@homeflare/distilled-proxmox 0.2.0

package/dist/services/access.js

@@ -0,0 +1,1208 @@
+// AUTO-GENERATED by scripts/generate.ts from .generated-specs (apidata.js, via scripts/apidoc.ts — see its header). Do not edit.
+import * as S from "@distilled.cloud/core/schema";
+import * as API from "@distilled.cloud/core/api";
+import * as T from "../traits.js";
+import { ProxmoxProtocol, } from "../protocol.js";
+import * as Retry from "../retry.js";
+export const CreateAccessDomainRequestMode = S.String;
+export const CreateAccessDomainRequestSslversion = S.String;
+export const CreateAccessDomainRequestType = S.String;
+export const CreateAccessDomainRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    acr_values: S.optional(S.String.pipe(T.Body("acr-values"))),
+    audiences: S.optional(S.String),
+    autocreate: S.optional(S.String),
+    base_dn: S.optional(S.String),
+    bind_dn: S.optional(S.String),
+    capath: S.optional(S.String),
+    case_sensitive: S.optional(S.String.pipe(T.Body("case-sensitive"))),
+    cert: S.optional(S.String),
+    certkey: S.optional(S.String),
+    check_connection: S.optional(S.String.pipe(T.Body("check-connection"))),
+    client_id: S.optional(S.String.pipe(T.Body("client-id"))),
+    client_key: S.optional(S.String.pipe(T.Body("client-key"))),
+    comment: S.optional(S.String),
+    default: S.optional(S.String),
+    domain: S.optional(S.String),
+    filter: S.optional(S.String),
+    group_classes: S.optional(S.String),
+    group_dn: S.optional(S.String),
+    group_filter: S.optional(S.String),
+    group_name_attr: S.optional(S.String),
+    groups_autocreate: S.optional(S.String.pipe(T.Body("groups-autocreate"))),
+    groups_claim: S.optional(S.String.pipe(T.Body("groups-claim"))),
+    groups_overwrite: S.optional(S.String.pipe(T.Body("groups-overwrite"))),
+    issuer_url: S.optional(S.String.pipe(T.Body("issuer-url"))),
+    mode: S.optional(CreateAccessDomainRequestMode),
+    password: S.optional(S.String),
+    port: S.optional(S.String),
+    prompt: S.optional(S.String),
+    query_userinfo: S.optional(S.String.pipe(T.Body("query-userinfo"))),
+    realm: S.String,
+    scopes: S.optional(S.String),
+    secure: S.optional(S.String),
+    server1: S.optional(S.String),
+    server2: S.optional(S.String),
+    sslversion: S.optional(CreateAccessDomainRequestSslversion),
+    sync_defaults_options: S.optional(S.String.pipe(T.Body("sync-defaults-options"))),
+    sync_attributes: S.optional(S.String),
+    tfa: S.optional(S.String),
+    type: CreateAccessDomainRequestType,
+    user_attr: S.optional(S.String),
+    user_classes: S.optional(S.String),
+    username_claim: S.optional(S.String.pipe(T.Body("username-claim"))),
+    verify: S.optional(S.String),
+}).pipe(T.Http({
+    method: "POST",
+    uri: "/access/domains",
+    code: 200,
+    contentType: "form-urlencoded",
+}))).annotate({
+    identifier: "CreateAccessDomainRequest",
+});
+export const CreateAccessDomainResponse = /*@__PURE__*/ S.suspend(() => S.Struct({})).annotate({
+    identifier: "CreateAccessDomainResponse",
+});
+export const CreateAccessGroupRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    comment: S.optional(S.String),
+    groupid: S.String,
+}).pipe(T.Http({
+    method: "POST",
+    uri: "/access/groups",
+    code: 200,
+    contentType: "form-urlencoded",
+}))).annotate({
+    identifier: "CreateAccessGroupRequest",
+});
+export const CreateAccessGroupResponse = /*@__PURE__*/ S.suspend(() => S.Struct({})).annotate({
+    identifier: "CreateAccessGroupResponse",
+});
+export const CreateAccessOpenidAuthUrlRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    realm: S.String,
+    redirect_url: S.String.pipe(T.Body("redirect-url")),
+}).pipe(T.Http({
+    method: "POST",
+    uri: "/access/openid/auth-url",
+    code: 200,
+    contentType: "form-urlencoded",
+}))).annotate({
+    identifier: "CreateAccessOpenidAuthUrlRequest",
+});
+export const CreateAccessOpenidAuthUrlResponse = /*@__PURE__*/ S.suspend(() => S.String.pipe(T.RawResponseRoot())).annotate({
+    identifier: "CreateAccessOpenidAuthUrlResponse",
+});
+export const CreateAccessRoleRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    privs: S.optional(S.String),
+    roleid: S.String,
+}).pipe(T.Http({
+    method: "POST",
+    uri: "/access/roles",
+    code: 200,
+    contentType: "form-urlencoded",
+}))).annotate({
+    identifier: "CreateAccessRoleRequest",
+});
+export const CreateAccessRoleResponse = /*@__PURE__*/ S.suspend(() => S.Struct({})).annotate({
+    identifier: "CreateAccessRoleResponse",
+});
+export const CreateAccessTicketRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    new_format: S.optional(S.String.pipe(T.Body("new-format"))),
+    otp: S.optional(S.String),
+    password: S.String,
+    path: S.optional(S.String),
+    privs: S.optional(S.String),
+    realm: S.optional(S.String),
+    tfa_challenge: S.optional(S.String.pipe(T.Body("tfa-challenge"))),
+    username: S.String,
+}).pipe(T.Http({
+    method: "POST",
+    uri: "/access/ticket",
+    code: 200,
+    contentType: "form-urlencoded",
+}))).annotate({
+    identifier: "CreateAccessTicketRequest",
+});
+export const CreateAccessTicketResponse = /*@__PURE__*/ S.suspend(() => S.Struct({
+    CSRFPreventionToken: S.optional(S.String),
+    clustername: S.optional(S.String),
+    ticket: S.optional(S.String),
+    username: S.String,
+})).annotate({
+    identifier: "CreateAccessTicketResponse",
+});
+export const CreateAccessUserRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    comment: S.optional(S.String),
+    email: S.optional(S.String),
+    enable: S.optional(S.String),
+    expire: S.optional(S.String),
+    firstname: S.optional(S.String),
+    groups: S.optional(S.String),
+    keys: S.optional(S.String),
+    lastname: S.optional(S.String),
+    password: S.optional(S.String),
+    userid: S.String,
+}).pipe(T.Http({
+    method: "POST",
+    uri: "/access/users",
+    code: 200,
+    contentType: "form-urlencoded",
+}))).annotate({
+    identifier: "CreateAccessUserRequest",
+});
+export const CreateAccessUserResponse = /*@__PURE__*/ S.suspend(() => S.Struct({})).annotate({
+    identifier: "CreateAccessUserResponse",
+});
+export const CreateAccessVncticketRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    authid: S.String,
+    path: S.String,
