@databricks/sdk-networking 0.48.0 → 0.52.0

package/dist/v1/model.js.map

@@ -1 +1 @@
-{"version":3,"file":"model.js","names":[],"sources":["../../src/v1/model.ts"],"sourcesContent":["// Code generated from API definition by Databricks SDK Generator. DO NOT EDIT.\n\nimport {Temporal} from '@js-temporal/polyfill';\nimport {FieldMask} from '@databricks/sdk-core/wkt';\nimport type {FieldMaskSchema} from '@databricks/sdk-core/wkt';\nimport {z} from 'zod';\n\n/**\n * The target resources that are supported by Network Connectivity Config.\n * Note: some egress types can support general types that are not defined in EgressResourceType.\n * E.g.: Azure private endpoint supports private link enabled Azure services.\n */\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Enum-style const object.\nexport const EgressResourceType = {\n  EGRESS_RESOURCE_TYPE_UNSPECIFIED: 'EGRESS_RESOURCE_TYPE_UNSPECIFIED',\n  AZURE_BLOB_STORAGE: 'AZURE_BLOB_STORAGE',\n} as const;\nexport type EgressResourceType =\n  | (typeof EgressResourceType)[keyof typeof EgressResourceType]\n  | (string & {});\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Enum-style const object.\nexport const EndpointState = {\n  /** The endpoint is pending approval. */\n  PENDING: 'PENDING',\n  /** The endpoint has been approved and is ready for use. */\n  APPROVED: 'APPROVED',\n  /** The endpoint encountered some issues during setup. */\n  FAILED: 'FAILED',\n  /** The endpoint was once established but later disconnected. This endpoint doesn't provide connectivity. */\n  DISCONNECTED: 'DISCONNECTED',\n} as const;\nexport type EndpointState =\n  | (typeof EndpointState)[keyof typeof EndpointState]\n  | (string & {});\n\n/**\n * Type of IP access list. Valid values are as follows and are case-sensitive:\n *\n * * `ALLOW`: An allow list. Include this IP or range.\n * * `BLOCK`: A block list. Exclude this IP or range. IP addresses in the block list are excluded even if they are included in an allow list.\n */\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Enum-style const object.\nexport const IpAccessListType = {\n  ALLOW: 'ALLOW',\n  /** Blocks the associated CIDRs. */\n  BLOCK: 'BLOCK',\n} as const;\nexport type IpAccessListType =\n  | (typeof IpAccessListType)[keyof typeof IpAccessListType]\n  | (string & {});\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Enum-style const object.\nexport const PrivateAccessLevel = {\n  /** Only specifically listed endpoints can access my workspace */\n  ENDPOINT: 'ENDPOINT',\n  /** Only endpoints in the same account can access my workspace */\n  ACCOUNT: 'ACCOUNT',\n} as const;\nexport type PrivateAccessLevel =\n  | (typeof PrivateAccessLevel)[keyof typeof PrivateAccessLevel]\n  | (string & {});\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Enum-style const object.\nexport const VpcEndpointUseCase = {\n  WORKSPACE_ACCESS: 'WORKSPACE_ACCESS',\n  DATAPLANE_RELAY_ACCESS: 'DATAPLANE_RELAY_ACCESS',\n  /** General access, replaces WORKSPACE_ACCESS in customer-facing API. */\n  GENERAL_ACCESS: 'GENERAL_ACCESS',\n} as const;\nexport type VpcEndpointUseCase =\n  | (typeof VpcEndpointUseCase)[keyof typeof VpcEndpointUseCase]\n  | (string & {});\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Enum-style const object.\nexport const VpcStatus = {\n  VALID: 'VALID',\n  BROKEN: 'BROKEN',\n  UNATTACHED: 'UNATTACHED',\n  /** Some optional tests are failing for this Vpc, see NetworkWarning for more information */\n  WARNED: 'WARNED',\n} as const;\nexport type VpcStatus =\n  | (typeof VpcStatus)[keyof typeof VpcStatus]\n  | (string & {});\n\n/**\n * Type of IP access list. Valid values are as follows and are case-sensitive:\n *\n * * `ALLOW`: An allow list. Include this IP or range.\n * * `BLOCK`: A block list. Exclude this IP or range. IP addresses in the block list are excluded even if they are included in an allow list.\n */\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Enum-style const object.\nexport const AccountIpAccessListType_IpAccessListType = {\n  /** Allows the associated CIDRs. */\n  ALLOW: 'ALLOW',\n  /** Blocks the associated CIDRs. */\n  BLOCK: 'BLOCK',\n} as const;\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested enum name.