@homeflare/distilled-proxmox-backup 0.2.0

package/dist/services/access.js

@@ -0,0 +1,787 @@
+// AUTO-GENERATED by scripts/generate.ts from .generated-specs (apidoc.js, via scripts/apidoc.ts — see its header). Do not edit.
+import * as S from "@distilled.cloud/core/schema";
+import * as API from "@distilled.cloud/core/api";
+import * as T from "../traits.js";
+import { ProxmoxBackupProtocol, } from "../protocol.js";
+import * as Retry from "../retry.js";
+export const CreateAccessOpenidAuthUrlRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    realm: S.String,
+    redirect_url: S.String.pipe(T.Body("redirect-url")),
+}).pipe(T.Http({
+    method: "POST",
+    uri: "/access/openid/auth-url",
+    code: 200,
+    contentType: "form-urlencoded",
+}))).annotate({
+    identifier: "CreateAccessOpenidAuthUrlRequest",
+});
+export const CreateAccessOpenidAuthUrlResponse = /*@__PURE__*/ S.suspend(() => S.String.pipe(T.RawResponseRoot())).annotate({
+    identifier: "CreateAccessOpenidAuthUrlResponse",
+});
+export const CreateAccessTicketRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    http_only: S.optional(S.String.pipe(T.Body("http-only"))),
+    password: S.optional(S.String),
+    path: S.optional(S.String),
+    port: S.optional(S.String),
+    privs: S.optional(S.String),
+    tfa_challenge: S.optional(S.String.pipe(T.Body("tfa-challenge"))),
+    username: S.String,
+}).pipe(T.Http({
+    method: "POST",
+    uri: "/access/ticket",
+    code: 200,
+    contentType: "form-urlencoded",
+}))).annotate({
+    identifier: "CreateAccessTicketRequest",
+});
+export const CreateAccessTicketResponse = /*@__PURE__*/ S.suspend(() => S.Struct({
+    CSRFPreventionToken: S.optional(S.String),
+    ticket: S.optional(S.String),
+    ticket_info: S.optional(S.String.pipe(T.Body("ticket-info"))),
+    username: S.String,
+})).annotate({
+    identifier: "CreateAccessTicketResponse",
+});
+export const CreateAccessUserRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    comment: S.optional(S.String),
+    email: S.optional(S.String),
+    enable: S.optional(S.String),
+    expire: S.optional(S.String),
+    firstname: S.optional(S.String),
+    lastname: S.optional(S.String),
+    password: S.optional(S.String),
+    userid: S.String,
+}).pipe(T.Http({
+    method: "POST",
+    uri: "/access/users",
+    code: 200,
+    contentType: "form-urlencoded",
+}))).annotate({
+    identifier: "CreateAccessUserRequest",
+});
+export const CreateAccessUserResponse = /*@__PURE__*/ S.suspend(() => S.Struct({})).annotate({
+    identifier: "CreateAccessUserResponse",
+});
+export const CreateAccessVncticketRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    authid: S.String,
+    path: S.String,
+    port: S.optional(S.String),
+    privs: S.String,
+    vncticket: S.String,
+}).pipe(T.Http({
+    method: "POST",
+    uri: "/access/vncticket",
+    code: 200,
+    contentType: "form-urlencoded",
+}))).annotate({
+    identifier: "CreateAccessVncticketRequest",
+});
+export const CreateAccessVncticketResponse = /*@__PURE__*/ S.suspend(() => S.Struct({})).annotate({
+    identifier: "CreateAccessVncticketResponse",
+});
+export const DeleteAccessTfaRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    userid: S.String.pipe(T.Label()),
+    id: S.String.pipe(T.Label()),
+    password: S.optional(S.String),
+}).pipe(T.Http({
+    method: "DELETE",
+    uri: "/access/tfa/{userid}/{id}",
+    code: 200,
+    contentType: "form-urlencoded",
+}))).annotate({
+    identifier: "DeleteAccessTfaRequest",
+});
+export const DeleteAccessTfaResponse = /*@__PURE__*/ S.suspend(() => S.Struct({})).annotate({
+    identifier: "DeleteAccessTfaResponse",
+});
+export const DeleteAccessTicketRequest = /*@__PURE__*/ S.suspend(() => S.Struct({}).pipe(T.Http({ method: "DELETE", uri: "/access/ticket", code: 200 }))).annotate({
+    identifier: "DeleteAccessTicketRequest",
+});
