@databricks/sdk-networking 0.1.0-dev.3 → 0.1.0-dev.5

package/dist/v1/model.js

@@ -2,253 +2,237 @@
 import { Temporal } from '@js-temporal/polyfill';
 import { FieldMask } from '@databricks/sdk-core/wkt';
 import { z } from 'zod';
-export var CustomerFacingVpcEndpointUseCase;
-(function (CustomerFacingVpcEndpointUseCase) {
-    CustomerFacingVpcEndpointUseCase["WORKSPACE_ACCESS"] = "WORKSPACE_ACCESS";
-    CustomerFacingVpcEndpointUseCase["DATAPLANE_RELAY_ACCESS"] = "DATAPLANE_RELAY_ACCESS";
+// eslint-disable-next-line @typescript-eslint/naming-convention -- Enum-style const object.
+export const CustomerFacingVpcEndpointUseCase = {
+    WORKSPACE_ACCESS: 'WORKSPACE_ACCESS',
+    DATAPLANE_RELAY_ACCESS: 'DATAPLANE_RELAY_ACCESS',
     /** General access, replaces WORKSPACE_ACCESS in customer-facing API. */
-    CustomerFacingVpcEndpointUseCase["GENERAL_ACCESS"] = "GENERAL_ACCESS";
-})(CustomerFacingVpcEndpointUseCase || (CustomerFacingVpcEndpointUseCase = {}));
+    GENERAL_ACCESS: 'GENERAL_ACCESS',
+};
 /**
  * The target resources that are supported by Network Connectivity Config.
  * Note: some egress types can support general types that are not defined in EgressResourceType.
  * E.g.: Azure private endpoint supports private link enabled Azure services.
  */
-export var EgressResourceType;
-(function (EgressResourceType) {
-    EgressResourceType["EGRESS_RESOURCE_TYPE_UNSPECIFIED"] = "EGRESS_RESOURCE_TYPE_UNSPECIFIED";
-    EgressResourceType["AZURE_BLOB_STORAGE"] = "AZURE_BLOB_STORAGE";
-})(EgressResourceType || (EgressResourceType = {}));
-export var EndpointState;
-(function (EndpointState) {
+// eslint-disable-next-line @typescript-eslint/naming-convention -- Enum-style const object.
+export const EgressResourceType = {
+    EGRESS_RESOURCE_TYPE_UNSPECIFIED: 'EGRESS_RESOURCE_TYPE_UNSPECIFIED',
+    AZURE_BLOB_STORAGE: 'AZURE_BLOB_STORAGE',
+};
+// eslint-disable-next-line @typescript-eslint/naming-convention -- Enum-style const object.
+export const EndpointState = {
     /** The endpoint is pending approval. */
-    EndpointState["PENDING"] = "PENDING";
+    PENDING: 'PENDING',
     /** The endpoint has been approved and is ready for use. */
-    EndpointState["APPROVED"] = "APPROVED";
+    APPROVED: 'APPROVED',
     /** The endpoint encountered some issues during setup. */
-    EndpointState["FAILED"] = "FAILED";
+    FAILED: 'FAILED',
     /** The endpoint was once established but later disconnected. This endpoint doesn't provide connectivity. */
-    EndpointState["DISCONNECTED"] = "DISCONNECTED";
-})(EndpointState || (EndpointState = {}));
+    DISCONNECTED: 'DISCONNECTED',
+};
 /**
  * Type of IP access list. Valid values are as follows and are case-sensitive:
  *
  * * `ALLOW`: An allow list. Include this IP or range.
  * * `BLOCK`: A block list. Exclude this IP or range. IP addresses in the block list are excluded even if they are included in an allow list.
  */
-export var IpAccessListType;
-(function (IpAccessListType) {
-    IpAccessListType["ALLOW"] = "ALLOW";
+// eslint-disable-next-line @typescript-eslint/naming-convention -- Enum-style const object.
+export const IpAccessListType = {
+    ALLOW: 'ALLOW',
     /** Blocks the associated CIDRs. */
-    IpAccessListType["BLOCK"] = "BLOCK";
-})(IpAccessListType || (IpAccessListType = {}));
-export var PrivateAccessLevel;
-(function (PrivateAccessLevel) {
+    BLOCK: 'BLOCK',
+};
+// eslint-disable-next-line @typescript-eslint/naming-convention -- Enum-style const object.
+export const PrivateAccessLevel = {
     /** Only specifically listed endpoints can access my workspace */
-    PrivateAccessLevel["ENDPOINT"] = "ENDPOINT";
+    ENDPOINT: 'ENDPOINT',
     /** Only endpoints in the same account can access my workspace */
-    PrivateAccessLevel["ACCOUNT"] = "ACCOUNT";
-})(PrivateAccessLevel || (PrivateAccessLevel = {}));
-export var VpcStatus;
-(function (VpcStatus) {
-    VpcStatus["VALID"] = "VALID";
-    VpcStatus["BROKEN"] = "BROKEN";
-    VpcStatus["UNATTACHED"] = "UNATTACHED";
+    ACCOUNT: 'ACCOUNT',
+};
+// eslint-disable-next-line @typescript-eslint/naming-convention -- Enum-style const object.
+export const VpcStatus = {
+    VALID: 'VALID',
+    BROKEN: 'BROKEN',
+    UNATTACHED: 'UNATTACHED',
     /** Some optional tests are failing for this Vpc, see NetworkWarning for more information */
-    VpcStatus["WARNED"] = "WARNED";
-})(VpcStatus || (VpcStatus = {}));
+    WARNED: 'WARNED',
+};
 /**
  * Type of IP access list. Valid values are as follows and are case-sensitive:
  *
  * * `ALLOW`: An allow list. Include this IP or range.
  * * `BLOCK`: A block list. Exclude this IP or range. IP addresses in the block list are excluded even if they are included in an allow list.
  */
-// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested enum name.
-export var AccountIpAccessListType_IpAccessListType;
-(function (AccountIpAccessListType_IpAccessListType) {
+// eslint-disable-next-line @typescript-eslint/naming-convention -- Enum-style const object.
+export const AccountIpAccessListType_IpAccessListType = {
     /** Allows the associated CIDRs. */
-    AccountIpAccessListType_IpAccessListType["ALLOW"] = "ALLOW";
+    ALLOW: 'ALLOW',
     /** Blocks the associated CIDRs. */
-    AccountIpAccessListType_IpAccessListType["BLOCK"] = "BLOCK";
-})(AccountIpAccessListType_IpAccessListType || (AccountIpAccessListType_IpAccessListType = {}));
+    BLOCK: 'BLOCK',
+};
 /**
  * Qualifies the breadth of API access permitted by an ingress network policy rule.
  * API_SCOPE_QUALIFIER_READ narrows matching to read-only variants of the listed scopes;
  * API_SCOPE_QUALIFIER_ALL matches any scope. When unset, scopes match exactly as listed.
  */
-// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested enum name.
-export var CustomerFacingIngressNetworkPolicy_ApiScopeQualifier;
-(function (CustomerFacingIngressNetworkPolicy_ApiScopeQualifier) {
+// eslint-disable-next-line @typescript-eslint/naming-convention -- Enum-style const object.