\nexport type AccountIpAccessListType_IpAccessListType =\n  | (typeof AccountIpAccessListType_IpAccessListType)[keyof typeof AccountIpAccessListType_IpAccessListType]\n  | (string & {});\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Enum-style const object.\nexport const EgressNetworkPolicy_NetworkAccessPolicy_InternetDestination_InternetDestinationType =\n  {\n    INTERNET_DESTINATION_TYPE_UNSPECIFIED:\n      'INTERNET_DESTINATION_TYPE_UNSPECIFIED',\n    /** This is defined as `FQDN` in settings-policy/api/proto/messages.proto. Translation is done in accounts-lake-net-manager/src/util/NetworkPolicySettingUtil.scala. */\n    DNS_NAME: 'DNS_NAME',\n  } as const;\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested enum name.\nexport type EgressNetworkPolicy_NetworkAccessPolicy_InternetDestination_InternetDestinationType =\n\n    | (typeof EgressNetworkPolicy_NetworkAccessPolicy_InternetDestination_InternetDestinationType)[keyof typeof EgressNetworkPolicy_NetworkAccessPolicy_InternetDestination_InternetDestinationType]\n    | (string & {});\n\n/** The values should match the list of workloads used in networkconfig.proto */\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Enum-style const object.\nexport const EgressNetworkPolicy_NetworkAccessPolicy_PolicyEnforcement_DryRunModeProductFilter =\n  {\n    DRY_RUN_MODE_PRODUCT_FILTER_UNSPECIFIED:\n      'DRY_RUN_MODE_PRODUCT_FILTER_UNSPECIFIED',\n    /** SQL Warehouse product */\n    DBSQL: 'DBSQL',\n    /** Machine Learning serving product */\n    ML_SERVING: 'ML_SERVING',\n  } as const;\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested enum name.\nexport type EgressNetworkPolicy_NetworkAccessPolicy_PolicyEnforcement_DryRunModeProductFilter =\n\n    | (typeof EgressNetworkPolicy_NetworkAccessPolicy_PolicyEnforcement_DryRunModeProductFilter)[keyof typeof EgressNetworkPolicy_NetworkAccessPolicy_PolicyEnforcement_DryRunModeProductFilter]\n    | (string & {});\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Enum-style const object.\nexport const EgressNetworkPolicy_NetworkAccessPolicy_PolicyEnforcement_EnforcementMode =\n  {\n    ENFORCEMENT_MODE_UNSPECIFIED: 'ENFORCEMENT_MODE_UNSPECIFIED',\n    /** Blocks traffic that violates network policy. This is the default mode. */\n    ENFORCED: 'ENFORCED',\n    /** Logs violations without blocking traffic. Useful for testing policies before enforcement. */\n    DRY_RUN: 'DRY_RUN',\n  } as const;\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested enum name.\nexport type EgressNetworkPolicy_NetworkAccessPolicy_PolicyEnforcement_EnforcementMode =\n\n    | (typeof EgressNetworkPolicy_NetworkAccessPolicy_PolicyEnforcement_EnforcementMode)[keyof typeof EgressNetworkPolicy_NetworkAccessPolicy_PolicyEnforcement_EnforcementMode]\n    | (string & {});\n\n/**\n * At which level can <Databricks> and <Databricks> managed compute access Internet.\n * FULL_ACCESS: <Databricks> can access Internet. No blocking rules will apply.\n * RESTRICTED_ACCESS: <Databricks> can only access explicitly allowed internet and storage destinations,\n * as well as UC connections and external locations.\n */\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Enum-style const object.\nexport const EgressNetworkPolicy_NetworkAccessPolicy_RestrictionMode = {\n  RESTRICTION_MODE_UNSPECIFIED: 'RESTRICTION_MODE_UNSPECIFIED',\n  FULL_ACCESS: 'FULL_ACCESS',\n  RESTRICTED_ACCESS: 'RESTRICTED_ACCESS',\n} as const;\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested enum name.\nexport type EgressNetworkPolicy_NetworkAccessPolicy_RestrictionMode =\n  | (typeof EgressNetworkPolicy_NetworkAccessPolicy_RestrictionMode)[keyof typeof EgressNetworkPolicy_NetworkAccessPolicy_RestrictionMode]\n  | (string & {});\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Enum-style const object.\nexport const EgressNetworkPolicy_NetworkAccessPolicy_StorageDestination_StorageDestinationType =\n  {\n    STORAGE_DESTINATION_TYPE_UNSPECIFIED:\n      'STORAGE_DESTINATION_TYPE_UNSPECIFIED',\n    /**\n     * AWS_S3 can be used both for direct AWS S3 access and for cross-cloud access from Azure and GCP\n     * When used in an Azure/GCP context, this indicates cross-cloud access from Azure/GCP to the specified S3 bucket\n     */\n    AWS_S3: 'AWS_S3',\n    AZURE_STORAGE: 'AZURE_STORAGE',\n    GOOGLE_CLOUD_STORAGE: 'GOOGLE_CLOUD_STORAGE',\n  } as const;\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested enum name.