+export const DeleteAccessTicketResponse = /*@__PURE__*/ S.suspend(() => S.Struct({})).annotate({
+    identifier: "DeleteAccessTicketResponse",
+});
+export const DeleteAccessUserRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    userid: S.String.pipe(T.Label()),
+    digest: S.optional(S.String),
+}).pipe(T.Http({
+    method: "DELETE",
+    uri: "/access/users/{userid}",
+    code: 200,
+    contentType: "form-urlencoded",
+}))).annotate({
+    identifier: "DeleteAccessUserRequest",
+});
+export const DeleteAccessUserResponse = /*@__PURE__*/ S.suspend(() => S.Struct({})).annotate({
+    identifier: "DeleteAccessUserResponse",
+});
+export const DeleteAccessUserTokenRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    userid: S.String.pipe(T.Label()),
+    token_name: S.String.pipe(T.Label()),
+    digest: S.optional(S.String),
+}).pipe(T.Http({
+    method: "DELETE",
+    uri: "/access/users/{userid}/token/{token-name}",
+    code: 200,
+    contentType: "form-urlencoded",
+}))).annotate({
+    identifier: "DeleteAccessUserTokenRequest",
+});
+export const DeleteAccessUserTokenResponse = /*@__PURE__*/ S.suspend(() => S.Struct({})).annotate({
+    identifier: "DeleteAccessUserTokenResponse",
+});
+export const GetAccessRequest = /*@__PURE__*/ S.suspend(() => S.Struct({}).pipe(T.Http({ method: "GET", uri: "/access", code: 200 }))).annotate({
+    identifier: "GetAccessRequest",
+});
+export const GetAccessResponse = /*@__PURE__*/ S.suspend(() => S.Struct({})).annotate({
+    identifier: "GetAccessResponse",
+});
+export const GetAccessOpenidRequest = /*@__PURE__*/ S.suspend(() => S.Struct({}).pipe(T.Http({ method: "GET", uri: "/access/openid", code: 200 }))).annotate({
+    identifier: "GetAccessOpenidRequest",
+});
+export const GetAccessOpenidResponse = /*@__PURE__*/ S.suspend(() => S.Struct({})).annotate({
+    identifier: "GetAccessOpenidResponse",
+});
+export const GetAccessPermissionsRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    auth_id: S.optional(S.String.pipe(T.Query("auth-id"))),
+    path: S.optional(S.String.pipe(T.Query())),
+}).pipe(T.Http({ method: "GET", uri: "/access/permissions", code: 200 }))).annotate({
+    identifier: "GetAccessPermissionsRequest",
+});
+export const GetAccessPermissionsResponse = /*@__PURE__*/ S.suspend(() => S.Unknown.pipe(T.RawResponseRoot())).annotate({
+    identifier: "GetAccessPermissionsResponse",
+});
+export const GetAccessTfaRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    userid: S.String.pipe(T.Label()),
+}).pipe(T.Http({ method: "GET", uri: "/access/tfa/{userid}", code: 200 }))).annotate({
+    identifier: "GetAccessTfaRequest",
+});
+export const GetAccessTfaResponseBodyItemType = S.String;
+export const GetAccessTfaResponseBodyItem = /*@__PURE__*/ S.suspend(() => S.Struct({
+    created: S.Number,
+    description: S.String,
+    enable: S.Unknown,
+    id: S.String,
+    type: GetAccessTfaResponseBodyItemType,
+})).annotate({
+    identifier: "GetAccessTfaResponseBodyItem",
+});
+export const GetAccessTfaResponseBodyList = /*@__PURE__*/ S.Array(GetAccessTfaResponseBodyItem);
+export const GetAccessTfaResponse = /*@__PURE__*/ S.suspend(() => GetAccessTfaResponseBodyList.pipe(T.RawResponseRoot())).annotate({
+    identifier: "GetAccessTfaResponse",
+});
+export const GetAccessTfa2Request = /*@__PURE__*/ S.suspend(() => S.Struct({
+    userid: S.String.pipe(T.Label()),
+    id: S.String.pipe(T.Label()),
+}).pipe(T.Http({ method: "GET", uri: "/access/tfa/{userid}/{id}", code: 200 }))).annotate({
+    identifier: "GetAccessTfa2Request",
+});
+export const GetAccessTfa2Response = /*@__PURE__*/ S.suspend(() => S.Struct({})).annotate({
+    identifier: "GetAccessTfa2Response",
+});
+export const GetAccessUserRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    userid: S.String.pipe(T.Label()),
+}).pipe(T.Http({ method: "GET", uri: "/access/users/{userid}", code: 200 }))).annotate({
+    identifier: "GetAccessUserRequest",
+});