+    port: S.optional(S.String),
+    privs: S.String,
+    vncticket: S.String,
+}).pipe(T.Http({
+    method: "POST",
+    uri: "/access/vncticket",
+    code: 200,
+    contentType: "form-urlencoded",
+}))).annotate({
+    identifier: "CreateAccessVncticketRequest",
+});
+export const CreateAccessVncticketResponse = /*@__PURE__*/ S.suspend(() => S.Struct({})).annotate({
+    identifier: "CreateAccessVncticketResponse",
+});
+export const DeleteAccessDomainRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    realm: S.String.pipe(T.Label()),
+}).pipe(T.Http({ method: "DELETE", uri: "/access/domains/{realm}", code: 200 }))).annotate({
+    identifier: "DeleteAccessDomainRequest",
+});
+export const DeleteAccessDomainResponse = /*@__PURE__*/ S.suspend(() => S.Struct({})).annotate({
+    identifier: "DeleteAccessDomainResponse",
+});
+export const DeleteAccessGroupRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    groupid: S.String.pipe(T.Label()),
+}).pipe(T.Http({ method: "DELETE", uri: "/access/groups/{groupid}", code: 200 }))).annotate({
+    identifier: "DeleteAccessGroupRequest",
+});
+export const DeleteAccessGroupResponse = /*@__PURE__*/ S.suspend(() => S.Struct({})).annotate({
+    identifier: "DeleteAccessGroupResponse",
+});
+export const DeleteAccessRoleRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    roleid: S.String.pipe(T.Label()),
+}).pipe(T.Http({ method: "DELETE", uri: "/access/roles/{roleid}", code: 200 }))).annotate({
+    identifier: "DeleteAccessRoleRequest",
+});
+export const DeleteAccessRoleResponse = /*@__PURE__*/ S.suspend(() => S.Struct({})).annotate({
+    identifier: "DeleteAccessRoleResponse",
+});
+export const DeleteAccessTfaRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    userid: S.String.pipe(T.Label()),
+    id: S.String.pipe(T.Label()),
+    password: S.optional(S.String),
+}).pipe(T.Http({
+    method: "DELETE",
+    uri: "/access/tfa/{userid}/{id}",
+    code: 200,
+    contentType: "form-urlencoded",
+}))).annotate({
+    identifier: "DeleteAccessTfaRequest",
+});
+export const DeleteAccessTfaResponse = /*@__PURE__*/ S.suspend(() => S.Struct({})).annotate({
+    identifier: "DeleteAccessTfaResponse",
+});
+export const DeleteAccessUserRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    userid: S.String.pipe(T.Label()),
+}).pipe(T.Http({ method: "DELETE", uri: "/access/users/{userid}", code: 200 }))).annotate({
+    identifier: "DeleteAccessUserRequest",
+});
+export const DeleteAccessUserResponse = /*@__PURE__*/ S.suspend(() => S.Struct({})).annotate({
+    identifier: "DeleteAccessUserResponse",
+});
+export const DeleteAccessUserTokenRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    userid: S.String.pipe(T.Label()),
+    tokenid: S.String.pipe(T.Label()),
+}).pipe(T.Http({
+    method: "DELETE",
+    uri: "/access/users/{userid}/token/{tokenid}",
+    code: 200,
+}))).annotate({
+    identifier: "DeleteAccessUserTokenRequest",
+});
+export const DeleteAccessUserTokenResponse = /*@__PURE__*/ S.suspend(() => S.Struct({})).annotate({
+    identifier: "DeleteAccessUserTokenResponse",
+});
+export const GetAccessDomainRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    realm: S.String.pipe(T.Label()),
+}).pipe(T.Http({ method: "GET", uri: "/access/domains/{realm}", code: 200 }))).annotate({
+    identifier: "GetAccessDomainRequest",
+});
+export const GetAccessDomainResponse = /*@__PURE__*/ S.suspend(() => S.Unknown.pipe(T.RawResponseRoot())).annotate({
+    identifier: "GetAccessDomainResponse",
+});
+export const GetAccessGroupRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    groupid: S.String.pipe(T.Label()),
+}).pipe(T.Http({ method: "GET", uri: "/access/groups/{groupid}", code: 200 }))).annotate({
+    identifier: "GetAccessGroupRequest",
+});
+export const GetAccessGroupResponseMembersList = /*@__PURE__*/ S.Array(S.String);
+export const GetAccessGroupResponse = /*@__PURE__*/ S.suspend(() => S.Struct({
+    comment: S.optional(S.String),
+    members: GetAccessGroupResponseMembersList,
+})).annotate({
+    identifier: "GetAccessGroupResponse",
+});
+export const GetAccessPermissionsRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    path: S.optional(S.String.pipe(T.Query())),
+    userid: S.optional(S.String.pipe(T.Query())),
+}).pipe(T.Http({ method: "GET", uri: "/access/permissions", code: 200 }))).annotate({
+    identifier: "GetAccessPermissionsRequest",
+});
+export const GetAccessPermissionsResponse = /*@__PURE__*/ S.suspend(() => S.Unknown.pipe(T.RawResponseRoot())).annotate({
+    identifier: "GetAccessPermissionsResponse",
+});
+export const GetAccessRoleRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    roleid: S.String.pipe(T.Label()),
+}).pipe(T.Http({ method: "GET", uri: "/access/roles/{roleid}", code: 200 }))).annotate({
+    identifier: "GetAccessRoleRequest",
+});
+export const GetAccessRoleResponse = /*@__PURE__*/ S.suspend(() => S.Struct({
+    Datastore_Allocate: S.optional(S.Unknown.pipe(T.Body("Datastore.Allocate"))),
+    Datastore_AllocateSpace: S.optional(S.Unknown.pipe(T.Body("Datastore.AllocateSpace"))),
+    Datastore_AllocateTemplate: S.optional(S.Unknown.pipe(T.Body("Datastore.AllocateTemplate"))),
+    Datastore_Audit: S.optional(S.Unknown.pipe(T.Body("Datastore.Audit"))),
+    Group_Allocate: S.optional(S.Unknown.pipe(T.Body("Group.Allocate"))),
+    Mapping_Audit: S.optional(S.Unknown.pipe(T.Body("Mapping.Audit"))),
+    Mapping_Modify: S.optional(S.Unknown.pipe(T.Body("Mapping.Modify"))),
+    Mapping_Use: S.optional(S.Unknown.pipe(T.Body("Mapping.Use"))),
+    Permissions_Modify: S.optional(S.Unknown.pipe(T.Body("Permissions.Modify"))),
+    Pool_Allocate: S.optional(S.Unknown.pipe(T.Body("Pool.Allocate"))),
+    Pool_Audit: S.optional(S.Unknown.pipe(T.Body("Pool.Audit"))),
+    Realm_Allocate: S.optional(S.Unknown.pipe(T.Body("Realm.Allocate"))),
+    Realm_AllocateUser: S.optional(S.Unknown.pipe(T.Body("Realm.AllocateUser"))),
+    SDN_Allocate: S.optional(S.Unknown.pipe(T.Body("SDN.Allocate"))),
+    SDN_Audit: S.optional(S.Unknown.pipe(T.Body("SDN.Audit"))),
+    SDN_Use: S.optional(S.Unknown.pipe(T.Body("SDN.Use"))),
+    Sys_AccessNetwork: S.optional(S.Unknown.pipe(T.Body("Sys.AccessNetwork"))),
+    Sys_Audit: S.optional(S.Unknown.pipe(T.Body("Sys.Audit"))),
+    Sys_Console: S.optional(S.Unknown.pipe(T.Body("Sys.Console"))),