\nexport type EgressNetworkPolicy_NetworkAccessPolicy_StorageDestination_StorageDestinationType =\n\n    | (typeof EgressNetworkPolicy_NetworkAccessPolicy_StorageDestination_StorageDestinationType)[keyof typeof EgressNetworkPolicy_NetworkAccessPolicy_StorageDestination_StorageDestinationType]\n    | (string & {});\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Enum-style const object.\nexport const EndpointUseCase_EndpointUseCase = {\n  /** service-direct frontend private link connectivity. */\n  SERVICE_DIRECT: 'SERVICE_DIRECT',\n} as const;\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested enum name.\nexport type EndpointUseCase_EndpointUseCase =\n  | (typeof EndpointUseCase_EndpointUseCase)[keyof typeof EndpointUseCase_EndpointUseCase]\n  | (string & {});\n\n/**\n * Qualifies the breadth of API access permitted by an ingress network policy rule.\n * API_SCOPE_QUALIFIER_READ narrows matching to read-only variants of the listed scopes;\n * API_SCOPE_QUALIFIER_ALL matches any scope. When unset, scopes match exactly as listed.\n */\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Enum-style const object.\nexport const IngressNetworkPolicy_ApiScopeQualifier = {\n  /** Narrows matching to read-only variants of the listed scopes (e.g. GET/HEAD requests). */\n  API_SCOPE_QUALIFIER_READ: 'API_SCOPE_QUALIFIER_READ',\n  /** Matches any scope regardless of access level. */\n  API_SCOPE_QUALIFIER_ALL: 'API_SCOPE_QUALIFIER_ALL',\n} as const;\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested enum name.\nexport type IngressNetworkPolicy_ApiScopeQualifier =\n  | (typeof IngressNetworkPolicy_ApiScopeQualifier)[keyof typeof IngressNetworkPolicy_ApiScopeQualifier]\n  | (string & {});\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Enum-style const object.\nexport const IngressNetworkPolicy_Authentication_IdentityType = {\n  IDENTITY_TYPE_UNSPECIFIED: 'IDENTITY_TYPE_UNSPECIFIED',\n  IDENTITY_TYPE_ALL_USERS: 'IDENTITY_TYPE_ALL_USERS',\n  IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS: 'IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS',\n  IDENTITY_TYPE_SELECTED_IDENTITIES: 'IDENTITY_TYPE_SELECTED_IDENTITIES',\n} as const;\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested enum name.\nexport type IngressNetworkPolicy_Authentication_IdentityType =\n  | (typeof IngressNetworkPolicy_Authentication_IdentityType)[keyof typeof IngressNetworkPolicy_Authentication_IdentityType]\n  | (string & {});\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Enum-style const object.\nexport const IngressNetworkPolicy_AuthenticationIdentity_PrincipalType = {\n  PRINCIPAL_TYPE_UNSPECIFIED: 'PRINCIPAL_TYPE_UNSPECIFIED',\n  PRINCIPAL_TYPE_USER: 'PRINCIPAL_TYPE_USER',\n  PRINCIPAL_TYPE_SERVICE_PRINCIPAL: 'PRINCIPAL_TYPE_SERVICE_PRINCIPAL',\n} as const;\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested enum name.\nexport type IngressNetworkPolicy_AuthenticationIdentity_PrincipalType =\n  | (typeof IngressNetworkPolicy_AuthenticationIdentity_PrincipalType)[keyof typeof IngressNetworkPolicy_AuthenticationIdentity_PrincipalType]\n  | (string & {});\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Enum-style const object.\nexport const IngressNetworkPolicy_CrossWorkspaceAccess_RestrictionMode = {\n  FULL_ACCESS: 'FULL_ACCESS',\n  RESTRICTED_ACCESS: 'RESTRICTED_ACCESS',\n  /**\n   * Cross-workspace ingress is not governed by this policy. Traffic from other workspaces is\n   * subject only to the workspace's pre-existing network controls, not to the allow and deny\n   * rules configured here.\n   */\n  LEGACY_MODE: 'LEGACY_MODE',\n} as const;\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested enum name.