+export const CustomerFacingIngressNetworkPolicy_ApiScopeQualifier = {
     /** Narrows matching to read-only variants of the listed scopes (e.g. GET/HEAD requests). */
-    CustomerFacingIngressNetworkPolicy_ApiScopeQualifier["API_SCOPE_QUALIFIER_READ"] = "API_SCOPE_QUALIFIER_READ";
+    API_SCOPE_QUALIFIER_READ: 'API_SCOPE_QUALIFIER_READ',
     /** Matches any scope regardless of access level. */
-    CustomerFacingIngressNetworkPolicy_ApiScopeQualifier["API_SCOPE_QUALIFIER_ALL"] = "API_SCOPE_QUALIFIER_ALL";
-})(CustomerFacingIngressNetworkPolicy_ApiScopeQualifier || (CustomerFacingIngressNetworkPolicy_ApiScopeQualifier = {}));
-// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested enum name.
-export var CustomerFacingIngressNetworkPolicy_Authentication_IdentityType;
-(function (CustomerFacingIngressNetworkPolicy_Authentication_IdentityType) {
-    CustomerFacingIngressNetworkPolicy_Authentication_IdentityType["IDENTITY_TYPE_UNSPECIFIED"] = "IDENTITY_TYPE_UNSPECIFIED";
-    CustomerFacingIngressNetworkPolicy_Authentication_IdentityType["IDENTITY_TYPE_ALL_USERS"] = "IDENTITY_TYPE_ALL_USERS";
-    CustomerFacingIngressNetworkPolicy_Authentication_IdentityType["IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS"] = "IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS";
-    CustomerFacingIngressNetworkPolicy_Authentication_IdentityType["IDENTITY_TYPE_SELECTED_IDENTITIES"] = "IDENTITY_TYPE_SELECTED_IDENTITIES";
-})(CustomerFacingIngressNetworkPolicy_Authentication_IdentityType || (CustomerFacingIngressNetworkPolicy_Authentication_IdentityType = {}));
-// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested enum name.
-export var CustomerFacingIngressNetworkPolicy_AuthenticationIdentity_PrincipalType;
-(function (CustomerFacingIngressNetworkPolicy_AuthenticationIdentity_PrincipalType) {
-    CustomerFacingIngressNetworkPolicy_AuthenticationIdentity_PrincipalType["PRINCIPAL_TYPE_UNSPECIFIED"] = "PRINCIPAL_TYPE_UNSPECIFIED";
-    CustomerFacingIngressNetworkPolicy_AuthenticationIdentity_PrincipalType["PRINCIPAL_TYPE_USER"] = "PRINCIPAL_TYPE_USER";
-    CustomerFacingIngressNetworkPolicy_AuthenticationIdentity_PrincipalType["PRINCIPAL_TYPE_SERVICE_PRINCIPAL"] = "PRINCIPAL_TYPE_SERVICE_PRINCIPAL";
-})(CustomerFacingIngressNetworkPolicy_AuthenticationIdentity_PrincipalType || (CustomerFacingIngressNetworkPolicy_AuthenticationIdentity_PrincipalType = {}));
-// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested enum name.
-export var CustomerFacingIngressNetworkPolicy_CrossWorkspaceAccess_RestrictionMode;
-(function (CustomerFacingIngressNetworkPolicy_CrossWorkspaceAccess_RestrictionMode) {
-    CustomerFacingIngressNetworkPolicy_CrossWorkspaceAccess_RestrictionMode["FULL_ACCESS"] = "FULL_ACCESS";
-    CustomerFacingIngressNetworkPolicy_CrossWorkspaceAccess_RestrictionMode["RESTRICTED_ACCESS"] = "RESTRICTED_ACCESS";
-})(CustomerFacingIngressNetworkPolicy_CrossWorkspaceAccess_RestrictionMode || (CustomerFacingIngressNetworkPolicy_CrossWorkspaceAccess_RestrictionMode = {}));
-// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested enum name.
-export var CustomerFacingIngressNetworkPolicy_PrivateAccess_RestrictionMode;
-(function (CustomerFacingIngressNetworkPolicy_PrivateAccess_RestrictionMode) {
-    CustomerFacingIngressNetworkPolicy_PrivateAccess_RestrictionMode["ALLOW_ALL_REGISTERED_ENDPOINTS"] = "ALLOW_ALL_REGISTERED_ENDPOINTS";
-    CustomerFacingIngressNetworkPolicy_PrivateAccess_RestrictionMode["RESTRICTED_ACCESS"] = "RESTRICTED_ACCESS";
-})(CustomerFacingIngressNetworkPolicy_PrivateAccess_RestrictionMode || (CustomerFacingIngressNetworkPolicy_PrivateAccess_RestrictionMode = {}));
-// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested enum name.
-export var CustomerFacingIngressNetworkPolicy_PublicAccess_RestrictionMode;
-(function (CustomerFacingIngressNetworkPolicy_PublicAccess_RestrictionMode) {
-    CustomerFacingIngressNetworkPolicy_PublicAccess_RestrictionMode["FULL_ACCESS"] = "FULL_ACCESS";
-    CustomerFacingIngressNetworkPolicy_PublicAccess_RestrictionMode["RESTRICTED_ACCESS"] = "RESTRICTED_ACCESS";
-})(CustomerFacingIngressNetworkPolicy_PublicAccess_RestrictionMode || (CustomerFacingIngressNetworkPolicy_PublicAccess_RestrictionMode = {}));
-// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested enum name.
-export var CustomerFacingNetworkConnectivityConfigAwsPrivateEndpointRule_PrivateLinkConnectionState;
-(function (CustomerFacingNetworkConnectivityConfigAwsPrivateEndpointRule_PrivateLinkConnectionState) {
-    CustomerFacingNetworkConnectivityConfigAwsPrivateEndpointRule_PrivateLinkConnectionState["PRIVATE_LINK_CONNECTION_STATE_UNSPECIFIED"] = "PRIVATE_LINK_CONNECTION_STATE_UNSPECIFIED";
+    API_SCOPE_QUALIFIER_ALL: 'API_SCOPE_QUALIFIER_ALL',
+};
+// eslint-disable-next-line @typescript-eslint/naming-convention -- Enum-style const object.
+export const CustomerFacingIngressNetworkPolicy_Authentication_IdentityType = {
+    IDENTITY_TYPE_UNSPECIFIED: 'IDENTITY_TYPE_UNSPECIFIED',
+    IDENTITY_TYPE_ALL_USERS: 'IDENTITY_TYPE_ALL_USERS',
+    IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS: 'IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS',
+    IDENTITY_TYPE_SELECTED_IDENTITIES: 'IDENTITY_TYPE_SELECTED_IDENTITIES',
+};
+// eslint-disable-next-line @typescript-eslint/naming-convention -- Enum-style const object.
+export const CustomerFacingIngressNetworkPolicy_AuthenticationIdentity_PrincipalType = {
+    PRINCIPAL_TYPE_UNSPECIFIED: 'PRINCIPAL_TYPE_UNSPECIFIED',
+    PRINCIPAL_TYPE_USER: 'PRINCIPAL_TYPE_USER',
+    PRINCIPAL_TYPE_SERVICE_PRINCIPAL: 'PRINCIPAL_TYPE_SERVICE_PRINCIPAL',
+};
+// eslint-disable-next-line @typescript-eslint/naming-convention -- Enum-style const object.
+export const CustomerFacingIngressNetworkPolicy_CrossWorkspaceAccess_RestrictionMode = {
+    FULL_ACCESS: 'FULL_ACCESS',
+    RESTRICTED_ACCESS: 'RESTRICTED_ACCESS',
+};
+// eslint-disable-next-line @typescript-eslint/naming-convention -- Enum-style const object.
+export const CustomerFacingIngressNetworkPolicy_PrivateAccess_RestrictionMode = {
+    ALLOW_ALL_REGISTERED_ENDPOINTS: 'ALLOW_ALL_REGISTERED_ENDPOINTS',
+    RESTRICTED_ACCESS: 'RESTRICTED_ACCESS',
+};
+// eslint-disable-next-line @typescript-eslint/naming-convention -- Enum-style const object.