+    Sys_Incoming: S.optional(S.Unknown.pipe(T.Body("Sys.Incoming"))),
+    Sys_Modify: S.optional(S.Unknown.pipe(T.Body("Sys.Modify"))),
+    Sys_PowerMgmt: S.optional(S.Unknown.pipe(T.Body("Sys.PowerMgmt"))),
+    Sys_Syslog: S.optional(S.Unknown.pipe(T.Body("Sys.Syslog"))),
+    User_Modify: S.optional(S.Unknown.pipe(T.Body("User.Modify"))),
+    VM_Allocate: S.optional(S.Unknown.pipe(T.Body("VM.Allocate"))),
+    VM_Audit: S.optional(S.Unknown.pipe(T.Body("VM.Audit"))),
+    VM_Backup: S.optional(S.Unknown.pipe(T.Body("VM.Backup"))),
+    VM_Clone: S.optional(S.Unknown.pipe(T.Body("VM.Clone"))),
+    VM_Config_CDROM: S.optional(S.Unknown.pipe(T.Body("VM.Config.CDROM"))),
+    VM_Config_CPU: S.optional(S.Unknown.pipe(T.Body("VM.Config.CPU"))),
+    VM_Config_Cloudinit: S.optional(S.Unknown.pipe(T.Body("VM.Config.Cloudinit"))),
+    VM_Config_Disk: S.optional(S.Unknown.pipe(T.Body("VM.Config.Disk"))),
+    VM_Config_HWType: S.optional(S.Unknown.pipe(T.Body("VM.Config.HWType"))),
+    VM_Config_Memory: S.optional(S.Unknown.pipe(T.Body("VM.Config.Memory"))),
+    VM_Config_Network: S.optional(S.Unknown.pipe(T.Body("VM.Config.Network"))),
+    VM_Config_Options: S.optional(S.Unknown.pipe(T.Body("VM.Config.Options"))),
+    VM_Console: S.optional(S.Unknown.pipe(T.Body("VM.Console"))),
+    VM_GuestAgent_Audit: S.optional(S.Unknown.pipe(T.Body("VM.GuestAgent.Audit"))),
+    VM_GuestAgent_FileRead: S.optional(S.Unknown.pipe(T.Body("VM.GuestAgent.FileRead"))),
+    VM_GuestAgent_FileSystemMgmt: S.optional(S.Unknown.pipe(T.Body("VM.GuestAgent.FileSystemMgmt"))),
+    VM_GuestAgent_FileWrite: S.optional(S.Unknown.pipe(T.Body("VM.GuestAgent.FileWrite"))),
+    VM_GuestAgent_Unrestricted: S.optional(S.Unknown.pipe(T.Body("VM.GuestAgent.Unrestricted"))),
+    VM_Migrate: S.optional(S.Unknown.pipe(T.Body("VM.Migrate"))),
+    VM_PowerMgmt: S.optional(S.Unknown.pipe(T.Body("VM.PowerMgmt"))),
+    VM_Replicate: S.optional(S.Unknown.pipe(T.Body("VM.Replicate"))),
+    VM_Snapshot: S.optional(S.Unknown.pipe(T.Body("VM.Snapshot"))),
+    VM_Snapshot_Rollback: S.optional(S.Unknown.pipe(T.Body("VM.Snapshot.Rollback"))),
+})).annotate({
+    identifier: "GetAccessRoleResponse",
+});
+export const GetAccessTfaRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    userid: S.String.pipe(T.Label()),
+}).pipe(T.Http({ method: "GET", uri: "/access/tfa/{userid}", code: 200 }))).annotate({
+    identifier: "GetAccessTfaRequest",
+});
+export const GetAccessTfaResponseBodyItemType = S.String;
+export const GetAccessTfaResponseBodyItem = /*@__PURE__*/ S.suspend(() => S.Struct({
+    created: S.Number,
+    description: S.String,
+    enable: S.optional(S.Unknown),
+    id: S.String,
+    type: GetAccessTfaResponseBodyItemType,
+})).annotate({
+    identifier: "GetAccessTfaResponseBodyItem",
+});
+export const GetAccessTfaResponseBodyList = /*@__PURE__*/ S.Array(GetAccessTfaResponseBodyItem);
+export const GetAccessTfaResponse = /*@__PURE__*/ S.suspend(() => GetAccessTfaResponseBodyList.pipe(T.RawResponseRoot())).annotate({
+    identifier: "GetAccessTfaResponse",
+});
+export const GetAccessTfa2Request = /*@__PURE__*/ S.suspend(() => S.Struct({
+    userid: S.String.pipe(T.Label()),
+    id: S.String.pipe(T.Label()),
+}).pipe(T.Http({ method: "GET", uri: "/access/tfa/{userid}/{id}", code: 200 }))).annotate({
+    identifier: "GetAccessTfa2Request",
+});
+export const GetAccessTfa2ResponseType = S.String;
+export const GetAccessTfa2Response = /*@__PURE__*/ S.suspend(() => S.Struct({
+    created: S.Number,
+    description: S.String,
+    enable: S.optional(S.Unknown),
+    id: S.String,
+    type: GetAccessTfa2ResponseType,
+})).annotate({
+    identifier: "GetAccessTfa2Response",
+});
+export const GetAccessTicketRequest = /*@__PURE__*/ S.suspend(() => S.Struct({}).pipe(T.Http({ method: "GET", uri: "/access/ticket", code: 200 }))).annotate({
+    identifier: "GetAccessTicketRequest",
+});
+export const GetAccessTicketResponse = /*@__PURE__*/ S.suspend(() => S.Struct({})).annotate({
+    identifier: "GetAccessTicketResponse",
+});
+export const GetAccessUserRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    userid: S.String.pipe(T.Label()),
+}).pipe(T.Http({ method: "GET", uri: "/access/users/{userid}", code: 200 }))).annotate({
+    identifier: "GetAccessUserRequest",
+});
+export const GetAccessUserResponseGroupsList = /*@__PURE__*/ S.Array(S.String);
+export const GetAccessUserResponse = /*@__PURE__*/ S.suspend(() => S.Struct({
+    comment: S.optional(S.String),
+    email: S.optional(S.String),
+    enable: S.optional(S.Unknown),
+    expire: S.optional(S.Number),
+    firstname: S.optional(S.String),
+    groups: S.optional(GetAccessUserResponseGroupsList),
+    keys: S.optional(S.String),
+    lastname: S.optional(S.String),
+    tokens: S.optional(S.Unknown),
+})).annotate({
+    identifier: "GetAccessUserResponse",
+});
+export const GetAccessUserTfaRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    userid: S.String.pipe(T.Label()),
+    multiple: S.optional(S.String.pipe(T.Query())),
+}).pipe(T.Http({ method: "GET", uri: "/access/users/{userid}/tfa", code: 200 }))).annotate({
+    identifier: "GetAccessUserTfaRequest",
+});
+export const GetAccessUserTfaResponseRealm = S.String;
+export const GetAccessUserTfaResponseTypesItem = S.String;
+export const GetAccessUserTfaResponseTypesList = /*@__PURE__*/ S.Array(GetAccessUserTfaResponseTypesItem);
+export const GetAccessUserTfaResponseUser = S.String;
+export const GetAccessUserTfaResponse = /*@__PURE__*/ S.suspend(() => S.Struct({
+    realm: S.optional(GetAccessUserTfaResponseRealm),
+    types: S.optional(GetAccessUserTfaResponseTypesList),
+    user: S.optional(GetAccessUserTfaResponseUser),
+})).annotate({
+    identifier: "GetAccessUserTfaResponse",
+});
+export const GetAccessUserTokenRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    userid: S.String.pipe(T.Label()),
+    tokenid: S.String.pipe(T.Label()),
+}).pipe(T.Http({
+    method: "GET",
+    uri: "/access/users/{userid}/token/{tokenid}",
+    code: 200,
+}))).annotate({
+    identifier: "GetAccessUserTokenRequest",
+});
+export const GetAccessUserTokenResponse = /*@__PURE__*/ S.suspend(() => S.Struct({
+    comment: S.optional(S.String),
+    expire: S.optional(S.Number),
+    privsep: S.optional(S.Unknown),
+})).annotate({
+    identifier: "GetAccessUserTokenResponse",
+});