+export const GetAccessUserResponse = /*@__PURE__*/ S.suspend(() => S.Struct({
+    comment: S.optional(S.String),
+    email: S.optional(S.String),
+    enable: S.optional(S.Unknown),
+    expire: S.optional(S.Number),
+    firstname: S.optional(S.String),
+    lastname: S.optional(S.String),
+    userid: S.String,
+})).annotate({
+    identifier: "GetAccessUserResponse",
+});
+export const GetAccessUserTokenRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    userid: S.String.pipe(T.Label()),
+    token_name: S.String.pipe(T.Label()),
+}).pipe(T.Http({
+    method: "GET",
+    uri: "/access/users/{userid}/token/{token-name}",
+    code: 200,
+}))).annotate({
+    identifier: "GetAccessUserTokenRequest",
+});
+export const GetAccessUserTokenResponse = /*@__PURE__*/ S.suspend(() => S.Struct({
+    comment: S.optional(S.String),
+    enable: S.optional(S.Unknown),
+    expire: S.optional(S.Number),
+    tokenid: S.String,
+})).annotate({
+    identifier: "GetAccessUserTokenResponse",
+});
+export const ListAccessAclRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    exact: S.optional(S.String.pipe(T.Query())),
+    path: S.optional(S.String.pipe(T.Query())),
+}).pipe(T.Http({ method: "GET", uri: "/access/acl", code: 200 }))).annotate({
+    identifier: "ListAccessAclRequest",
+});
+export const ListAccessAclResponseBodyItemRoleid = S.String;
+export const ListAccessAclResponseBodyItemUgidType = S.String;
+export const ListAccessAclResponseBodyItem = /*@__PURE__*/ S.suspend(() => S.Struct({
+    path: S.String,
+    propagate: S.Unknown,
+    roleid: ListAccessAclResponseBodyItemRoleid,
+    ugid: S.String,
+    ugid_type: ListAccessAclResponseBodyItemUgidType,
+})).annotate({
+    identifier: "ListAccessAclResponseBodyItem",
+});
+export const ListAccessAclResponseBodyList = /*@__PURE__*/ S.Array(ListAccessAclResponseBodyItem);
+export const ListAccessAclResponse = /*@__PURE__*/ S.suspend(() => ListAccessAclResponseBodyList.pipe(T.RawResponseRoot())).annotate({
+    identifier: "ListAccessAclResponse",
+});
+export const ListAccessDomainsRequest = /*@__PURE__*/ S.suspend(() => S.Struct({}).pipe(T.Http({ method: "GET", uri: "/access/domains", code: 200 }))).annotate({
+    identifier: "ListAccessDomainsRequest",
+});
+export const ListAccessDomainsResponseBodyItemType = S.String;
+export const ListAccessDomainsResponseBodyItem = /*@__PURE__*/ S.suspend(() => S.Struct({
+    comment: S.optional(S.String),
+    default: S.optional(S.Unknown),
+    realm: S.String,
+    type: ListAccessDomainsResponseBodyItemType,
+})).annotate({
+    identifier: "ListAccessDomainsResponseBodyItem",
+});
+export const ListAccessDomainsResponseBodyList = /*@__PURE__*/ S.Array(ListAccessDomainsResponseBodyItem);
+export const ListAccessDomainsResponse = /*@__PURE__*/ S.suspend(() => ListAccessDomainsResponseBodyList.pipe(T.RawResponseRoot())).annotate({
+    identifier: "ListAccessDomainsResponse",
+});
+export const ListAccessRolesRequest = /*@__PURE__*/ S.suspend(() => S.Struct({}).pipe(T.Http({ method: "GET", uri: "/access/roles", code: 200 }))).annotate({
+    identifier: "ListAccessRolesRequest",
+});
+export const ListAccessRolesResponseBodyItemPrivsList = /*@__PURE__*/ S.Array(S.String);
+export const ListAccessRolesResponseBodyItemRoleid = S.String;
+export const ListAccessRolesResponseBodyItem = /*@__PURE__*/ S.suspend(() => S.Struct({
+    comment: S.optional(S.String),
+    privs: ListAccessRolesResponseBodyItemPrivsList,
+    roleid: ListAccessRolesResponseBodyItemRoleid,
+})).annotate({
+    identifier: "ListAccessRolesResponseBodyItem",
+});
+export const ListAccessRolesResponseBodyList = /*@__PURE__*/ S.Array(ListAccessRolesResponseBodyItem);
+export const ListAccessRolesResponse = /*@__PURE__*/ S.suspend(() => ListAccessRolesResponseBodyList.pipe(T.RawResponseRoot())).annotate({
+    identifier: "ListAccessRolesResponse",
+});
