing policy. */
+export const policiesWriteAclPolicy2: API.OperationMethod<
+  PoliciesWriteAclPolicy2Request,
+  PoliciesWriteAclPolicy2Response,
+  PoliciesWriteAclPolicy2Error,
+  OpenBaoOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: PoliciesWriteAclPolicy2Request,
+  output: PoliciesWriteAclPolicy2Response,
+  errors: [],
+  protocol: OpenBaoProtocol,
+  retry: Retry.Retry,
+}));
+
+export type PoliciesWritePasswordPolicyError = OpenBaoOpError;
+/** Add a new or update an existing password policy. */
+export const policiesWritePasswordPolicy: API.OperationMethod<
+  PoliciesWritePasswordPolicyRequest,
+  PoliciesWritePasswordPolicyResponse,
+  PoliciesWritePasswordPolicyError,
+  OpenBaoOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: PoliciesWritePasswordPolicyRequest,
+  output: PoliciesWritePasswordPolicyResponse,
+  errors: [],
+  protocol: OpenBaoProtocol,
+  retry: Retry.Retry,
+}));