+export const ListAccessRequest = /*@__PURE__*/ S.suspend(() => S.Struct({}).pipe(T.Http({ method: "GET", uri: "/access", code: 200 }))).annotate({
+    identifier: "ListAccessRequest",
+});
+export const ListAccessResponseBodyItem = /*@__PURE__*/ S.suspend(() => S.Struct({
+    subdir: S.String,
+})).annotate({
+    identifier: "ListAccessResponseBodyItem",
+});
+export const ListAccessResponseBodyList = /*@__PURE__*/ S.Array(ListAccessResponseBodyItem);
+export const ListAccessResponse = /*@__PURE__*/ S.suspend(() => ListAccessResponseBodyList.pipe(T.RawResponseRoot())).annotate({
+    identifier: "ListAccessResponse",
+});
+export const ListAccessAclRequest = /*@__PURE__*/ S.suspend(() => S.Struct({}).pipe(T.Http({ method: "GET", uri: "/access/acl", code: 200 }))).annotate({
+    identifier: "ListAccessAclRequest",
+});
+export const ListAccessAclResponseBodyItemType = S.String;
+export const ListAccessAclResponseBodyItem = /*@__PURE__*/ S.suspend(() => S.Struct({
+    path: S.String,
+    propagate: S.optional(S.Unknown),
+    roleid: S.String,
+    type: ListAccessAclResponseBodyItemType,
+    ugid: S.String,
+})).annotate({
+    identifier: "ListAccessAclResponseBodyItem",
+});
+export const ListAccessAclResponseBodyList = /*@__PURE__*/ S.Array(ListAccessAclResponseBodyItem);
+export const ListAccessAclResponse = /*@__PURE__*/ S.suspend(() => ListAccessAclResponseBodyList.pipe(T.RawResponseRoot())).annotate({
+    identifier: "ListAccessAclResponse",
+});
+export const ListAccessDomainsRequest = /*@__PURE__*/ S.suspend(() => S.Struct({}).pipe(T.Http({ method: "GET", uri: "/access/domains", code: 200 }))).annotate({
+    identifier: "ListAccessDomainsRequest",
+});
+export const ListAccessDomainsResponseBodyItemTfa = S.String;
+export const ListAccessDomainsResponseBodyItem = /*@__PURE__*/ S.suspend(() => S.Struct({
+    comment: S.optional(S.String),
+    realm: S.String,
+    tfa: S.optional(ListAccessDomainsResponseBodyItemTfa),
+    type: S.String,
+})).annotate({
+    identifier: "ListAccessDomainsResponseBodyItem",
+});
+export const ListAccessDomainsResponseBodyList = /*@__PURE__*/ S.Array(ListAccessDomainsResponseBodyItem);
+export const ListAccessDomainsResponse = /*@__PURE__*/ S.suspend(() => ListAccessDomainsResponseBodyList.pipe(T.RawResponseRoot())).annotate({
+    identifier: "ListAccessDomainsResponse",
+});
+export const ListAccessGroupsRequest = /*@__PURE__*/ S.suspend(() => S.Struct({}).pipe(T.Http({ method: "GET", uri: "/access/groups", code: 200 }))).annotate({
+    identifier: "ListAccessGroupsRequest",
+});
+export const ListAccessGroupsResponseBodyItem = /*@__PURE__*/ S.suspend(() => S.Struct({
+    comment: S.optional(S.String),
+    groupid: S.String,
+    users: S.optional(S.String),
+})).annotate({
+    identifier: "ListAccessGroupsResponseBodyItem",
+});
+export const ListAccessGroupsResponseBodyList = /*@__PURE__*/ S.Array(ListAccessGroupsResponseBodyItem);
+export const ListAccessGroupsResponse = /*@__PURE__*/ S.suspend(() => ListAccessGroupsResponseBodyList.pipe(T.RawResponseRoot())).annotate({
+    identifier: "ListAccessGroupsResponse",
+});
+export const ListAccessOpenidRequest = /*@__PURE__*/ S.suspend(() => S.Struct({}).pipe(T.Http({ method: "GET", uri: "/access/openid", code: 200 }))).annotate({
+    identifier: "ListAccessOpenidRequest",
+});
+export const ListAccessOpenidResponseBodyItem = ListAccessResponseBodyItem;
+export const ListAccessOpenidResponseBodyList = /*@__PURE__*/ S.Array(ListAccessResponseBodyItem);
+export const ListAccessOpenidResponse = /*@__PURE__*/ S.suspend(() => ListAccessOpenidResponseBodyList.pipe(T.RawResponseRoot())).annotate({
+    identifier: "ListAccessOpenidResponse",
+});
+export const ListAccessRolesRequest = /*@__PURE__*/ S.suspend(() => S.Struct({}).pipe(T.Http({ method: "GET", uri: "/access/roles", code: 200 }))).annotate({
+    identifier: "ListAccessRolesRequest",
+});
+export const ListAccessRolesResponseBodyItem = /*@__PURE__*/ S.suspend(() => S.Struct({
+    privs: S.optional(S.String),
+    roleid: S.String,
+    special: S.optional(S.Unknown),
+})).annotate({
+    identifier: "ListAccessRolesResponseBodyItem",
+});
+export const ListAccessRolesResponseBodyList = /*@__PURE__*/ S.Array(ListAccessRolesResponseBodyItem);
+export const ListAccessRolesResponse = /*@__PURE__*/ S.suspend(() => ListAccessRolesResponseBodyList.pipe(T.RawResponseRoot())).annotate({
+    identifier: "ListAccessRolesResponse",
+});
+export const ListAccessTfaRequest = /*@__PURE__*/ S.suspend(() => S.Struct({}).pipe(T.Http({ method: "GET", uri: "/access/tfa", code: 200 }))).annotate({
+    identifier: "ListAccessTfaRequest",
+});
+export const ListAccessTfaResponseBodyItemEntriesItemType = S.String;
+export const ListAccessTfaResponseBodyItemEntriesItem = /*@__PURE__*/ S.suspend(() => S.Struct({
+    created: S.Number,
+    description: S.String,
+    enable: S.optional(S.Unknown),
+    id: S.String,
+    type: ListAccessTfaResponseBodyItemEntriesItemType,
+})).annotate({
+    identifier: "ListAccessTfaResponseBodyItemEntriesItem",
+});
+export const ListAccessTfaResponseBodyItemEntriesList = /*@__PURE__*/ S.Array(ListAccessTfaResponseBodyItemEntriesItem);
+export const ListAccessTfaResponseBodyItem = /*@__PURE__*/ S.suspend(() => S.Struct({
+    entries: ListAccessTfaResponseBodyItemEntriesList,
+    tfa_locked_until: S.optional(S.Number.pipe(T.Body("tfa-locked-until"))),
+    totp_locked: S.optional(S.Unknown.pipe(T.Body("totp-locked"))),
+    userid: S.String,
+})).annotate({
+    identifier: "ListAccessTfaResponseBodyItem",
+});
+export const ListAccessTfaResponseBodyList = /*@__PURE__*/ S.Array(ListAccessTfaResponseBodyItem);
+export const ListAccessTfaResponse = /*@__PURE__*/ S.suspend(() => ListAccessTfaResponseBodyList.pipe(T.RawResponseRoot())).annotate({
+    identifier: "ListAccessTfaResponse",
+});
+export const ListAccessUsersRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    enabled: S.optional(S.String.pipe(T.Query())),
+    full: S.optional(S.String.pipe(T.Query())),
+}).pipe(T.Http({ method: "GET", uri: "/access/users", code: 200 }))).annotate({
+    identifier: "ListAccessUsersRequest",
+});
+export const ListAccessUsersResponseBodyItemTokensItem = 
+/*@__PURE__*/ S.suspend(() => S.Struct({
+    comment: S.optional(S.String),
+    expire: S.optional(S.Number),
+    privsep: S.optional(S.Unknown),
+    tokenid: S.String,
+})).annotate({