+export const CustomerFacingIngressNetworkPolicy_PublicAccess_RestrictionMode = {
+    FULL_ACCESS: 'FULL_ACCESS',
+    RESTRICTED_ACCESS: 'RESTRICTED_ACCESS',
+};
+// eslint-disable-next-line @typescript-eslint/naming-convention -- Enum-style const object.
+export const CustomerFacingNetworkConnectivityConfigAwsPrivateEndpointRule_PrivateLinkConnectionState = {
+    PRIVATE_LINK_CONNECTION_STATE_UNSPECIFIED: 'PRIVATE_LINK_CONNECTION_STATE_UNSPECIFIED',
     /** The endpoint has been approved and is ready to use in your serverless compute resources. */
-    CustomerFacingNetworkConnectivityConfigAwsPrivateEndpointRule_PrivateLinkConnectionState["ESTABLISHED"] = "ESTABLISHED";
+    ESTABLISHED: 'ESTABLISHED',
     /** Connection was rejected by the private link resource owner. */
-    CustomerFacingNetworkConnectivityConfigAwsPrivateEndpointRule_PrivateLinkConnectionState["REJECTED"] = "REJECTED";
+    REJECTED: 'REJECTED',
     /**
      * Connection was removed by the private link resource owner, the private endpoint becomes informative and should
      * be deleted for clean-up.
      */
-    CustomerFacingNetworkConnectivityConfigAwsPrivateEndpointRule_PrivateLinkConnectionState["DISCONNECTED"] = "DISCONNECTED";
+    DISCONNECTED: 'DISCONNECTED',
     /** If the endpoint is created but not approved in 14 days, it is EXPIRED. */
-    CustomerFacingNetworkConnectivityConfigAwsPrivateEndpointRule_PrivateLinkConnectionState["EXPIRED"] = "EXPIRED";
+    EXPIRED: 'EXPIRED',
     /** The endpoint has been created and pending approval. */
-    CustomerFacingNetworkConnectivityConfigAwsPrivateEndpointRule_PrivateLinkConnectionState["PENDING"] = "PENDING";
+    PENDING: 'PENDING',
     /** The endpoint creation is in progress. */
-    CustomerFacingNetworkConnectivityConfigAwsPrivateEndpointRule_PrivateLinkConnectionState["CREATING"] = "CREATING";
+    CREATING: 'CREATING',
     /** The endpoint creation failed. */
-    CustomerFacingNetworkConnectivityConfigAwsPrivateEndpointRule_PrivateLinkConnectionState["CREATE_FAILED"] = "CREATE_FAILED";
-})(CustomerFacingNetworkConnectivityConfigAwsPrivateEndpointRule_PrivateLinkConnectionState || (CustomerFacingNetworkConnectivityConfigAwsPrivateEndpointRule_PrivateLinkConnectionState = {}));
-// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested enum name.
-export var CustomerFacingNetworkConnectivityConfigAzurePrivateEndpointRule_PrivateLinkConnectionState;
-(function (CustomerFacingNetworkConnectivityConfigAzurePrivateEndpointRule_PrivateLinkConnectionState) {
-    CustomerFacingNetworkConnectivityConfigAzurePrivateEndpointRule_PrivateLinkConnectionState["PRIVATE_LINK_CONNECTION_STATE_UNSPECIFIED"] = "PRIVATE_LINK_CONNECTION_STATE_UNSPECIFIED";
+    CREATE_FAILED: 'CREATE_FAILED',
+};
+// eslint-disable-next-line @typescript-eslint/naming-convention -- Enum-style const object.
+export const CustomerFacingNetworkConnectivityConfigAzurePrivateEndpointRule_PrivateLinkConnectionState = {
+    PRIVATE_LINK_CONNECTION_STATE_UNSPECIFIED: 'PRIVATE_LINK_CONNECTION_STATE_UNSPECIFIED',
     /** The endpoint has been created and pending approval. */
-    CustomerFacingNetworkConnectivityConfigAzurePrivateEndpointRule_PrivateLinkConnectionState["INIT"] = "INIT";
+    INIT: 'INIT',
     /** The endpoint has been approved and is ready to use in your serverless compute resources. */
-    CustomerFacingNetworkConnectivityConfigAzurePrivateEndpointRule_PrivateLinkConnectionState["ESTABLISHED"] = "ESTABLISHED";
+    ESTABLISHED: 'ESTABLISHED',
     /** Connection was rejected by the private link resource owner. */
-    CustomerFacingNetworkConnectivityConfigAzurePrivateEndpointRule_PrivateLinkConnectionState["REJECTED"] = "REJECTED";
+    REJECTED: 'REJECTED',
     /**
      * Connection was removed by the private link resource owner, the private endpoint becomes informative and should
      * be deleted for clean-up.
      */
-    CustomerFacingNetworkConnectivityConfigAzurePrivateEndpointRule_PrivateLinkConnectionState["DISCONNECTED"] = "DISCONNECTED";
+    DISCONNECTED: 'DISCONNECTED',
     /** If the endpoint was created but not approved in 14 days, it will be EXPIRED. */
-    CustomerFacingNetworkConnectivityConfigAzurePrivateEndpointRule_PrivateLinkConnectionState["EXPIRED"] = "EXPIRED";
+    EXPIRED: 'EXPIRED',
     /** The endpoint has been created and pending approval. */
-    CustomerFacingNetworkConnectivityConfigAzurePrivateEndpointRule_PrivateLinkConnectionState["PENDING"] = "PENDING";
+    PENDING: 'PENDING',
     /** The endpoint creation is in progress. */
-    CustomerFacingNetworkConnectivityConfigAzurePrivateEndpointRule_PrivateLinkConnectionState["CREATING"] = "CREATING";
+    CREATING: 'CREATING',
     /** The endpoint creation failed. */
-    CustomerFacingNetworkConnectivityConfigAzurePrivateEndpointRule_PrivateLinkConnectionState["CREATE_FAILED"] = "CREATE_FAILED";
-})(CustomerFacingNetworkConnectivityConfigAzurePrivateEndpointRule_PrivateLinkConnectionState || (CustomerFacingNetworkConnectivityConfigAzurePrivateEndpointRule_PrivateLinkConnectionState = {}));
-// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested enum name.
-export var EgressNetworkPolicy_NetworkAccessPolicy_InternetDestination_InternetDestinationType;
-(function (EgressNetworkPolicy_NetworkAccessPolicy_InternetDestination_InternetDestinationType) {
-    EgressNetworkPolicy_NetworkAccessPolicy_InternetDestination_InternetDestinationType["INTERNET_DESTINATION_TYPE_UNSPECIFIED"] = "INTERNET_DESTINATION_TYPE_UNSPECIFIED";
+    CREATE_FAILED: 'CREATE_FAILED',
+};
+// eslint-disable-next-line @typescript-eslint/naming-convention -- Enum-style const object.
+export const EgressNetworkPolicy_NetworkAccessPolicy_InternetDestination_InternetDestinationType = {
+    INTERNET_DESTINATION_TYPE_UNSPECIFIED: 'INTERNET_DESTINATION_TYPE_UNSPECIFIED',
     /** This is defined as `FQDN` in settings-policy/api/proto/messages.proto. Translation is done in accounts-lake-net-manager/src/util/NetworkPolicySettingUtil.scala. */
-    EgressNetworkPolicy_NetworkAccessPolicy_InternetDestination_InternetDestinationType["DNS_NAME"] = "DNS_NAME";
-})(EgressNetworkPolicy_NetworkAccessPolicy_InternetDestination_InternetDestinationType || (EgressNetworkPolicy_NetworkAccessPolicy_InternetDestination_InternetDestinationType = {}));
+    DNS_NAME: 'DNS_NAME',
+};
 /** The values should match the list of workloads used in networkconfig.proto */
-// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested enum name.