\nexport type IngressNetworkPolicy_CrossWorkspaceAccess_RestrictionMode =\n  | (typeof IngressNetworkPolicy_CrossWorkspaceAccess_RestrictionMode)[keyof typeof IngressNetworkPolicy_CrossWorkspaceAccess_RestrictionMode]\n  | (string & {});\n\n/**\n * The restriction mode for private access. In ALLOW_ALL_REGISTERED_ENDPOINTS mode,\n * requests arriving through any endpoint registered to the account are allowed, and\n * deny rules and allow rules cannot be set. In RESTRICTED_ACCESS mode, access is\n * restricted based on deny rules and allow rules; requests that do not match any\n * allow rule are denied.\n */\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Enum-style const object.\nexport const IngressNetworkPolicy_PrivateAccess_RestrictionMode = {\n  /**\n   * Allows requests arriving through any endpoint registered to the account.\n   * Deny rules and allow rules cannot be set in this mode.\n   */\n  ALLOW_ALL_REGISTERED_ENDPOINTS: 'ALLOW_ALL_REGISTERED_ENDPOINTS',\n  /**\n   * Restricts access based on deny rules and allow rules. Requests that do not\n   * match any allow rule are denied.\n   */\n  RESTRICTED_ACCESS: 'RESTRICTED_ACCESS',\n} as const;\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested enum name.\nexport type IngressNetworkPolicy_PrivateAccess_RestrictionMode =\n  | (typeof IngressNetworkPolicy_PrivateAccess_RestrictionMode)[keyof typeof IngressNetworkPolicy_PrivateAccess_RestrictionMode]\n  | (string & {});\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Enum-style const object.\nexport const IngressNetworkPolicy_PublicAccess_RestrictionMode = {\n  FULL_ACCESS: 'FULL_ACCESS',\n  RESTRICTED_ACCESS: 'RESTRICTED_ACCESS',\n} as const;\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested enum name.\nexport type IngressNetworkPolicy_PublicAccess_RestrictionMode =\n  | (typeof IngressNetworkPolicy_PublicAccess_RestrictionMode)[keyof typeof IngressNetworkPolicy_PublicAccess_RestrictionMode]\n  | (string & {});\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Enum-style const object.\nexport const NccPrivateEndpointRule_PrivateLinkConnectionState = {\n  PRIVATE_LINK_CONNECTION_STATE_UNSPECIFIED:\n    'PRIVATE_LINK_CONNECTION_STATE_UNSPECIFIED',\n  /** The endpoint has been approved and is ready to use in your serverless compute resources. */\n  ESTABLISHED: 'ESTABLISHED',\n  /** Connection was rejected by the private link resource owner. */\n  REJECTED: 'REJECTED',\n  /**\n   * Connection was removed by the private link resource owner, the private endpoint becomes informative and should\n   * be deleted for clean-up.\n   */\n  DISCONNECTED: 'DISCONNECTED',\n  /** If the endpoint was created but not approved in 14 days, it will be EXPIRED. */\n  EXPIRED: 'EXPIRED',\n  /** The endpoint has been created and pending approval. */\n  PENDING: 'PENDING',\n  /** The endpoint creation is in progress. */\n  CREATING: 'CREATING',\n  /** The endpoint creation failed. */\n  CREATE_FAILED: 'CREATE_FAILED',\n} as const;\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested enum name.\nexport type NccPrivateEndpointRule_PrivateLinkConnectionState =\n  | (typeof NccPrivateEndpointRule_PrivateLinkConnectionState)[keyof typeof NccPrivateEndpointRule_PrivateLinkConnectionState]\n  | (string & {});\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Enum-style const object.\nexport const NetworkConnectivityConfigAwsPrivateEndpointRule_PrivateLinkConnectionState =\n  {\n    PRIVATE_LINK_CONNECTION_STATE_UNSPECIFIED:\n      'PRIVATE_LINK_CONNECTION_STATE_UNSPECIFIED',\n    /** The endpoint has been approved and is ready to use in your serverless compute resources. */\n    ESTABLISHED: 'ESTABLISHED',\n    /** Connection was rejected by the private link resource owner. */\n    REJECTED: 'REJECTED',\n    /**\n     * Connection was removed by the private link resource owner, the private endpoint becomes informative and should\n     * be deleted for clean-up.\n     */\n    DISCONNECTED: 'DISCONNECTED',\n    /** If the endpoint is created but not approved in 14 days, it is EXPIRED. */\n    EXPIRED: 'EXPIRED',\n    /** The endpoint has been created and pending approval. */\n    PENDING: 'PENDING',\n    /** The endpoint creation is in progress. */\n    CREATING: 'CREATING',\n    /** The endpoint creation failed. */\n    CREATE_FAILED: 'CREATE_FAILED',\n  } as const;\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested enum name.