+export const ListAccessTfaRequest = /*@__PURE__*/ S.suspend(() => S.Struct({}).pipe(T.Http({ method: "GET", uri: "/access/tfa", code: 200 }))).annotate({
+    identifier: "ListAccessTfaRequest",
+});
+export const ListAccessTfaResponseBodyItemEntriesItemType = S.String;
+export const ListAccessTfaResponseBodyItemEntriesItem = /*@__PURE__*/ S.suspend(() => S.Struct({
+    created: S.Number,
+    description: S.String,
+    enable: S.Unknown,
+    id: S.String,
+    type: ListAccessTfaResponseBodyItemEntriesItemType,
+})).annotate({
+    identifier: "ListAccessTfaResponseBodyItemEntriesItem",
+});
+export const ListAccessTfaResponseBodyItemEntriesList = /*@__PURE__*/ S.Array(ListAccessTfaResponseBodyItemEntriesItem);
+export const ListAccessTfaResponseBodyItem = /*@__PURE__*/ S.suspend(() => S.Struct({
+    entries: ListAccessTfaResponseBodyItemEntriesList,
+    tfa_locked_until: S.optional(S.Number.pipe(T.Body("tfa-locked-until"))),
+    totp_locked: S.optional(S.Unknown.pipe(T.Body("totp-locked"))),
+    userid: S.String,
+})).annotate({
+    identifier: "ListAccessTfaResponseBodyItem",
+});
+export const ListAccessTfaResponseBodyList = /*@__PURE__*/ S.Array(ListAccessTfaResponseBodyItem);
+export const ListAccessTfaResponse = /*@__PURE__*/ S.suspend(() => ListAccessTfaResponseBodyList.pipe(T.RawResponseRoot())).annotate({
+    identifier: "ListAccessTfaResponse",
+});
+export const ListAccessUsersRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    include_tokens: S.optional(S.String.pipe(T.Query())),
+}).pipe(T.Http({ method: "GET", uri: "/access/users", code: 200 }))).annotate({
+    identifier: "ListAccessUsersRequest",
+});
+export const ListAccessUsersResponseBodyItemTokensItem = 
+/*@__PURE__*/ S.suspend(() => S.Struct({
+    comment: S.optional(S.String),
+    enable: S.optional(S.Unknown),
+    expire: S.optional(S.Number),
+    tokenid: S.String,
+})).annotate({
+    identifier: "ListAccessUsersResponseBodyItemTokensItem",
+});
+export const ListAccessUsersResponseBodyItemTokensList = /*@__PURE__*/ S.Array(ListAccessUsersResponseBodyItemTokensItem);
+export const ListAccessUsersResponseBodyItem = /*@__PURE__*/ S.suspend(() => S.Struct({
+    comment: S.optional(S.String),
+    email: S.optional(S.String),
+    enable: S.optional(S.Unknown),
+    expire: S.optional(S.Number),
+    firstname: S.optional(S.String),
+    lastname: S.optional(S.String),
+    tfa_locked_until: S.optional(S.Number.pipe(T.Body("tfa-locked-until"))),
+    tokens: S.optional(ListAccessUsersResponseBodyItemTokensList),
+    totp_locked: S.optional(S.Unknown.pipe(T.Body("totp-locked"))),
+    userid: S.String,
+})).annotate({
+    identifier: "ListAccessUsersResponseBodyItem",
+});
+export const ListAccessUsersResponseBodyList = /*@__PURE__*/ S.Array(ListAccessUsersResponseBodyItem);
+export const ListAccessUsersResponse = /*@__PURE__*/ S.suspend(() => ListAccessUsersResponseBodyList.pipe(T.RawResponseRoot())).annotate({
+    identifier: "ListAccessUsersResponse",
+});
+export const ListAccessUserTokenRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    userid: S.String.pipe(T.Label()),
+}).pipe(T.Http({ method: "GET", uri: "/access/users/{userid}/token", code: 200 }))).annotate({
+    identifier: "ListAccessUserTokenRequest",
+});
+export const ListAccessUserTokenResponseBodyItem = /*@__PURE__*/ S.suspend(() => S.Struct({
+    comment: S.optional(S.String),
+    enable: S.optional(S.Unknown),
+    expire: S.optional(S.Number),
+    token_name: S.optional(S.String.pipe(T.Body("token-name"))),
+    tokenid: S.String,
+})).annotate({
+    identifier: "ListAccessUserTokenResponseBodyItem",
+});
+export const ListAccessUserTokenResponseBodyList = /*@__PURE__*/ S.Array(ListAccessUserTokenResponseBodyItem);
+export const ListAccessUserTokenResponse = /*@__PURE__*/ S.suspend(() => ListAccessUserTokenResponseBodyList.pipe(T.RawResponseRoot())).annotate({
+    identifier: "ListAccessUserTokenResponse",
+});
+export const LoginAccessOpenidRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    code: S.String,