-export var EgressNetworkPolicy_NetworkAccessPolicy_PolicyEnforcement_DryRunModeProductFilter;
-(function (EgressNetworkPolicy_NetworkAccessPolicy_PolicyEnforcement_DryRunModeProductFilter) {
-    EgressNetworkPolicy_NetworkAccessPolicy_PolicyEnforcement_DryRunModeProductFilter["DRY_RUN_MODE_PRODUCT_FILTER_UNSPECIFIED"] = "DRY_RUN_MODE_PRODUCT_FILTER_UNSPECIFIED";
+// eslint-disable-next-line @typescript-eslint/naming-convention -- Enum-style const object.
+export const EgressNetworkPolicy_NetworkAccessPolicy_PolicyEnforcement_DryRunModeProductFilter = {
+    DRY_RUN_MODE_PRODUCT_FILTER_UNSPECIFIED: 'DRY_RUN_MODE_PRODUCT_FILTER_UNSPECIFIED',
     /** SQL Warehouse product */
-    EgressNetworkPolicy_NetworkAccessPolicy_PolicyEnforcement_DryRunModeProductFilter["DBSQL"] = "DBSQL";
+    DBSQL: 'DBSQL',
     /** Machine Learning serving product */
-    EgressNetworkPolicy_NetworkAccessPolicy_PolicyEnforcement_DryRunModeProductFilter["ML_SERVING"] = "ML_SERVING";
-})(EgressNetworkPolicy_NetworkAccessPolicy_PolicyEnforcement_DryRunModeProductFilter || (EgressNetworkPolicy_NetworkAccessPolicy_PolicyEnforcement_DryRunModeProductFilter = {}));
-// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested enum name.
-export var EgressNetworkPolicy_NetworkAccessPolicy_PolicyEnforcement_EnforcementMode;
-(function (EgressNetworkPolicy_NetworkAccessPolicy_PolicyEnforcement_EnforcementMode) {
-    EgressNetworkPolicy_NetworkAccessPolicy_PolicyEnforcement_EnforcementMode["ENFORCEMENT_MODE_UNSPECIFIED"] = "ENFORCEMENT_MODE_UNSPECIFIED";
+    ML_SERVING: 'ML_SERVING',
+};
+// eslint-disable-next-line @typescript-eslint/naming-convention -- Enum-style const object.
+export const EgressNetworkPolicy_NetworkAccessPolicy_PolicyEnforcement_EnforcementMode = {
+    ENFORCEMENT_MODE_UNSPECIFIED: 'ENFORCEMENT_MODE_UNSPECIFIED',
     /** Blocks traffic that violates network policy. This is the default mode. */
-    EgressNetworkPolicy_NetworkAccessPolicy_PolicyEnforcement_EnforcementMode["ENFORCED"] = "ENFORCED";
+    ENFORCED: 'ENFORCED',
     /** Logs violations without blocking traffic. Useful for testing policies before enforcement. */
-    EgressNetworkPolicy_NetworkAccessPolicy_PolicyEnforcement_EnforcementMode["DRY_RUN"] = "DRY_RUN";
-})(EgressNetworkPolicy_NetworkAccessPolicy_PolicyEnforcement_EnforcementMode || (EgressNetworkPolicy_NetworkAccessPolicy_PolicyEnforcement_EnforcementMode = {}));
+    DRY_RUN: 'DRY_RUN',
+};
 /**
  * At which level can <Databricks> and <Databricks> managed compute access Internet.
  * FULL_ACCESS: <Databricks> can access Internet. No blocking rules will apply.
  * RESTRICTED_ACCESS: <Databricks> can only access explicitly allowed internet and storage destinations,
  * as well as UC connections and external locations.
  */
-// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested enum name.
-export var EgressNetworkPolicy_NetworkAccessPolicy_RestrictionMode;
-(function (EgressNetworkPolicy_NetworkAccessPolicy_RestrictionMode) {
-    EgressNetworkPolicy_NetworkAccessPolicy_RestrictionMode["RESTRICTION_MODE_UNSPECIFIED"] = "RESTRICTION_MODE_UNSPECIFIED";
-    EgressNetworkPolicy_NetworkAccessPolicy_RestrictionMode["FULL_ACCESS"] = "FULL_ACCESS";
-    EgressNetworkPolicy_NetworkAccessPolicy_RestrictionMode["RESTRICTED_ACCESS"] = "RESTRICTED_ACCESS";
-})(EgressNetworkPolicy_NetworkAccessPolicy_RestrictionMode || (EgressNetworkPolicy_NetworkAccessPolicy_RestrictionMode = {}));
-// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested enum name.
-export var EgressNetworkPolicy_NetworkAccessPolicy_StorageDestination_StorageDestinationType;
-(function (EgressNetworkPolicy_NetworkAccessPolicy_StorageDestination_StorageDestinationType) {
-    EgressNetworkPolicy_NetworkAccessPolicy_StorageDestination_StorageDestinationType["STORAGE_DESTINATION_TYPE_UNSPECIFIED"] = "STORAGE_DESTINATION_TYPE_UNSPECIFIED";
+// eslint-disable-next-line @typescript-eslint/naming-convention -- Enum-style const object.
+export const EgressNetworkPolicy_NetworkAccessPolicy_RestrictionMode = {
+    RESTRICTION_MODE_UNSPECIFIED: 'RESTRICTION_MODE_UNSPECIFIED',
+    FULL_ACCESS: 'FULL_ACCESS',
+    RESTRICTED_ACCESS: 'RESTRICTED_ACCESS',
+};
+// eslint-disable-next-line @typescript-eslint/naming-convention -- Enum-style const object.
+export const EgressNetworkPolicy_NetworkAccessPolicy_StorageDestination_StorageDestinationType = {
+    STORAGE_DESTINATION_TYPE_UNSPECIFIED: 'STORAGE_DESTINATION_TYPE_UNSPECIFIED',
     /**
      * AWS_S3 can be used both for direct AWS S3 access and for cross-cloud access from Azure and GCP
      * When used in an Azure/GCP context, this indicates cross-cloud access from Azure/GCP to the specified S3 bucket
      */
-    EgressNetworkPolicy_NetworkAccessPolicy_StorageDestination_StorageDestinationType["AWS_S3"] = "AWS_S3";
-    EgressNetworkPolicy_NetworkAccessPolicy_StorageDestination_StorageDestinationType["AZURE_STORAGE"] = "AZURE_STORAGE";
-    EgressNetworkPolicy_NetworkAccessPolicy_StorageDestination_StorageDestinationType["GOOGLE_CLOUD_STORAGE"] = "GOOGLE_CLOUD_STORAGE";
-})(EgressNetworkPolicy_NetworkAccessPolicy_StorageDestination_StorageDestinationType || (EgressNetworkPolicy_NetworkAccessPolicy_StorageDestination_StorageDestinationType = {}));
-// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested enum name.
-export var EndpointUseCase_EndpointUseCase;
-(function (EndpointUseCase_EndpointUseCase) {
+    AWS_S3: 'AWS_S3',
+    AZURE_STORAGE: 'AZURE_STORAGE',
+    GOOGLE_CLOUD_STORAGE: 'GOOGLE_CLOUD_STORAGE',
+};
+// eslint-disable-next-line @typescript-eslint/naming-convention -- Enum-style const object.