+    identifier: "ListAccessUsersResponseBodyItemTokensItem",
+});
+export const ListAccessUsersResponseBodyItemTokensList = /*@__PURE__*/ S.Array(ListAccessUsersResponseBodyItemTokensItem);
+export const ListAccessUsersResponseBodyItem = /*@__PURE__*/ S.suspend(() => S.Struct({
+    comment: S.optional(S.String),
+    email: S.optional(S.String),
+    enable: S.optional(S.Unknown),
+    expire: S.optional(S.Number),
+    firstname: S.optional(S.String),
+    groups: S.optional(S.String),
+    keys: S.optional(S.String),
+    lastname: S.optional(S.String),
+    realm_type: S.optional(S.String.pipe(T.Body("realm-type"))),
+    tfa_locked_until: S.optional(S.Number.pipe(T.Body("tfa-locked-until"))),
+    tokens: S.optional(ListAccessUsersResponseBodyItemTokensList),
+    totp_locked: S.optional(S.Unknown.pipe(T.Body("totp-locked"))),
+    userid: S.String,
+})).annotate({
+    identifier: "ListAccessUsersResponseBodyItem",
+});
+export const ListAccessUsersResponseBodyList = /*@__PURE__*/ S.Array(ListAccessUsersResponseBodyItem);
+export const ListAccessUsersResponse = /*@__PURE__*/ S.suspend(() => ListAccessUsersResponseBodyList.pipe(T.RawResponseRoot())).annotate({
+    identifier: "ListAccessUsersResponse",
+});
+export const ListAccessUserTokenRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    userid: S.String.pipe(T.Label()),
+}).pipe(T.Http({ method: "GET", uri: "/access/users/{userid}/token", code: 200 }))).annotate({
+    identifier: "ListAccessUserTokenRequest",
+});
+export const ListAccessUserTokenResponseBodyItem = ListAccessUsersResponseBodyItemTokensItem;
+export const ListAccessUserTokenResponseBodyList = /*@__PURE__*/ S.Array(ListAccessUsersResponseBodyItemTokensItem);
+export const ListAccessUserTokenResponse = /*@__PURE__*/ S.suspend(() => ListAccessUserTokenResponseBodyList.pipe(T.RawResponseRoot())).annotate({
+    identifier: "ListAccessUserTokenResponse",
+});
+export const LoginAccessOpenidRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    code: S.String,
+    redirect_url: S.String.pipe(T.Body("redirect-url")),
+    state: S.String,
+}).pipe(T.Http({
+    method: "POST",
+    uri: "/access/openid/login",
+    code: 200,
+    contentType: "form-urlencoded",
+}))).annotate({
+    identifier: "LoginAccessOpenidRequest",
+});
+export const LoginAccessOpenidResponse = /*@__PURE__*/ S.suspend(() => S.Unknown.pipe(T.RawResponseRoot())).annotate({
+    identifier: "LoginAccessOpenidResponse",
+});
+export const PutAccessAclRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    delete: S.optional(S.String),
+    groups: S.optional(S.String),
+    path: S.String,
+    propagate: S.optional(S.String),
+    roles: S.String,
+    tokens: S.optional(S.String),
+    users: S.optional(S.String),
+}).pipe(T.Http({
+    method: "PUT",
+    uri: "/access/acl",
+    code: 200,
+    contentType: "form-urlencoded",
+}))).annotate({
+    identifier: "PutAccessAclRequest",
+});
+export const PutAccessAclResponse = /*@__PURE__*/ S.suspend(() => S.Struct({})).annotate({
+    identifier: "PutAccessAclResponse",
+});
+export const PutAccessDomainRequestMode = S.String;
+export const PutAccessDomainRequestSslversion = S.String;
+export const PutAccessDomainRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    realm: S.String.pipe(T.Label()),
+    acr_values: S.optional(S.String.pipe(T.Body("acr-values"))),
+    audiences: S.optional(S.String),
+    autocreate: S.optional(S.String),
+    base_dn: S.optional(S.String),
+    bind_dn: S.optional(S.String),
+    capath: S.optional(S.String),
+    case_sensitive: S.optional(S.String.pipe(T.Body("case-sensitive"))),
+    cert: S.optional(S.String),
+    certkey: S.optional(S.String),
+    check_connection: S.optional(S.String.pipe(T.Body("check-connection"))),
+    client_id: S.optional(S.String.pipe(T.Body("client-id"))),
+    client_key: S.optional(S.String.pipe(T.Body("client-key"))),
+    comment: S.optional(S.String),
+    default: S.optional(S.String),
+    delete: S.optional(S.String),
+    digest: S.optional(S.String),
+    domain: S.optional(S.String),
+    filter: S.optional(S.String),
+    group_classes: S.optional(S.String),
+    group_dn: S.optional(S.String),
+    group_filter: S.optional(S.String),
+    group_name_attr: S.optional(S.String),
+    groups_autocreate: S.optional(S.String.pipe(T.Body("groups-autocreate"))),
+    groups_claim: S.optional(S.String.pipe(T.Body("groups-claim"))),
+    groups_overwrite: S.optional(S.String.pipe(T.Body("groups-overwrite"))),
+    issuer_url: S.optional(S.String.pipe(T.Body("issuer-url"))),
+    mode: S.optional(PutAccessDomainRequestMode),
+    password: S.optional(S.String),
+    port: S.optional(S.String),
+    prompt: S.optional(S.String),
+    query_userinfo: S.optional(S.String.pipe(T.Body("query-userinfo"))),
+    scopes: S.optional(S.String),
+    secure: S.optional(S.String),
+    server1: S.optional(S.String),
+    server2: S.optional(S.String),
+    sslversion: S.optional(PutAccessDomainRequestSslversion),
+    sync_defaults_options: S.optional(S.String.pipe(T.Body("sync-defaults-options"))),
+    sync_attributes: S.optional(S.String),
+    tfa: S.optional(S.String),
+    user_attr: S.optional(S.String),
+    user_classes: S.optional(S.String),
+    verify: S.optional(S.String),
+}).pipe(T.Http({
+    method: "PUT",
+    uri: "/access/domains/{realm}",
+    code: 200,
+    contentType: "form-urlencoded",
+}))).annotate({
+    identifier: "PutAccessDomainRequest",
+});
+export const PutAccessDomainResponse = /*@__PURE__*/ S.suspend(() => S.Struct({})).annotate({
+    identifier: "PutAccessDomainResponse",
+});
+export const PutAccessGroupRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    groupid: S.String.pipe(T.Label()),
+    comment: S.optional(S.String),
+}).pipe(T.Http({
+    method: "PUT",
+    uri: "/access/groups/{groupid}",
+    code: 200,
+    contentType: "form-urlencoded",
+}))).annotate({
+    identifier: "PutAccessGroupRequest",
+});
+export const PutAccessGroupResponse = /*@__PURE__*/ S.suspend(() => S.Struct({})).annotate({
+    identifier: "PutAccessGroupResponse",
+});
+export const PutAccessPasswordRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    confirmation_password: S.optional(S.String.pipe(T.Body("confirmation-password"))),
+    password: S.String,
+    userid: S.String,
+}).pipe(T.Http({
+    method: "PUT",
+    uri: "/access/password",
+    code: 200,