+    http_only: S.optional(S.String.pipe(T.Body("http-only"))),
+    redirect_url: S.String.pipe(T.Body("redirect-url")),
+    state: S.String,
+}).pipe(T.Http({
+    method: "POST",
+    uri: "/access/openid/login",
+    code: 200,
+    contentType: "form-urlencoded",
+}))).annotate({
+    identifier: "LoginAccessOpenidRequest",
+});
+export const LoginAccessOpenidResponse = /*@__PURE__*/ S.suspend(() => S.Struct({
+    CSRFPreventionToken: S.String,
+    ticket: S.optional(S.String),
+    ticket_info: S.optional(S.String.pipe(T.Body("ticket-info"))),
+    username: S.String,
+})).annotate({
+    identifier: "LoginAccessOpenidResponse",
+});
+export const PutAccessAclRequestRole = S.String;
+export const PutAccessAclRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    auth_id: S.optional(S.String.pipe(T.Body("auth-id"))),
+    delete: S.optional(S.String),
+    digest: S.optional(S.String),
+    group: S.optional(S.String),
+    path: S.String,
+    propagate: S.optional(S.String),
+    role: PutAccessAclRequestRole,
+}).pipe(T.Http({
+    method: "PUT",
+    uri: "/access/acl",
+    code: 200,
+    contentType: "form-urlencoded",
+}))).annotate({
+    identifier: "PutAccessAclRequest",
+});
+export const PutAccessAclResponse = /*@__PURE__*/ S.suspend(() => S.Struct({})).annotate({
+    identifier: "PutAccessAclResponse",
+});
+export const PutAccessPasswordRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    confirmation_password: S.optional(S.String.pipe(T.Body("confirmation-password"))),
+    password: S.String,
+    userid: S.String,
+}).pipe(T.Http({
+    method: "PUT",
+    uri: "/access/password",
+    code: 200,
+    contentType: "form-urlencoded",
+}))).annotate({
+    identifier: "PutAccessPasswordRequest",
+});
+export const PutAccessPasswordResponse = /*@__PURE__*/ S.suspend(() => S.Struct({})).annotate({
+    identifier: "PutAccessPasswordResponse",
+});
+export const PutAccessTfaRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    userid: S.String.pipe(T.Label()),
+    id: S.String.pipe(T.Label()),
+    description: S.optional(S.String),
+    enable: S.optional(S.String),
+    password: S.optional(S.String),
+}).pipe(T.Http({
+    method: "PUT",
+    uri: "/access/tfa/{userid}/{id}",
+    code: 200,
+    contentType: "form-urlencoded",
+}))).annotate({
+    identifier: "PutAccessTfaRequest",
+});
+export const PutAccessTfaResponse = /*@__PURE__*/ S.suspend(() => S.Struct({})).annotate({
+    identifier: "PutAccessTfaResponse",
+});
+export const PutAccessUserRequestDeleteItem = S.String;
+export const PutAccessUserRequestDeleteList = /*@__PURE__*/ S.Array(PutAccessUserRequestDeleteItem);
+export const PutAccessUserRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    userid: S.String.pipe(T.Label()),
+    comment: S.optional(S.String),
+    delete: S.optional(PutAccessUserRequestDeleteList),
+    digest: S.optional(S.String),
+    email: S.optional(S.String),
+    enable: S.optional(S.String),
+    expire: S.optional(S.String),
+    firstname: S.optional(S.String),
+    lastname: S.optional(S.String),
+    password: S.optional(S.String),
+}).pipe(T.Http({
+    method: "PUT",
+    uri: "/access/users/{userid}",
+    code: 200,
+    contentType: "form-urlencoded",
+}))).annotate({
+    identifier: "PutAccessUserRequest",
+});
+export const PutAccessUserResponse = /*@__PURE__*/ S.suspend(() => S.Struct({})).annotate({
+    identifier: "PutAccessUserResponse",
+});
+export const PutAccessUserTokenRequestDeleteItem = S.String;
+export const PutAccessUserTokenRequestDeleteList = /*@__PURE__*/ S.Array(PutAccessUserTokenRequestDeleteItem);
+export const PutAccessUserTokenRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    userid: S.String.pipe(T.Label()),
+    token_name: S.String.pipe(T.Label()),
+    comment: S.optional(S.String),
+    delete: S.optional(PutAccessUserTokenRequestDeleteList),
+    digest: S.optional(S.String),