\nexport type NetworkConnectivityConfigAwsPrivateEndpointRule_PrivateLinkConnectionState =\n\n    | (typeof NetworkConnectivityConfigAwsPrivateEndpointRule_PrivateLinkConnectionState)[keyof typeof NetworkConnectivityConfigAwsPrivateEndpointRule_PrivateLinkConnectionState]\n    | (string & {});\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Enum-style const object.\nexport const NetworkConnectivityConfigAzurePrivateEndpointRule_PrivateLinkConnectionState =\n  {\n    PRIVATE_LINK_CONNECTION_STATE_UNSPECIFIED:\n      'PRIVATE_LINK_CONNECTION_STATE_UNSPECIFIED',\n    /** The endpoint has been created and pending approval. */\n    INIT: 'INIT',\n    /** The endpoint has been approved and is ready to use in your serverless compute resources. */\n    ESTABLISHED: 'ESTABLISHED',\n    /** Connection was rejected by the private link resource owner. */\n    REJECTED: 'REJECTED',\n    /**\n     * Connection was removed by the private link resource owner, the private endpoint becomes informative and should\n     * be deleted for clean-up.\n     */\n    DISCONNECTED: 'DISCONNECTED',\n    /** If the endpoint was created but not approved in 14 days, it will be EXPIRED. */\n    EXPIRED: 'EXPIRED',\n    /** The endpoint has been created and pending approval. */\n    PENDING: 'PENDING',\n    /** The endpoint creation is in progress. */\n    CREATING: 'CREATING',\n    /** The endpoint creation failed. */\n    CREATE_FAILED: 'CREATE_FAILED',\n  } as const;\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested enum name.\nexport type NetworkConnectivityConfigAzurePrivateEndpointRule_PrivateLinkConnectionState =\n\n    | (typeof NetworkConnectivityConfigAzurePrivateEndpointRule_PrivateLinkConnectionState)[keyof typeof NetworkConnectivityConfigAzurePrivateEndpointRule_PrivateLinkConnectionState]\n    | (string & {});\n\n/** Definition of an IP Access list */\nexport interface AccountIpAccessList {\n  /** Universally unique identifier (UUID) of the IP access list. */\n  listId?: string | undefined;\n  /** Label for the IP access list. This **cannot** be empty. */\n  label?: string | undefined;\n  ipAddresses?: string[] | undefined;\n  /** Total number of IP or CIDR values. */\n  addressCount?: number | undefined;\n  listType?: AccountIpAccessListType_IpAccessListType | undefined;\n  /** Creation timestamp in milliseconds. */\n  createdAt?: bigint | undefined;\n  /** The ID of the user that created this list. */\n  createdBy?: bigint | undefined;\n  /** Update timestamp in milliseconds. */\n  updatedAt?: bigint | undefined;\n  /** The ID of the user that last updated this list. */\n  updatedBy?: bigint | undefined;\n  /** Specifies whether this IP access list is enabled. */\n  enabled?: boolean | undefined;\n}\n\n// eslint-disable-next-line @typescript-eslint/no-empty-object-type\nexport interface AccountIpAccessListType {}\n\nexport interface AccountNetworkPolicy {\n  /** The unique identifier for the network policy. */\n  networkPolicyId?: string | undefined;\n  /** The associated account ID for this Network Policy object. */\n  accountId?: string | undefined;\n  /** The network policies applying for egress traffic. */\n  egress?: EgressNetworkPolicy | undefined;\n  /** The network policies applying for ingress traffic. */\n  ingress?: IngressNetworkPolicy | undefined;\n  /**\n   * The ingress policy for dry run mode. Dry run will always run even if the request\n   * is allowed by the ingress policy. When this field is set, the policy will be evaluated\n   * and emit logs only without blocking requests.\n   */\n  ingressDryRun?: IngressNetworkPolicy | undefined;\n}\n\nexport interface AwsVpcEndpointInfo {\n  /**\n   * The ID of the underlying VPC endpoint in AWS. Provided by the customer when\n   * registering an existing AWS VPC endpoint.\n   */\n  awsVpcEndpointId?: string | undefined;\n  /** The ID of the Databricks VPC endpoint service that this endpoint connects to. */\n  awsEndpointServiceId?: string | undefined;\n  /** The AWS account ID in which this VPC endpoint lives. */\n  awsAccountId?: string | undefined;\n}\n\nexport interface AzurePrivateEndpointInfo {\n  /** The name of the Private Endpoint in the Azure subscription. */\n  privateEndpointName?: string | undefined;\n  /**\n   * The GUID of the Private Endpoint resource in the Azure subscription.