+    contentType: "form-urlencoded",
+}))).annotate({
+    identifier: "PutAccessPasswordRequest",
+});
+export const PutAccessPasswordResponse = /*@__PURE__*/ S.suspend(() => S.Struct({})).annotate({
+    identifier: "PutAccessPasswordResponse",
+});
+export const PutAccessRoleRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    roleid: S.String.pipe(T.Label()),
+    append: S.optional(S.String),
+    privs: S.optional(S.String),
+}).pipe(T.Http({
+    method: "PUT",
+    uri: "/access/roles/{roleid}",
+    code: 200,
+    contentType: "form-urlencoded",
+}))).annotate({
+    identifier: "PutAccessRoleRequest",
+});
+export const PutAccessRoleResponse = /*@__PURE__*/ S.suspend(() => S.Struct({})).annotate({
+    identifier: "PutAccessRoleResponse",
+});
+export const PutAccessTfaRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    userid: S.String.pipe(T.Label()),
+    id: S.String.pipe(T.Label()),
+    description: S.optional(S.String),
+    enable: S.optional(S.String),
+    password: S.optional(S.String),
+}).pipe(T.Http({
+    method: "PUT",
+    uri: "/access/tfa/{userid}/{id}",
+    code: 200,
+    contentType: "form-urlencoded",
+}))).annotate({
+    identifier: "PutAccessTfaRequest",
+});
+export const PutAccessTfaResponse = /*@__PURE__*/ S.suspend(() => S.Struct({})).annotate({
+    identifier: "PutAccessTfaResponse",
+});
+export const PutAccessUserRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    userid: S.String.pipe(T.Label()),
+    append: S.optional(S.String),
+    comment: S.optional(S.String),
+    email: S.optional(S.String),
+    enable: S.optional(S.String),
+    expire: S.optional(S.String),
+    firstname: S.optional(S.String),
+    groups: S.optional(S.String),
+    keys: S.optional(S.String),
+    lastname: S.optional(S.String),
+}).pipe(T.Http({
+    method: "PUT",
+    uri: "/access/users/{userid}",
+    code: 200,
+    contentType: "form-urlencoded",
+}))).annotate({
+    identifier: "PutAccessUserRequest",
+});
+export const PutAccessUserResponse = /*@__PURE__*/ S.suspend(() => S.Struct({})).annotate({
+    identifier: "PutAccessUserResponse",
+});
+export const PutAccessUserTokenRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    userid: S.String.pipe(T.Label()),
+    tokenid: S.String.pipe(T.Label()),
+    comment: S.optional(S.String),
+    delete: S.optional(S.String),
+    expire: S.optional(S.String),
+    privsep: S.optional(S.String),
+    regenerate: S.optional(S.String),
+}).pipe(T.Http({
+    method: "PUT",
+    uri: "/access/users/{userid}/token/{tokenid}",
+    code: 200,
+    contentType: "form-urlencoded",
+}))).annotate({
+    identifier: "PutAccessUserTokenRequest",
+});
+export const PutAccessUserTokenResponse = /*@__PURE__*/ S.suspend(() => S.Struct({
+    comment: S.optional(S.String),
+    expire: S.optional(S.Number),
+    full_tokenid: S.optional(S.String.pipe(T.Body("full-tokenid"))),
+    privsep: S.optional(S.Unknown),
+    value: S.optional(S.String),
+})).annotate({
+    identifier: "PutAccessUserTokenResponse",
+});
+export const PutAccessUserUnlockTfaRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    userid: S.String.pipe(T.Label()),
+}).pipe(T.Http({
+    method: "PUT",
+    uri: "/access/users/{userid}/unlock-tfa",
+    code: 200,
+}))).annotate({
+    identifier: "PutAccessUserUnlockTfaRequest",
+});
+export const PutAccessUserUnlockTfaResponse = /*@__PURE__*/ S.suspend(() => S.Unknown.pipe(T.RawResponseRoot())).annotate({
+    identifier: "PutAccessUserUnlockTfaResponse",
+});
+export const SyncAccessDomainRequestScope = S.String;
+export const SyncAccessDomainRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    realm: S.String.pipe(T.Label()),
+    dry_run: S.optional(S.String.pipe(T.Body("dry-run"))),
+    enable_new: S.String.pipe(T.Body("enable-new")),
+    full: S.String,
+    purge: S.String,
+    remove_vanished: S.String.pipe(T.Body("remove-vanished")),
+    scope: SyncAccessDomainRequestScope,
+}).pipe(T.Http({
+    method: "POST",
+    uri: "/access/domains/{realm}/sync",
+    code: 200,
+    contentType: "form-urlencoded",
+}))).annotate({
+    identifier: "SyncAccessDomainRequest",
+});
+export const SyncAccessDomainResponse = /*@__PURE__*/ S.suspend(() => S.String.pipe(T.RawResponseRoot())).annotate({
+    identifier: "SyncAccessDomainResponse",
+});
+export const UpdateAccessTfaRequestType = S.String;
+export const UpdateAccessTfaRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    userid: S.String.pipe(T.Label()),
+    challenge: S.optional(S.String),
+    description: S.optional(S.String),
+    password: S.optional(S.String),
+    totp: S.optional(S.String),
+    type: UpdateAccessTfaRequestType,
+    value: S.optional(S.String),
+}).pipe(T.Http({
+    method: "POST",
+    uri: "/access/tfa/{userid}",
+    code: 200,
+    contentType: "form-urlencoded",
+}))).annotate({
+    identifier: "UpdateAccessTfaRequest",
+});
+export const UpdateAccessTfaResponseRecoveryList = /*@__PURE__*/ S.Array(S.String);
+export const UpdateAccessTfaResponse = /*@__PURE__*/ S.suspend(() => S.Struct({
+    challenge: S.optional(S.String),
+    id: S.String,
+    recovery: S.optional(UpdateAccessTfaResponseRecoveryList),
+})).annotate({
+    identifier: "UpdateAccessTfaResponse",
+});
+export const UpdateAccessUserTokenRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    userid: S.String.pipe(T.Label()),
+    tokenid: S.String.pipe(T.Label()),
+    comment: S.optional(S.String),
+    expire: S.optional(S.String),
+    privsep: S.optional(S.String),
+}).pipe(T.Http({
+    method: "POST",
+    uri: "/access/users/{userid}/token/{tokenid}",
+    code: 200,
+    contentType: "form-urlencoded",
+}))).annotate({
+    identifier: "UpdateAccessUserTokenRequest",
+});
+export const UpdateAccessUserTokenResponseInfo = /*@__PURE__*/ S.suspend(() => S.Struct({
+    comment: S.optional(S.String),
+    expire: S.optional(S.Number),
+    privsep: S.optional(S.Unknown),
+})).annotate({
+    identifier: "UpdateAccessUserTokenResponseInfo",
+});
+export const UpdateAccessUserTokenResponse = /*@__PURE__*/ S.suspend(() => S.Struct({
+    full_tokenid: S.optional(S.String.pipe(T.Body("full-tokenid"))),
+    info: UpdateAccessUserTokenResponseInfo,
+    value: S.String,
+})).annotate({
+    identifier: "UpdateAccessUserTokenResponse",
+});
+/** Add an authentication server. (root-privileged endpoint) */