+    enable: S.optional(S.String),
+    expire: S.optional(S.String),
+    regenerate: S.optional(S.String),
+}).pipe(T.Http({
+    method: "PUT",
+    uri: "/access/users/{userid}/token/{token-name}",
+    code: 200,
+    contentType: "form-urlencoded",
+}))).annotate({
+    identifier: "PutAccessUserTokenRequest",
+});
+export const PutAccessUserTokenResponse = /*@__PURE__*/ S.suspend(() => S.Struct({
+    secret: S.optional(S.String),
+})).annotate({
+    identifier: "PutAccessUserTokenResponse",
+});
+export const PutAccessUserUnlockTfaRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    userid: S.String.pipe(T.Label()),
+}).pipe(T.Http({
+    method: "PUT",
+    uri: "/access/users/{userid}/unlock-tfa",
+    code: 200,
+}))).annotate({
+    identifier: "PutAccessUserUnlockTfaRequest",
+});
+export const PutAccessUserUnlockTfaResponse = /*@__PURE__*/ S.suspend(() => S.Unknown.pipe(T.RawResponseRoot())).annotate({
+    identifier: "PutAccessUserUnlockTfaResponse",
+});
+export const SyncAccessDomainRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    realm: S.String.pipe(T.Label()),
+    dry_run: S.optional(S.String.pipe(T.Body("dry-run"))),
+    enable_new: S.optional(S.String.pipe(T.Body("enable-new"))),
+    remove_vanished: S.optional(S.String.pipe(T.Body("remove-vanished"))),
+}).pipe(T.Http({
+    method: "POST",
+    uri: "/access/domains/{realm}/sync",
+    code: 200,
+    contentType: "form-urlencoded",
+}))).annotate({
+    identifier: "SyncAccessDomainRequest",
+});
+export const SyncAccessDomainResponse = /*@__PURE__*/ S.suspend(() => S.String.pipe(T.RawResponseRoot())).annotate({
+    identifier: "SyncAccessDomainResponse",
+});
+export const UpdateAccessTfaRequestType = S.String;
+export const UpdateAccessTfaRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    userid: S.String.pipe(T.Label()),
+    challenge: S.optional(S.String),
+    description: S.optional(S.String),
+    password: S.optional(S.String),
+    totp: S.optional(S.String),
+    type: UpdateAccessTfaRequestType,
+    value: S.optional(S.String),
+}).pipe(T.Http({
+    method: "POST",
+    uri: "/access/tfa/{userid}",
+    code: 200,
+    contentType: "form-urlencoded",
+}))).annotate({
+    identifier: "UpdateAccessTfaRequest",
+});
+export const UpdateAccessTfaResponseRecoveryList = /*@__PURE__*/ S.Array(S.Number);
+export const UpdateAccessTfaResponse = /*@__PURE__*/ S.suspend(() => S.Struct({
+    challenge: S.optional(S.String),
+    id: S.optional(S.String),
+    recovery: UpdateAccessTfaResponseRecoveryList,
+})).annotate({
+    identifier: "UpdateAccessTfaResponse",
+});
+export const UpdateAccessUserTokenRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    userid: S.String.pipe(T.Label()),
+    token_name: S.String.pipe(T.Label()),
+    comment: S.optional(S.String),
+    digest: S.optional(S.String),
+    enable: S.optional(S.String),
+    expire: S.optional(S.String),
+}).pipe(T.Http({
+    method: "POST",
+    uri: "/access/users/{userid}/token/{token-name}",
+    code: 200,
+    contentType: "form-urlencoded",
+}))).annotate({
+    identifier: "UpdateAccessUserTokenRequest",
+});
+export const UpdateAccessUserTokenResponse = /*@__PURE__*/ S.suspend(() => S.Struct({
+    tokenid: S.String,
+    value: S.String,
+})).annotate({
+    identifier: "UpdateAccessUserTokenResponse",
+});
+/** Create OpenID Redirect Session */
+export const createAccessOpenidAuthUrl = /*@__PURE__*/ API.make(() => ({
+    input: CreateAccessOpenidAuthUrlRequest,
+    output: CreateAccessOpenidAuthUrlResponse,
+    errors: [],
+    protocol: ProxmoxBackupProtocol,
+    retry: Retry.Retry,
+}));
+/** Either create a new HttpOnly ticket or a regular ticket. */
+export const createAccessTicket = /*@__PURE__*/ API.make(() => ({
+    input: CreateAccessTicketRequest,
+    output: CreateAccessTicketResponse,
+    errors: [],
+    protocol: ProxmoxBackupProtocol,
+    retry: Retry.Retry,
+}));
+/** Create new user. */