\n   * This is assigned by Azure when the user sets up the Private Endpoint.\n   */\n  privateEndpointResourceGuid?: string | undefined;\n  /** The full resource ID of the Private Endpoint. */\n  privateEndpointResourceId?: string | undefined;\n  /** The resource ID of the Databricks Private Link Service that this Private Endpoint connects to. */\n  privateLinkServiceId?: string | undefined;\n}\n\n/** Details required to configure a block list or allow list. */\nexport interface CreateAccountIpAccessListRequest {\n  accountId?: string | undefined;\n  label?: string | undefined;\n  listType?: AccountIpAccessListType_IpAccessListType | undefined;\n  ipAddresses?: string[] | undefined;\n}\n\n/** An IP access list was successfully created. */\nexport interface CreateAccountIpAccessListResponse {\n  ipAccessList?: AccountIpAccessList | undefined;\n}\n\nexport interface CreateEndpointRequest {\n  /**\n   * The parent resource name of the account under which the endpoint is created.\n   * Format: `accounts/{account_id}`.\n   */\n  parent?: string | undefined;\n  endpoint?: Endpoint | undefined;\n}\n\n/** Details required to configure a block list or allow list. */\nexport interface CreateIpAccessListRequest {\n  /** Label for the IP access list. This **cannot** be empty. */\n  label?: string | undefined;\n  listType?: IpAccessListType | undefined;\n  ipAddresses?: string[] | undefined;\n}\n\n/** An IP access list was successfully created. */\nexport interface CreateIpAccessListResponse {\n  ipAccessList?: IpAccessList | undefined;\n}\n\n/** Properties of the new private endpoint rule. */\nexport interface CreateNccPrivateEndpointRuleRequest {\n  /** Your Network Connectivity Configuration ID. */\n  networkConnectivityConfigId?: string | undefined;\n  /** Your <Databricks> account ID. You can find your account ID in your <Databricks> accounts console. */\n  accountId?: string | undefined;\n  privateEndpointRule?: CreatePrivateEndpointRule | undefined;\n}\n\n/** Properties of the new network connectivity configuration. */\nexport interface CreateNetworkConnectivityConfigRequest {\n  /** Your <Databricks> account ID. You can find your account ID in your <Databricks> accounts console. */\n  accountId?: string | undefined;\n  networkConnectivityConfig?:\n    | CreateNetworkConnectivityConfiguration\n    | undefined;\n}\n\n/** Properties of the new network connectivity configuration. */\nexport interface CreateNetworkConnectivityConfiguration {\n  /** <Databricks> network connectivity configuration ID. */\n  networkConnectivityConfigId?: string | undefined;\n  /** Your <Databricks> account ID. You can find your account ID in your <Databricks> accounts console. */\n  accountId?: string | undefined;\n  /**\n   * The name of the network connectivity configuration. The name can contain alphanumeric characters, hyphens,\n   * and underscores. The length must be between 3 and 30 characters. The name must match the regular\n   * expression ^[0-9a-zA-Z-_]{3,30}$\n   */\n  name?: string | undefined;\n  /**\n   * The region for the network connectivity configuration.\n   * Only workspaces in the same region can be attached to the network connectivity configuration.\n   */\n  region?: string | undefined;\n  /** The network connectivity rules that apply to network traffic from your serverless compute resources. */\n  egressConfig?:\n    | CustomerFacingNetworkConnectivityConfigEgressConfig\n    | undefined;\n  /** Time in epoch milliseconds when this object was updated. */\n  updatedTime?: bigint | undefined;\n  /** Time in epoch milliseconds when this object was created. */\n  creationTime?: bigint | undefined;\n}\n\nexport interface CreateNetworkPolicyRequest {\n  /** Your <Databricks> account ID. You can find your account ID in your <Databricks> accounts console. */\n  accountId?: string | undefined;\n  /** Network policy configuration details. */\n  networkPolicy?: AccountNetworkPolicy | undefined;\n}\n\nexport interface CreateNetworkRequest {\n  accountId?: string | undefined;\n  /** The human-readable name of the network configuration. */\n  