+export const createAccessDomain = /*@__PURE__*/ API.make(() => ({
+    input: CreateAccessDomainRequest,
+    output: CreateAccessDomainResponse,
+    errors: [],
+    protocol: ProxmoxProtocol,
+    retry: Retry.Retry,
+}));
+/** Create new group. (root-privileged endpoint) */
+export const createAccessGroup = /*@__PURE__*/ API.make(() => ({
+    input: CreateAccessGroupRequest,
+    output: CreateAccessGroupResponse,
+    errors: [],
+    protocol: ProxmoxProtocol,
+    retry: Retry.Retry,
+}));
+/** Get the OpenId Authorization Url for the specified realm. (root-privileged endpoint) */
+export const createAccessOpenidAuthUrl = /*@__PURE__*/ API.make(() => ({
+    input: CreateAccessOpenidAuthUrlRequest,
+    output: CreateAccessOpenidAuthUrlResponse,
+    errors: [],
+    protocol: ProxmoxProtocol,
+    retry: Retry.Retry,
+}));
+/** Create new role. (root-privileged endpoint) */
+export const createAccessRole = /*@__PURE__*/ API.make(() => ({
+    input: CreateAccessRoleRequest,
+    output: CreateAccessRoleResponse,
+    errors: [],
+    protocol: ProxmoxProtocol,
+    retry: Retry.Retry,
+}));
+/** Create or verify authentication ticket. (root-privileged endpoint) */
+export const createAccessTicket = /*@__PURE__*/ API.make(() => ({
+    input: CreateAccessTicketRequest,
+    output: CreateAccessTicketResponse,
+    errors: [],
+    protocol: ProxmoxProtocol,
+    retry: Retry.Retry,
+}));
+/** Create new user. (root-privileged endpoint) */
+export const createAccessUser = /*@__PURE__*/ API.make(() => ({
+    input: CreateAccessUserRequest,
+    output: CreateAccessUserResponse,
+    errors: [],
+    protocol: ProxmoxProtocol,
+    retry: Retry.Retry,
+}));
+/** verify VNC authentication ticket. (root-privileged endpoint) */
+export const createAccessVncticket = /*@__PURE__*/ API.make(() => ({
+    input: CreateAccessVncticketRequest,
+    output: CreateAccessVncticketResponse,
+    errors: [],
+    protocol: ProxmoxProtocol,
+    retry: Retry.Retry,
+}));
+/** Delete an authentication server. (root-privileged endpoint) */
+export const deleteAccessDomain = /*@__PURE__*/ API.make(() => ({
+    input: DeleteAccessDomainRequest,
+    output: DeleteAccessDomainResponse,
+    errors: [],
+    protocol: ProxmoxProtocol,
+    retry: Retry.Retry,
+}));
+/** Delete group. (root-privileged endpoint) */
+export const deleteAccessGroup = /*@__PURE__*/ API.make(() => ({
+    input: DeleteAccessGroupRequest,
+    output: DeleteAccessGroupResponse,
+    errors: [],
+    protocol: ProxmoxProtocol,
+    retry: Retry.Retry,
+}));
+/** Delete role. (root-privileged endpoint) */
+export const deleteAccessRole = /*@__PURE__*/ API.make(() => ({
+    input: DeleteAccessRoleRequest,
+    output: DeleteAccessRoleResponse,
+    errors: [],
+    protocol: ProxmoxProtocol,
+    retry: Retry.Retry,
+}));
+/** Delete a TFA entry by ID. (root-privileged endpoint) */
+export const deleteAccessTfa = /*@__PURE__*/ API.make(() => ({
+    input: DeleteAccessTfaRequest,
+    output: DeleteAccessTfaResponse,
+    errors: [],
+    protocol: ProxmoxProtocol,
+    retry: Retry.Retry,
+}));
+/** Delete user. (root-privileged endpoint) */
+export const deleteAccessUser = /*@__PURE__*/ API.make(() => ({
+    input: DeleteAccessUserRequest,
+    output: DeleteAccessUserResponse,
+    errors: [],
+    protocol: ProxmoxProtocol,
+    retry: Retry.Retry,
+}));
+/** Remove API token for a specific user. (root-privileged endpoint) */
+export const deleteAccessUserToken = /*@__PURE__*/ API.make(() => ({
+    input: DeleteAccessUserTokenRequest,
+    output: DeleteAccessUserTokenResponse,
+    errors: [],
+    protocol: ProxmoxProtocol,
+    retry: Retry.Retry,
+}));
+/** Get auth server configuration. */
+export const getAccessDomain = /*@__PURE__*/ API.make(() => ({
+    input: GetAccessDomainRequest,
+    output: GetAccessDomainResponse,
+    errors: [],
+    protocol: ProxmoxProtocol,
+    retry: Retry.Retry,
+}));
+/** Get group configuration. */
+export const getAccessGroup = /*@__PURE__*/ API.make(() => ({
+    input: GetAccessGroupRequest,
+    output: GetAccessGroupResponse,
+    errors: [],
+    protocol: ProxmoxProtocol,
+    retry: Retry.Retry,
+}));
+/** Retrieve effective permissions of given user/token. */
+export const getAccessPermissions = /*@__PURE__*/ API.make(() => ({
+    input: GetAccessPermissionsRequest,
+    output: GetAccessPermissionsResponse,
+    errors: [],
+    protocol: ProxmoxProtocol,
+    retry: Retry.Retry,
+}));
+/** Get role configuration. */
+export const getAccessRole = /*@__PURE__*/ API.make(() => ({
+    input: GetAccessRoleRequest,
+    output: GetAccessRoleResponse,
+    errors: [],
+    protocol: ProxmoxProtocol,
+    retry: Retry.Retry,
+}));
+/** List TFA configurations of users. (root-privileged endpoint) */
+export const getAccessTfa = /*@__PURE__*/ API.make(() => ({
+    input: GetAccessTfaRequest,
+    output: GetAccessTfaResponse,
+    errors: [],
+    protocol: ProxmoxProtocol,
+    retry: Retry.Retry,
+}));
+/** Fetch a requested TFA entry if present. (root-privileged endpoint) */
+export const getAccessTfa2 = /*@__PURE__*/ API.make(() => ({
+    input: GetAccessTfa2Request,
+    output: GetAccessTfa2Response,
+    errors: [],
+    protocol: ProxmoxProtocol,
+    retry: Retry.Retry,
+}));
+/** Dummy. Useful for formatters which want to provide a login page. */
+export const getAccessTicket = /*@__PURE__*/ API.make(() => ({
+    input: GetAccessTicketRequest,
+    output: GetAccessTicketResponse,
+    errors: [],
+    protocol: ProxmoxProtocol,
+    retry: Retry.Retry,
+}));
+/** Get user configuration. */
+export const getAccessUser = /*@__PURE__*/ API.make(() => ({
+    input: GetAccessUserRequest,
+    output: GetAccessUserResponse,
+    errors: [],
+    protocol: ProxmoxProtocol,
+    retry: Retry.Retry,
+}));
+/** Get user TFA types (Personal and Realm). (root-privileged endpoint) */
+export const getAccessUserTfa = /*@__PURE__*/ API.make(() => ({
+    input: GetAccessUserTfaRequest,
+    output: GetAccessUserTfaResponse,
+    errors: [],
+    protocol: ProxmoxProtocol,
+    retry: Retry.Retry,
+}));
+/** Get specific API token information. */
+export const getAccessUserToken = /*@__PURE__*/ API.make(() => ({
+    input: GetAccessUserTokenRequest,
+    output: GetAccessUserTokenResponse,
+    errors: [],
+    protocol: ProxmoxProtocol,
+    retry: Retry.Retry,
+}));
+/** Directory index. */