+export const EndpointUseCase_EndpointUseCase = {
     /** service-direct frontend private link connectivity. */
-    EndpointUseCase_EndpointUseCase["SERVICE_DIRECT"] = "SERVICE_DIRECT";
-})(EndpointUseCase_EndpointUseCase || (EndpointUseCase_EndpointUseCase = {}));
-// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested enum name.
-export var NccPrivateEndpointRule_PrivateLinkConnectionState;
-(function (NccPrivateEndpointRule_PrivateLinkConnectionState) {
-    NccPrivateEndpointRule_PrivateLinkConnectionState["PRIVATE_LINK_CONNECTION_STATE_UNSPECIFIED"] = "PRIVATE_LINK_CONNECTION_STATE_UNSPECIFIED";
+    SERVICE_DIRECT: 'SERVICE_DIRECT',
+};
+// eslint-disable-next-line @typescript-eslint/naming-convention -- Enum-style const object.
+export const NccPrivateEndpointRule_PrivateLinkConnectionState = {
+    PRIVATE_LINK_CONNECTION_STATE_UNSPECIFIED: 'PRIVATE_LINK_CONNECTION_STATE_UNSPECIFIED',
     /** The endpoint has been approved and is ready to use in your serverless compute resources. */
-    NccPrivateEndpointRule_PrivateLinkConnectionState["ESTABLISHED"] = "ESTABLISHED";
+    ESTABLISHED: 'ESTABLISHED',
     /** Connection was rejected by the private link resource owner. */
-    NccPrivateEndpointRule_PrivateLinkConnectionState["REJECTED"] = "REJECTED";
+    REJECTED: 'REJECTED',
     /**
      * Connection was removed by the private link resource owner, the private endpoint becomes informative and should
      * be deleted for clean-up.
      */
-    NccPrivateEndpointRule_PrivateLinkConnectionState["DISCONNECTED"] = "DISCONNECTED";
+    DISCONNECTED: 'DISCONNECTED',
     /** If the endpoint was created but not approved in 14 days, it will be EXPIRED. */
-    NccPrivateEndpointRule_PrivateLinkConnectionState["EXPIRED"] = "EXPIRED";
+    EXPIRED: 'EXPIRED',
     /** The endpoint has been created and pending approval. */
-    NccPrivateEndpointRule_PrivateLinkConnectionState["PENDING"] = "PENDING";
+    PENDING: 'PENDING',
     /** The endpoint creation is in progress. */
-    NccPrivateEndpointRule_PrivateLinkConnectionState["CREATING"] = "CREATING";
+    CREATING: 'CREATING',
     /** The endpoint creation failed. */
-    NccPrivateEndpointRule_PrivateLinkConnectionState["CREATE_FAILED"] = "CREATE_FAILED";
-})(NccPrivateEndpointRule_PrivateLinkConnectionState || (NccPrivateEndpointRule_PrivateLinkConnectionState = {}));
+    CREATE_FAILED: 'CREATE_FAILED',
+};
 export const unmarshalAccountIpAccessListSchema = z
     .object({
     list_id: z.string().optional(),
     label: z.string().optional(),
     ip_addresses: z.array(z.string()).optional(),
     address_count: z.number().optional(),
-    list_type: z.enum(AccountIpAccessListType_IpAccessListType).optional(),
+    list_type: z.string().optional(),
     created_at: z
         .union([z.number(), z.bigint()])
         .transform(v => BigInt(v))
@@ -363,9 +347,7 @@ export const unmarshalCustomerFacingIngressNetworkPolicySchema = z
 export const unmarshalCustomerFacingIngressNetworkPolicy_AccountApiDestinationSchema = z
     .object({
     scopes: z.array(z.string()).optional(),
-    scope_qualifier: z
-        .enum(CustomerFacingIngressNetworkPolicy_ApiScopeQualifier)
-        .optional(),
+    scope_qualifier: z.string().optional(),
 })
     .transform(d => ({
     scopes: d.scopes,
@@ -398,9 +380,7 @@ export const unmarshalCustomerFacingIngressNetworkPolicy_AppsRuntimeDestinationS
 // eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.
 export const unmarshalCustomerFacingIngressNetworkPolicy_AuthenticationSchema = z
     .object({
-    identity_type: z
-        .enum(CustomerFacingIngressNetworkPolicy_Authentication_IdentityType)
-        .optional(),
+    identity_type: z.string().optional(),
     identities: z
         .array(z.lazy(() => unmarshalCustomerFacingIngressNetworkPolicy_AuthenticationIdentitySchema))
         .optional(),
@@ -412,9 +392,7 @@ export const unmarshalCustomerFacingIngressNetworkPolicy_AuthenticationSchema =
 // eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.
 export const unmarshalCustomerFacingIngressNetworkPolicy_AuthenticationIdentitySchema = z
     .object({
-    principal_type: z
-        .enum(CustomerFacingIngressNetworkPolicy_AuthenticationIdentity_PrincipalType)
-        .optional(),
+    principal_type: z.string().optional(),
     principal_id: z
         .union([z.number(), z.bigint()])
         .transform(v => BigInt(v))
@@ -427,9 +405,7 @@ export const unmarshalCustomerFacingIngressNetworkPolicy_AuthenticationIdentityS
 // eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.
 export const unmarshalCustomerFacingIngressNetworkPolicy_CrossWorkspaceAccessSchema = z
     .object({
-    restriction_mode: z
-        .enum(CustomerFacingIngressNetworkPolicy_CrossWorkspaceAccess_RestrictionMode)
-        .optional(),
+    restriction_mode: z.string().optional(),
     deny_rules: z
         .array(z.lazy(() => unmarshalCustomerFacingIngressNetworkPolicy_CrossWorkspaceIngressRuleSchema))
         .optional(),
@@ -510,9 +486,7 @@ export const unmarshalCustomerFacingIngressNetworkPolicy_LakebaseRuntimeDestinat
 // eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.
 export const unmarshalCustomerFacingIngressNetworkPolicy_PrivateAccessSchema = z
     .object({
-    restriction_mode: z
-        .enum(CustomerFacingIngressNetworkPolicy_PrivateAccess_RestrictionMode)
-        .optional(),
+    restriction_mode: z.string().optional(),
     deny_rules: z
         .array(z.lazy(() => unmarshalCustomerFacingIngressNetworkPolicy_PrivateIngressRuleSchema))
         .optional(),
@@ -578,9 +552,7 @@ export const unmarshalCustomerFacingIngressNetworkPolicy_PrivateRequestOriginSch
 // eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.