networkName?: string | undefined;\n  /** The ID of the VPC associated with this network configuration. VPC IDs can be used in multiple networks. */\n  vpcId?: string | undefined;\n  /** IDs of at least two subnets associated with this network. Subnet IDs **cannot** be used in multiple network configurations. */\n  subnetIds?: string[] | undefined;\n  /** IDs of one to five security groups associated with this network. Security group IDs **cannot** be used in multiple network configurations. */\n  securityGroupIds?: string[] | undefined;\n  vpcEndpoints?: NetworkVpcEndpoints | undefined;\n  gcpNetworkInfo?: GcpNetworkInfo | undefined;\n}\n\nexport interface CreatePrivateAccessSettingsRequest {\n  accountId?: string | undefined;\n  /** The human-readable name of the private access settings object. */\n  privateAccessSettingsName?: string | undefined;\n  /** The AWS region for workspaces attached to this private access settings object. */\n  region?: string | undefined;\n  /** Determines if the workspace can be accessed over public internet. For fully private workspaces, you can optionally specify false, but only if you implement both the front-end and the back-end PrivateLink connections. Otherwise, specify true, which means that public access is enabled. */\n  publicAccessEnabled?: boolean | undefined;\n  /**\n   * The private access level controls which VPC endpoints can connect to the UI or API of any workspace that attaches this private access settings object.\n   * `ACCOUNT` level access (the default) allows only VPC endpoints that are registered in your <Databricks> account connect to your workspace.\n   * `ENDPOINT` level access allows only specified VPC endpoints connect to your workspace. For details, see allowed_vpc_endpoint_ids.\n   */\n  privateAccessLevel?: PrivateAccessLevel | undefined;\n  /**\n   * An array of Databricks VPC endpoint IDs. This is the <Databricks> ID returned when registering the VPC endpoint configuration in your <Databricks> account. This is not the ID of the VPC endpoint in AWS.\n   * Only used when private_access_level is set to ENDPOINT. This is an allow list of VPC endpoints registered in your <Databricks> account that can connect to your workspace over AWS PrivateLink.\n   * Note: If hybrid access to your workspace is enabled by setting public_access_enabled to true, this control only works for PrivateLink connections. To control how your workspace is accessed via public internet, see IP access lists.\n   */\n  allowedVpcEndpointIds?: string[] | undefined;\n}\n\n/**\n * Properties of the new private endpoint rule.\n * Note that you must approve the endpoint in Azure portal after initialization.\n */\nexport interface CreatePrivateEndpointRule {\n  /** The ID of a private endpoint rule. */\n  ruleId?: string | undefined;\n  /** The ID of a network connectivity configuration, which is the parent resource of this private endpoint rule object. */\n  networkConnectivityConfigId?: string | undefined;\n  /**\n   * The current status of this private endpoint. The private endpoint rules are effective only if the connection state\n   * is ESTABLISHED. Remember that you must approve new endpoints on your resources in the Cloud console\n   * before they take effect.\n   * The possible values are:\n   * - PENDING: The endpoint has been created and pending approval.\n   * - ESTABLISHED: The endpoint has been approved and is ready to use in your serverless compute resources.\n   * - REJECTED: Connection was rejected by the private link resource owner.\n   * - DISCONNECTED: Connection was removed by the private link resource owner, the private endpoint becomes informative and should be deleted for clean-up.\n   * - EXPIRED: If the endpoint was created but not approved in 14 days, it will be EXPIRED.\n   * - CREATING: The endpoint creation is in progress. Once successfully created, the state will transition to PENDING.\n   * - CREATE_FAILED: The endpoint creation failed. You can check the error_message field for more details.\n   */\n  connectionState?:\n    | NccPrivateEndpointRule_PrivateLinkConnectionState\n    | undefined;\n  /**\n   * Only used by private endpoints to customer-managed private endpoint services.