+export const listAccess = /*@__PURE__*/ API.make(() => ({
+    input: ListAccessRequest,
+    output: ListAccessResponse,
+    errors: [],
+    protocol: ProxmoxProtocol,
+    retry: Retry.Retry,
+}));
+/** Get Access Control List (ACLs). */
+export const listAccessAcl = /*@__PURE__*/ API.make(() => ({
+    input: ListAccessAclRequest,
+    output: ListAccessAclResponse,
+    errors: [],
+    protocol: ProxmoxProtocol,
+    retry: Retry.Retry,
+}));
+/** Authentication domain index. */
+export const listAccessDomains = /*@__PURE__*/ API.make(() => ({
+    input: ListAccessDomainsRequest,
+    output: ListAccessDomainsResponse,
+    errors: [],
+    protocol: ProxmoxProtocol,
+    retry: Retry.Retry,
+}));
+/** Group index. */
+export const listAccessGroups = /*@__PURE__*/ API.make(() => ({
+    input: ListAccessGroupsRequest,
+    output: ListAccessGroupsResponse,
+    errors: [],
+    protocol: ProxmoxProtocol,
+    retry: Retry.Retry,
+}));
+/** Directory index. */
+export const listAccessOpenid = /*@__PURE__*/ API.make(() => ({
+    input: ListAccessOpenidRequest,
+    output: ListAccessOpenidResponse,
+    errors: [],
+    protocol: ProxmoxProtocol,
+    retry: Retry.Retry,
+}));
+/** Role index. */
+export const listAccessRoles = /*@__PURE__*/ API.make(() => ({
+    input: ListAccessRolesRequest,
+    output: ListAccessRolesResponse,
+    errors: [],
+    protocol: ProxmoxProtocol,
+    retry: Retry.Retry,
+}));
+/** List TFA configurations of users. (root-privileged endpoint) */
+export const listAccessTfa = /*@__PURE__*/ API.make(() => ({
+    input: ListAccessTfaRequest,
+    output: ListAccessTfaResponse,
+    errors: [],
+    protocol: ProxmoxProtocol,
+    retry: Retry.Retry,
+}));
+/** User index. (root-privileged endpoint) */
+export const listAccessUsers = /*@__PURE__*/ API.make(() => ({
+    input: ListAccessUsersRequest,
+    output: ListAccessUsersResponse,
+    errors: [],
+    protocol: ProxmoxProtocol,
+    retry: Retry.Retry,
+}));
+/** Get user API tokens. */
+export const listAccessUserToken = /*@__PURE__*/ API.make(() => ({
+    input: ListAccessUserTokenRequest,
+    output: ListAccessUserTokenResponse,
+    errors: [],
+    protocol: ProxmoxProtocol,
+    retry: Retry.Retry,
+}));
+/** Verify OpenID authorization code and create a ticket. (root-privileged endpoint) */
+export const loginAccessOpenid = /*@__PURE__*/ API.make(() => ({
+    input: LoginAccessOpenidRequest,
+    output: LoginAccessOpenidResponse,
+    errors: [],
+    protocol: ProxmoxProtocol,
+    retry: Retry.Retry,
+}));
+/** Update Access Control List (add or remove permissions). (root-privileged endpoint) */
+export const putAccessAcl = /*@__PURE__*/ API.make(() => ({
+    input: PutAccessAclRequest,
+    output: PutAccessAclResponse,
+    errors: [],
+    protocol: ProxmoxProtocol,
+    retry: Retry.Retry,
+}));
+/** Update authentication server settings. (root-privileged endpoint) */
+export const putAccessDomain = /*@__PURE__*/ API.make(() => ({
+    input: PutAccessDomainRequest,
+    output: PutAccessDomainResponse,
+    errors: [],
+    protocol: ProxmoxProtocol,
+    retry: Retry.Retry,
+}));
+/** Update group data. (root-privileged endpoint) */
+export const putAccessGroup = /*@__PURE__*/ API.make(() => ({
+    input: PutAccessGroupRequest,
+    output: PutAccessGroupResponse,
+    errors: [],
+    protocol: ProxmoxProtocol,
+    retry: Retry.Retry,
+}));
+/** Change user password. (root-privileged endpoint) */
+export const putAccessPassword = /*@__PURE__*/ API.make(() => ({
+    input: PutAccessPasswordRequest,
+    output: PutAccessPasswordResponse,
+    errors: [],
+    protocol: ProxmoxProtocol,
+    retry: Retry.Retry,
+}));
+/** Update an existing role. (root-privileged endpoint) */
+export const putAccessRole = /*@__PURE__*/ API.make(() => ({
+    input: PutAccessRoleRequest,
+    output: PutAccessRoleResponse,
+    errors: [],
+    protocol: ProxmoxProtocol,
+    retry: Retry.Retry,
+}));
+/** Add a TFA entry for a user. (root-privileged endpoint) */
+export const putAccessTfa = /*@__PURE__*/ API.make(() => ({
+    input: PutAccessTfaRequest,
+    output: PutAccessTfaResponse,
+    errors: [],
+    protocol: ProxmoxProtocol,
+    retry: Retry.Retry,
+}));
+/** Update user configuration. (root-privileged endpoint) */
+export const putAccessUser = /*@__PURE__*/ API.make(() => ({
+    input: PutAccessUserRequest,
+    output: PutAccessUserResponse,
+    errors: [],
+    protocol: ProxmoxProtocol,
+    retry: Retry.Retry,
+}));
+/** Update API token for a specific user. NOTE: when 'regenerate' is set, the returned token value needs to be stored as it cannot be retrieved afterwards! (root-privileged endpoint) */
+export const putAccessUserToken = /*@__PURE__*/ API.make(() => ({
+    input: PutAccessUserTokenRequest,
+    output: PutAccessUserTokenResponse,
+    errors: [],
+    protocol: ProxmoxProtocol,
+    retry: Retry.Retry,
+}));
+/** Unlock a user's TFA authentication. (root-privileged endpoint) */
+export const putAccessUserUnlockTfa = /*@__PURE__*/ API.make(() => ({
+    input: PutAccessUserUnlockTfaRequest,
+    output: PutAccessUserUnlockTfaResponse,
+    errors: [],
+    protocol: ProxmoxProtocol,
+    retry: Retry.Retry,
+}));
+/** Syncs users and/or groups from the configured LDAP to user.cfg. NOTE: Synced groups will have the name 'name-$realm', so make sure those groups do not exist to prevent overwriting. (root-privileged endpoint) */
+export const syncAccessDomain = /*@__PURE__*/ API.make(() => ({
+    input: SyncAccessDomainRequest,
+    output: SyncAccessDomainResponse,
+    errors: [],
+    protocol: ProxmoxProtocol,
+    retry: Retry.Retry,
+}));
+/** Add a TFA entry for a user. (root-privileged endpoint) */
+export const updateAccessTfa = /*@__PURE__*/ API.make(() => ({
+    input: UpdateAccessTfaRequest,
+    output: UpdateAccessTfaResponse,
+    errors: [],
+    protocol: ProxmoxProtocol,
+    retry: Retry.Retry,
+}));
+/** Generate a new API token for a specific user. NOTE: returns API token value, which needs to be stored as it cannot be retrieved afterwards! (root-privileged endpoint) */
+export const updateAccessUserToken = /*@__PURE__*/ API.make(() => ({
+    input: UpdateAccessUserTokenRequest,
+    output: UpdateAccessUserTokenResponse,
+    errors: [],
+    protocol: ProxmoxProtocol,
+    retry: Retry.Retry,
+}));
+//# sourceMappingURL=access.js.map