 export const unmarshalCustomerFacingIngressNetworkPolicy_PublicAccessSchema = z
     .object({
-    restriction_mode: z
-        .enum(CustomerFacingIngressNetworkPolicy_PublicAccess_RestrictionMode)
-        .optional(),
+    restriction_mode: z.string().optional(),
     deny_rules: z
         .array(z.lazy(() => unmarshalCustomerFacingIngressNetworkPolicy_PublicIngressRuleSchema))
         .optional(),
@@ -679,9 +651,7 @@ export const unmarshalCustomerFacingIngressNetworkPolicy_RequestDestinationSchem
 export const unmarshalCustomerFacingIngressNetworkPolicy_WorkspaceApiDestinationSchema = z
     .object({
     scopes: z.array(z.string()).optional(),
-    scope_qualifier: z
-        .enum(CustomerFacingIngressNetworkPolicy_ApiScopeQualifier)
-        .optional(),
+    scope_qualifier: z.string().optional(),
 })
     .transform(d => ({
     scopes: d.scopes,
@@ -741,9 +711,7 @@ export const unmarshalCustomerFacingNetworkConnectivityConfigAwsPrivateEndpointR
     domain_names: z.array(z.string()).optional(),
     resource_names: z.array(z.string()).optional(),
     vpc_endpoint_id: z.string().optional(),
-    connection_state: z
-        .enum(CustomerFacingNetworkConnectivityConfigAwsPrivateEndpointRule_PrivateLinkConnectionState)
-        .optional(),
+    connection_state: z.string().optional(),
     creation_time: z
         .union([z.number(), z.bigint()])
         .transform(v => BigInt(v))
@@ -783,9 +751,7 @@ export const unmarshalCustomerFacingNetworkConnectivityConfigAzurePrivateEndpoin
     resource_id: z.string().optional(),
     group_id: z.string().optional(),
     endpoint_name: z.string().optional(),
-    connection_state: z
-        .enum(CustomerFacingNetworkConnectivityConfigAzurePrivateEndpointRule_PrivateLinkConnectionState)
-        .optional(),
+    connection_state: z.string().optional(),
     creation_time: z
         .union([z.number(), z.bigint()])
         .transform(v => BigInt(v))
@@ -850,7 +816,7 @@ export const unmarshalCustomerFacingPrivateAccessSettingsSchema = z
     private_access_settings_name: z.string().optional(),
     region: z.string().optional(),
     public_access_enabled: z.boolean().optional(),
-    private_access_level: z.enum(PrivateAccessLevel).optional(),
+    private_access_level: z.string().optional(),
     allowed_vpc_endpoint_ids: z.array(z.string()).optional(),
 })
     .transform(d => ({
@@ -869,7 +835,7 @@ export const unmarshalCustomerFacingVpcEndpointSchema = z
     vpc_endpoint_name: z.string().optional(),
     aws_vpc_endpoint_id: z.string().optional(),
     aws_endpoint_service_id: z.string().optional(),
-    use_case: z.enum(CustomerFacingVpcEndpointUseCase).optional(),
+    use_case: z.string().optional(),
     region: z.string().optional(),
     aws_account_id: z.string().optional(),
     state: z.string().optional(),
@@ -908,9 +874,7 @@ export const unmarshalEgressNetworkPolicySchema = z
 // eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.
 export const unmarshalEgressNetworkPolicy_NetworkAccessPolicySchema = z
     .object({
-    restriction_mode: z
-        .enum(EgressNetworkPolicy_NetworkAccessPolicy_RestrictionMode)
-        .optional(),
+    restriction_mode: z.string().optional(),
     allowed_internet_destinations: z
         .array(z.lazy(() => unmarshalEgressNetworkPolicy_NetworkAccessPolicy_InternetDestinationSchema))
         .optional(),
@@ -923,6 +887,9 @@ export const unmarshalEgressNetworkPolicy_NetworkAccessPolicySchema = z
     blocked_internet_destinations: z
         .array(z.lazy(() => unmarshalEgressNetworkPolicy_NetworkAccessPolicy_InternetDestinationSchema))
         .optional(),
+    allowed_databricks_destinations: z
+        .array(z.lazy(() => unmarshalEgressNetworkPolicy_NetworkAccessPolicy_DatabricksDestinationSchema))
+        .optional(),
 })
     .transform(d => ({
     restrictionMode: d.restriction_mode,
@@ -930,14 +897,23 @@ export const unmarshalEgressNetworkPolicy_NetworkAccessPolicySchema = z
     allowedStorageDestinations: d.allowed_storage_destinations,
     policyEnforcement: d.policy_enforcement,
     blockedInternetDestinations: d.blocked_internet_destinations,
+    allowedDatabricksDestinations: d.allowed_databricks_destinations,
+}));
+// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.
+export const unmarshalEgressNetworkPolicy_NetworkAccessPolicy_DatabricksDestinationSchema = z
+    .object({
+    workspace_ids: z
+        .array(z.union([z.number(), z.bigint()]).transform(v => BigInt(v)))
+        .optional(),
+})
+    .transform(d => ({
+    workspaceIds: d.workspace_ids,
 }));
 // eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.
 export const unmarshalEgressNetworkPolicy_NetworkAccessPolicy_InternetDestinationSchema = z
     .object({
     destination: z.string().optional(),
-    internet_destination_type: z
-        .enum(EgressNetworkPolicy_NetworkAccessPolicy_InternetDestination_InternetDestinationType)
-        .optional(),
+    internet_destination_type: z.string().optional(),
 })
     .transform(d => ({
     destination: d.destination,
@@ -946,12 +922,8 @@ export const unmarshalEgressNetworkPolicy_NetworkAccessPolicy_InternetDestinatio
 // eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.
 export const unmarshalEgressNetworkPolicy_NetworkAccessPolicy_PolicyEnforcementSchema = z
     .object({
-    enforcement_mode: z
-        .enum(EgressNetworkPolicy_NetworkAccessPolicy_PolicyEnforcement_EnforcementMode)
-        .optional(),
-    dry_run_mode_product_filter: z
-        .array(z.enum(EgressNetworkPolicy_NetworkAccessPolicy_PolicyEnforcement_DryRunModeProductFilter))
-        .optional(),
+    enforcement_mode: z.string().optional(),
+    dry_run_mode_product_filter: z.array(z.string()).optional(),
 })
     .transform(d => ({
     enforcementMode: d.enforcement_mode,
@@ -962,9 +934,7 @@ export const unmarshalEgressNetworkPolicy_NetworkAccessPolicy_StorageDestination
     .object({
     bucket_name: z.string().optional(),
     region: z.string().optional(),
-    storage_destination_type: z
-        .enum(EgressNetworkPolicy_NetworkAccessPolicy_StorageDestination_StorageDestinationType)
-        .optional(),
+    storage_destination_type: z.string().optional(),
     azure_storage_account: z.string().optional(),
     azure_storage_service: z.string().optional(),
 })
@@ -981,9 +951,9 @@ export const unmarshalEndpointSchema = z
     endpoint_id: z.string().optional(),
     account_id: z.string().optional(),
     display_name: z.string().optional(),
-    use_case: z.enum(EndpointUseCase_EndpointUseCase).optional(),
+    use_case: z.string().optional(),
     region: z.string().optional(),
-    state: z.enum(EndpointState).optional(),
+    state: z.string().optional(),
     azure_private_endpoint_info: z
         .lazy(() => unmarshalAzurePrivateEndpointInfoSchema)
         .optional(),
@@ -1061,7 +1031,7 @@ export const unmarshalIpAccessListSchema = z
     label: z.string().optional(),
     ip_addresses: z.array(z.string()).optional(),
     address_count: z.number().optional(),
-    list_type: z.enum(IpAccessListType).optional(),
+    list_type: z.string().optional(),
     created_at: z
         .union([z.number(), z.bigint()])
         .transform(v => BigInt(v))
@@ -1156,9 +1126,7 @@ export const unmarshalNccPrivateEndpointRuleSchema = z
     .object({
     rule_id: z.string().optional(),
     network_connectivity_config_id: z.string().optional(),
-    connection_state: z
-        .enum(NccPrivateEndpointRule_PrivateLinkConnectionState)
-        .optional(),
+    connection_state: z.string().optional(),
     domain_names: z.array(z.string()).optional(),
     creation_time: z
         .union([z.number(), z.bigint()])
@@ -1217,7 +1185,7 @@ export const unmarshalNetworkSchema = z
     vpc_id: z.string().optional(),