+export const createAccessUser = /*@__PURE__*/ API.make(() => ({
+    input: CreateAccessUserRequest,
+    output: CreateAccessUserResponse,
+    errors: [],
+    protocol: ProxmoxBackupProtocol,
+    retry: Retry.Retry,
+}));
+/** Verify that a VNC ticket is valid for a given Authid, path and privilege(s). */
+export const createAccessVncticket = /*@__PURE__*/ API.make(() => ({
+    input: CreateAccessVncticketRequest,
+    output: CreateAccessVncticketResponse,
+    errors: [],
+    protocol: ProxmoxBackupProtocol,
+    retry: Retry.Retry,
+}));
+/** Delete a single TFA entry. */
+export const deleteAccessTfa = /*@__PURE__*/ API.make(() => ({
+    input: DeleteAccessTfaRequest,
+    output: DeleteAccessTfaResponse,
+    errors: [],
+    protocol: ProxmoxBackupProtocol,
+    retry: Retry.Retry,
+}));
+export const deleteAccessTicket = /*@__PURE__*/ API.make(() => ({
+    input: DeleteAccessTicketRequest,
+    output: DeleteAccessTicketResponse,
+    errors: [],
+    protocol: ProxmoxBackupProtocol,
+    retry: Retry.Retry,
+}));
+/** Remove a user from the configuration file. */
+export const deleteAccessUser = /*@__PURE__*/ API.make(() => ({
+    input: DeleteAccessUserRequest,
+    output: DeleteAccessUserResponse,
+    errors: [],
+    protocol: ProxmoxBackupProtocol,
+    retry: Retry.Retry,
+}));
+/** Delete a user's API token */
+export const deleteAccessUserToken = /*@__PURE__*/ API.make(() => ({
+    input: DeleteAccessUserTokenRequest,
+    output: DeleteAccessUserTokenResponse,
+    errors: [],
+    protocol: ProxmoxBackupProtocol,
+    retry: Retry.Retry,
+}));
+/** Directory index. */
+export const getAccess = /*@__PURE__*/ API.make(() => ({
+    input: GetAccessRequest,
+    output: GetAccessResponse,
+    errors: [],
+    protocol: ProxmoxBackupProtocol,
+    retry: Retry.Retry,
+}));
+/** Directory index. */
+export const getAccessOpenid = /*@__PURE__*/ API.make(() => ({
+    input: GetAccessOpenidRequest,
+    output: GetAccessOpenidResponse,
+    errors: [],
+    protocol: ProxmoxBackupProtocol,
+    retry: Retry.Retry,
+}));
+/** List permissions of given or currently authenticated user / API token. Optionally limited to specific path. */
+export const getAccessPermissions = /*@__PURE__*/ API.make(() => ({
+    input: GetAccessPermissionsRequest,
+    output: GetAccessPermissionsResponse,
+    errors: [],
+    protocol: ProxmoxBackupProtocol,
+    retry: Retry.Retry,
+}));
+/** Add a TOTP secret to the user. */
+export const getAccessTfa = /*@__PURE__*/ API.make(() => ({
+    input: GetAccessTfaRequest,
+    output: GetAccessTfaResponse,
+    errors: [],
+    protocol: ProxmoxBackupProtocol,
+    retry: Retry.Retry,
+}));
+/** Get a single TFA entry. */
+export const getAccessTfa2 = /*@__PURE__*/ API.make(() => ({
+    input: GetAccessTfa2Request,
+    output: GetAccessTfa2Response,
+    errors: [],
+    protocol: ProxmoxBackupProtocol,
+    retry: Retry.Retry,
+}));
+/** Read user configuration data. */
+export const getAccessUser = /*@__PURE__*/ API.make(() => ({
+    input: GetAccessUserRequest,
+    output: GetAccessUserResponse,
+    errors: [],
+    protocol: ProxmoxBackupProtocol,
+    retry: Retry.Retry,
+}));
+/** Read user's API token metadata */
+export const getAccessUserToken = /*@__PURE__*/ API.make(() => ({
+    input: GetAccessUserTokenRequest,
+    output: GetAccessUserTokenResponse,
+    errors: [],
+    protocol: ProxmoxBackupProtocol,
+    retry: Retry.Retry,
+}));
+/** Read Access Control List (ACLs). */
+export const listAccessAcl = /*@__PURE__*/ API.make(() => ({
+    input: ListAccessAclRequest,
+    output: ListAccessAclResponse,
+    errors: [],
+    protocol: ProxmoxBackupProtocol,
+    retry: Retry.Retry,
+}));
+/** Authentication domain/realm index. */
+export const listAccessDomains = /*@__PURE__*/ API.make(() => ({
+    input: ListAccessDomainsRequest,
+    output: ListAccessDomainsResponse,
+    errors: [],
+    protocol: ProxmoxBackupProtocol,
+    retry: Retry.Retry,
+}));
+/** Role list */
+export const listAccessRoles = /*@__PURE__*/ API.make(() => ({
+    input: ListAccessRolesRequest,
+    output: ListAccessRolesResponse,
+    errors: [],
+    protocol: ProxmoxBackupProtocol,
+    retry: Retry.Retry,
+}));
+/** List user TFA configuration. */
+export const listAccessTfa = /*@__PURE__*/ API.make(() => ({
+    input: ListAccessTfaRequest,
+    output: ListAccessTfaResponse,
+    errors: [],
+    protocol: ProxmoxBackupProtocol,
+    retry: Retry.Retry,
+}));
+/** List users */
+export const listAccessUsers = /*@__PURE__*/ API.make(() => ({
+    input: ListAccessUsersRequest,
+    output: ListAccessUsersResponse,
+    errors: [],
+    protocol: ProxmoxBackupProtocol,
+    retry: Retry.Retry,
+}));
+/** List user's API tokens */
+export const listAccessUserToken = /*@__PURE__*/ API.make(() => ({
+    input: ListAccessUserTokenRequest,
+    output: ListAccessUserTokenResponse,
+    errors: [],
+    protocol: ProxmoxBackupProtocol,
+    retry: Retry.Retry,
+}));
+/** Get a new ticket as an HttpOnly cookie. Supports tickets via cookies. */
+export const loginAccessOpenid = /*@__PURE__*/ API.make(() => ({
+    input: LoginAccessOpenidRequest,
+    output: LoginAccessOpenidResponse,
+    errors: [],
+    protocol: ProxmoxBackupProtocol,
+    retry: Retry.Retry,
+}));
+/** Update Access Control List (ACLs). */
+export const putAccessAcl = /*@__PURE__*/ API.make(() => ({
+    input: PutAccessAclRequest,
+    output: PutAccessAclResponse,
+    errors: [],
+    protocol: ProxmoxBackupProtocol,
+    retry: Retry.Retry,
+}));
+/** Change user password Each user is allowed to change his own password. Superuser can change all passwords. */
+export const putAccessPassword = /*@__PURE__*/ API.make(() => ({
+    input: PutAccessPasswordRequest,
+    output: PutAccessPasswordResponse,
+    errors: [],
+    protocol: ProxmoxBackupProtocol,
+    retry: Retry.Retry,
+}));
+/** Update user's TFA entry description. */
+export const putAccessTfa = /*@__PURE__*/ API.make(() => ({
+    input: PutAccessTfaRequest,
+    output: PutAccessTfaResponse,
+    errors: [],
+    protocol: ProxmoxBackupProtocol,
+    retry: Retry.Retry,
+}));
+/** Update user configuration. To change a user's password use the 'PUT /access/password' endpoint. */
+export const putAccessUser = /*@__PURE__*/ API.make(() => ({
+    input: PutAccessUserRequest,
+    output: PutAccessUserResponse,
+    errors: [],
+    protocol: ProxmoxBackupProtocol,
+    retry: Retry.Retry,
+}));
+/** Update user's API token metadata */
+export const putAccessUserToken = /*@__PURE__*/ API.make(() => ({
+    input: PutAccessUserTokenRequest,
+    output: PutAccessUserTokenResponse,
+    errors: [],
+    protocol: ProxmoxBackupProtocol,
+    retry: Retry.Retry,
+}));
+/** Unlock a user's TFA authentication. */
+export const putAccessUserUnlockTfa = /*@__PURE__*/ API.make(() => ({
+    input: PutAccessUserUnlockTfaRequest,
+    output: PutAccessUserUnlockTfaResponse,
+    errors: [],
+    protocol: ProxmoxBackupProtocol,
+    retry: Retry.Retry,
+}));
+/** Synchronize users of a given realm */
+export const syncAccessDomain = /*@__PURE__*/ API.make(() => ({
+    input: SyncAccessDomainRequest,
+    output: SyncAccessDomainResponse,
+    errors: [],
+    protocol: ProxmoxBackupProtocol,
+    retry: Retry.Retry,
+}));
+/** Add a TFA entry to the user. */
+export const updateAccessTfa = /*@__PURE__*/ API.make(() => ({
+    input: UpdateAccessTfaRequest,
+    output: UpdateAccessTfaResponse,
+    errors: [],
+    protocol: ProxmoxBackupProtocol,
+    retry: Retry.Retry,
+}));
+/** Generate a new API token with given metadata */
+export const updateAccessUserToken = /*@__PURE__*/ API.make(() => ({
+    input: UpdateAccessUserTokenRequest,
+    output: UpdateAccessUserTokenResponse,
+    errors: [],
+    protocol: ProxmoxBackupProtocol,
+    retry: Retry.Retry,
+}));
+//# sourceMappingURL=access.js.map