     subnet_ids: z.array(z.string()).optional(),
     security_group_ids: z.array(z.string()).optional(),
-    vpc_status: z.enum(VpcStatus).optional(),
+    vpc_status: z.string().optional(),
     error_messages: z
         .array(z.lazy(() => unmarshalNetworkHealthSchema))
         .optional(),
@@ -1275,7 +1243,7 @@ export const unmarshalNetworkConnectivityConfigEgressConfig_DefaultRule_AwsStabl
 export const unmarshalNetworkConnectivityConfigEgressConfig_DefaultRule_AzureServiceEndpointRuleSchema = z
     .object({
     target_region: z.string().optional(),
-    target_services: z.array(z.enum(EgressResourceType)).optional(),
+    target_services: z.array(z.string()).optional(),
     subnets: z.array(z.string()).optional(),
 })
     .transform(d => ({
@@ -1390,7 +1358,7 @@ export const marshalCreateAccountIpAccessListRequestSchema = z
     .object({
     accountId: z.string().optional(),
     label: z.string().optional(),
-    listType: z.enum(AccountIpAccessListType_IpAccessListType).optional(),
+    listType: z.string().optional(),
     ipAddresses: z.array(z.string()).optional(),
 })
     .transform(d => ({
@@ -1402,7 +1370,7 @@ export const marshalCreateAccountIpAccessListRequestSchema = z
 export const marshalCreateIpAccessListSchema = z
     .object({
     label: z.string().optional(),
-    listType: z.enum(IpAccessListType).optional(),
+    listType: z.string().optional(),
     ipAddresses: z.array(z.string()).optional(),
 })
     .transform(d => ({
@@ -1456,7 +1424,7 @@ export const marshalCreatePrivateAccessSettingsRequestSchema = z
     privateAccessSettingsName: z.string().optional(),
     region: z.string().optional(),
     publicAccessEnabled: z.boolean().optional(),
-    privateAccessLevel: z.enum(PrivateAccessLevel).optional(),
+    privateAccessLevel: z.string().optional(),
     allowedVpcEndpointIds: z.array(z.string()).optional(),
 })
     .transform(d => ({
@@ -1471,9 +1439,7 @@ export const marshalCreatePrivateEndpointRuleSchema = z
     .object({
     ruleId: z.string().optional(),
     networkConnectivityConfigId: z.string().optional(),
-    connectionState: z
-        .enum(NccPrivateEndpointRule_PrivateLinkConnectionState)
-        .optional(),
+    connectionState: z.string().optional(),
     domainNames: z.array(z.string()).optional(),
     creationTime: z.bigint().optional(),
     updatedTime: z.bigint().optional(),
@@ -1579,9 +1545,7 @@ export const marshalCustomerFacingIngressNetworkPolicySchema = z
 export const marshalCustomerFacingIngressNetworkPolicy_AccountApiDestinationSchema = z
     .object({
     scopes: z.array(z.string()).optional(),
-    scopeQualifier: z
-        .enum(CustomerFacingIngressNetworkPolicy_ApiScopeQualifier)
-        .optional(),
+    scopeQualifier: z.string().optional(),
 })
     .transform(d => ({
     scopes: d.scopes,
@@ -1614,9 +1578,7 @@ export const marshalCustomerFacingIngressNetworkPolicy_AppsRuntimeDestinationSch
 // eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.
 export const marshalCustomerFacingIngressNetworkPolicy_AuthenticationSchema = z
     .object({
-    identityType: z
-        .enum(CustomerFacingIngressNetworkPolicy_Authentication_IdentityType)
-        .optional(),
+    identityType: z.string().optional(),
     identities: z
         .array(z.lazy(() => marshalCustomerFacingIngressNetworkPolicy_AuthenticationIdentitySchema))
         .optional(),
@@ -1628,9 +1590,7 @@ export const marshalCustomerFacingIngressNetworkPolicy_AuthenticationSchema = z
 // eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.
 export const marshalCustomerFacingIngressNetworkPolicy_AuthenticationIdentitySchema = z
     .object({
-    principalType: z
-        .enum(CustomerFacingIngressNetworkPolicy_AuthenticationIdentity_PrincipalType)
-        .optional(),
+    principalType: z.string().optional(),
     principalId: z.bigint().optional(),
 })
     .transform(d => ({
@@ -1640,9 +1600,7 @@ export const marshalCustomerFacingIngressNetworkPolicy_AuthenticationIdentitySch
 // eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.
 export const marshalCustomerFacingIngressNetworkPolicy_CrossWorkspaceAccessSchema = z
     .object({
-    restrictionMode: z
-        .enum(CustomerFacingIngressNetworkPolicy_CrossWorkspaceAccess_RestrictionMode)
-        .optional(),
+    restrictionMode: z.string().optional(),
     denyRules: z
         .array(z.lazy(() => marshalCustomerFacingIngressNetworkPolicy_CrossWorkspaceIngressRuleSchema))
         .optional(),
@@ -1726,9 +1684,7 @@ export const marshalCustomerFacingIngressNetworkPolicy_LakebaseRuntimeDestinatio
 // eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.
 export const marshalCustomerFacingIngressNetworkPolicy_PrivateAccessSchema = z
     .object({
-    restrictionMode: z
-        .enum(CustomerFacingIngressNetworkPolicy_PrivateAccess_RestrictionMode)
-        .optional(),
+    restrictionMode: z.string().optional(),
     denyRules: z
         .array(z.lazy(() => marshalCustomerFacingIngressNetworkPolicy_PrivateIngressRuleSchema))
         .optional(),
@@ -1800,9 +1756,7 @@ export const marshalCustomerFacingIngressNetworkPolicy_PrivateRequestOriginSchem
 // eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.
 export const marshalCustomerFacingIngressNetworkPolicy_PublicAccessSchema = z
     .object({
-    restrictionMode: z
-        .enum(CustomerFacingIngressNetworkPolicy_PublicAccess_RestrictionMode)
-        .optional(),
+    restrictionMode: z.string().optional(),
     denyRules: z
         .array(z.lazy(() => marshalCustomerFacingIngressNetworkPolicy_PublicIngressRuleSchema))
         .optional(),
@@ -1903,9 +1857,7 @@ export const marshalCustomerFacingIngressNetworkPolicy_RequestDestinationSchema
 export const marshalCustomerFacingIngressNetworkPolicy_WorkspaceApiDestinationSchema = z
     .object({
     scopes: z.array(z.string()).optional(),
-    scopeQualifier: z
-        .enum(CustomerFacingIngressNetworkPolicy_ApiScopeQualifier)
-        .optional(),
+    scopeQualifier: z.string().optional(),
 })
     .transform(d => ({
     scopes: d.scopes,
@@ -1936,9 +1888,7 @@ export const marshalCustomerFacingNetworkConnectivityConfigAwsPrivateEndpointRul
     domainNames: z.array(z.string()).optional(),
     resourceNames: z.array(z.string()).optional(),
     vpcEndpointId: z.string().optional(),
-    connectionState: z
-        .enum(CustomerFacingNetworkConnectivityConfigAwsPrivateEndpointRule_PrivateLinkConnectionState)
-        .optional(),
+    connectionState: z.string().optional(),
     creationTime: z.bigint().optional(),
     updatedTime: z.bigint().optional(),
     deactivated: z.boolean().optional(),
@@ -1969,9 +1919,7 @@ export const marshalCustomerFacingNetworkConnectivityConfigAzurePrivateEndpointR
     resourceId: z.string().optional(),
     groupId: z.string().optional(),
     endpointName: z.string().optional(),
-    connectionState: z
-        .enum(CustomerFacingNetworkConnectivityConfigAzurePrivateEndpointRule_PrivateLinkConnectionState)
-        .optional(),
+    connectionState: z.string().optional(),
     creationTime: z.bigint().optional(),
     updatedTime: z.bigint().optional(),
     deactivated: z.boolean().optional(),
@@ -2027,7 +1975,7 @@ export const marshalCustomerFacingPrivateAccessSettingsSchema = z
     privateAccessSettingsName: z.string().optional(),
     region: z.string().optional(),
     publicAccessEnabled: z.boolean().optional(),
-    privateAccessLevel: z.enum(PrivateAccessLevel).optional(),
+    privateAccessLevel: z.string().optional(),
     allowedVpcEndpointIds: z.array(z.string()).optional(),
 })
     .transform(d => ({
@@ -2051,9 +1999,7 @@ export const marshalEgressNetworkPolicySchema = z
 // eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.
 export const marshalEgressNetworkPolicy_NetworkAccessPolicySchema = z
     .object({
-    restrictionMode: z
-        .enum(EgressNetworkPolicy_NetworkAccessPolicy_RestrictionMode)
-        .optional(),
+    restrictionMode: z.string().optional(),
     allowedInternetDestinations: z
         .array(z.lazy(() => marshalEgressNetworkPolicy_NetworkAccessPolicy_InternetDestinationSchema))
         .optional(),
@@ -2066,6 +2012,9 @@ export const marshalEgressNetworkPolicy_NetworkAccessPolicySchema = z
     blockedInternetDestinations: z
         .array(z.lazy(() => marshalEgressNetworkPolicy_NetworkAccessPolicy_InternetDestinationSchema))
         .optional(),
+    allowedDatabricksDestinations: z
+        .array(z.lazy(() => marshalEgressNetworkPolicy_NetworkAccessPolicy_DatabricksDestinationSchema))
+        .optional(),
 })
     .transform(d => ({
     restriction_mode: d.restrictionMode,
@@ -2073,14 +2022,21 @@ export const marshalEgressNetworkPolicy_NetworkAccessPolicySchema = z
     allowed_storage_destinations: d.allowedStorageDestinations,
     policy_enforcement: d.policyEnforcement,
     blocked_internet_destinations: d.blockedInternetDestinations,
+    allowed_databricks_destinations: d.allowedDatabricksDestinations,
+}));
+// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.
+export const marshalEgressNetworkPolicy_NetworkAccessPolicy_DatabricksDestinationSchema = z
+    .object({
+    workspaceIds: z.array(z.bigint()).optional(),
+})
+    .transform(d => ({
+    workspace_ids: d.workspaceIds,
 }));
 // eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.
 export const marshalEgressNetworkPolicy_NetworkAccessPolicy_InternetDestinationSchema = z
     .object({
     destination: z.string().optional(),
-    internetDestinationType: z
-        .enum(EgressNetworkPolicy_NetworkAccessPolicy_InternetDestination_InternetDestinationType)
-        .optional(),
+    internetDestinationType: z.string().optional(),
 })
     .transform(d => ({
     destination: d.destination,
@@ -2089,12 +2045,8 @@ export const marshalEgressNetworkPolicy_NetworkAccessPolicy_InternetDestinationS
 // eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.
 export const marshalEgressNetworkPolicy_NetworkAccessPolicy_PolicyEnforcementSchema = z
     .object({
-    enforcementMode: z
-        .enum(EgressNetworkPolicy_NetworkAccessPolicy_PolicyEnforcement_EnforcementMode)
-        .optional(),
-    dryRunModeProductFilter: z
-        .array(z.enum(EgressNetworkPolicy_NetworkAccessPolicy_PolicyEnforcement_DryRunModeProductFilter))
-        .optional(),
+    enforcementMode: z.string().optional(),
+    dryRunModeProductFilter: z.array(z.string()).optional(),
 })
     .transform(d => ({
     enforcement_mode: d.enforcementMode,
@@ -2105,9 +2057,7 @@ export const marshalEgressNetworkPolicy_NetworkAccessPolicy_StorageDestinationSc
     .object({
     bucketName: z.string().optional(),
     region: z.string().optional(),
-    storageDestinationType: z
-        .enum(EgressNetworkPolicy_NetworkAccessPolicy_StorageDestination_StorageDestinationType)
-        .optional(),
+    storageDestinationType: z.string().optional(),
     azureStorageAccount: z.string().optional(),
     azureStorageService: z.string().optional(),
 })
@@ -2124,9 +2074,9 @@ export const marshalEndpointSchema = z
     endpointId: z.string().optional(),
     accountId: z.string().optional(),
     displayName: z.string().optional(),
-    useCase: z.enum(EndpointUseCase_EndpointUseCase).optional(),
+    useCase: z.string().optional(),
     region: z.string().optional(),
-    state: z.enum(EndpointState).optional(),
+    state: z.string().optional(),
     endpointInfo: z
         .discriminatedUnion('$case', [
         z.object({
@@ -2214,7 +2164,7 @@ export const marshalNetworkConnectivityConfigEgressConfig_DefaultRule_AwsStableI
 export const marshalNetworkConnectivityConfigEgressConfig_DefaultRule_AzureServiceEndpointRuleSchema = z
     .object({
     targetRegion: z.string().optional(),
-    targetServices: z.array(z.enum(EgressResourceType)).optional(),
+    targetServices: z.array(z.string()).optional(),
     subnets: z.array(z.string()).optional(),
 })
     .transform(d => ({
@@ -2236,7 +2186,7 @@ export const marshalReplaceAccountIpAccessListRequestSchema = z
     accountId: z.string().optional(),
     listId: z.string().optional(),
     label: z.string().optional(),
-    listType: z.enum(AccountIpAccessListType_IpAccessListType).optional(),
+    listType: z.string().optional(),
     ipAddresses: z.array(z.string()).optional(),
     enabled: z.boolean().optional(),
 })
@@ -2252,7 +2202,7 @@ export const marshalReplaceIpAccessListSchema = z
     .object({
     listId: z.string().optional(),
     label: z.string().optional(),
-    listType: z.enum(IpAccessListType).optional(),
+    listType: z.string().optional(),
     ipAddresses: z.array(z.string()).optional(),
     enabled: z.boolean().optional(),
 })
@@ -2268,7 +2218,7 @@ export const marshalUpdateAccountIpAccessListRequestSchema = z
     accountId: z.string().optional(),
     listId: z.string().optional(),
     label: z.string().optional(),
-    listType: z.enum(AccountIpAccessListType_IpAccessListType).optional(),
+    listType: z.string().optional(),
     ipAddresses: z.array(z.string()).optional(),
     enabled: z.boolean().optional(),
 })
@@ -2284,7 +2234,7 @@ export const marshalUpdateIpAccessListSchema = z
     .object({
     listId: z.string().optional(),
     label: z.string().optional(),
-    listType: z.enum(IpAccessListType).optional(),
+    listType: z.string().optional(),
     ipAddresses: z.array(z.string()).optional(),
     enabled: z.boolean().optional(),
 })
@@ -2299,9 +2249,7 @@ export const marshalUpdatePrivateEndpointRuleSchema = z
     .object({
     ruleId: z.string().optional(),
     networkConnectivityConfigId: z.string().optional(),
-    connectionState: z
-        .enum(NccPrivateEndpointRule_PrivateLinkConnectionState)
-        .optional(),
+    connectionState: z.string().optional(),
     domainNames: z.array(z.string()).optional(),
     creationTime: z.bigint().optional(),
     updatedTime: z.bigint().optional(),