\n   *\n   * Domain names of target private link service.\n   * When updating this field, the full list of target domain_names must be specified.\n   */\n  domainNames?: string[] | undefined;\n  /** Time in epoch milliseconds when this object was created. */\n  creationTime?: bigint | undefined;\n  /** Time in epoch milliseconds when this object was updated. */\n  updatedTime?: bigint | undefined;\n  /** Whether this private endpoint is deactivated. */\n  deactivated?: boolean | undefined;\n  /** Time in epoch milliseconds when this object was deactivated. */\n  deactivatedAt?: bigint | undefined;\n  errorMessage?: string | undefined;\n  /** The Azure resource ID of the target resource. */\n  resourceId?: string | undefined;\n  /**\n   * Not used by customer-managed private endpoint services.\n   *\n   * The sub-resource type (group ID) of the target resource.\n   * Note that to connect to workspace root storage (root DBFS), you need two endpoints, one for blob and one for dfs.\n   */\n  groupId?: string | undefined;\n  /** The name of the Azure private endpoint resource. */\n  endpointName?: string | undefined;\n  /** <Databricks> account ID. You can find your account ID from the Accounts Console. */\n  accountId?: string | undefined;\n  /** The full target AWS endpoint service name that connects to the destination resources of the private endpoint. */\n  endpointService?: string | undefined;\n  /**\n   * Only used by private endpoints towards AWS S3 service.\n   *\n   * The globally unique S3 bucket names that will be accessed via the VPC endpoint.\n   * The bucket names must be in the same region as the NCC/endpoint service.\n   * When updating this field, we perform full update on this field. Please ensure a full list of desired\n   * resource_names is provided.\n   */\n  resourceNames?: string[] | undefined;\n  /** The AWS VPC endpoint ID. You can use this ID to identify the VPC endpoint created by <Databricks>. */\n  vpcEndpointId?: string | undefined;\n  /**\n   * Update this field to activate/deactivate this private endpoint to allow egress access from\n   * serverless compute resources. Only honored for first-party services on each cloud (e.g. AWS S3).\n   */\n  enabled?: boolean | undefined;\n  endpoint?: {$case: 'gcpEndpoint'; gcpEndpoint: GcpEndpoint} | undefined;\n}\n\nexport interface CreateVpcEndpointRequest {\n  accountId?: string | undefined;\n  /** The human-readable name of the storage configuration. */\n  vpcEndpointName?: string | undefined;\n  /** The region in which this VPC endpoint object exists. */\n  region?: string | undefined;\n  /** The ID of the VPC endpoint object in AWS. */\n  awsVpcEndpointId?: string | undefined;\n  vpcEndpointInfo?:\n    | {\n        $case: 'gcpVpcEndpointInfo';\n        /** The cloud info of this vpc endpoint. */\n        gcpVpcEndpointInfo: GcpVpcEndpointInfo;\n      }\n    | undefined;\n}\n\nexport interface CustomerFacingNetworkConnectivityConfigEgressConfig {\n  /**\n   * The network connectivity rules that are applied by default without resource specific configurations.\n   * You can find the stable network information of your serverless compute resources here.\n   */\n  defaultRules?: NetworkConnectivityConfigEgressConfig_DefaultRule | undefined;\n  /** The network connectivity rules that configured for each destinations. These rules override default rules. */\n  targetRules?:\n    | CustomerFacingNetworkConnectivityConfigEgressConfig_CustomerFacingTargetRule\n    | undefined;\n}\n\n/** Target rule controls the egress rules that are dedicated to specific resources. */\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport interface CustomerFacingNetworkConnectivityConfigEgressConfig_CustomerFacingTargetRule {\n  azurePrivateEndpointRules?:\n    | NetworkConnectivityConfigAzurePrivateEndpointRule[]\n    | undefined;\n  /** AWS private endpoint rule controls the AWS private endpoint based egress rules. */\n  awsPrivateEndpointRules?:\n    | NetworkConnectivityConfigAwsPrivateEndpointRule[]\n    | undefined;\n}\n\nexport interface DeleteAccountIpAccessListRequest {\n  accountId?: string | undefined;\n  /** The ID for the corresponding IP access list */\n  listId?: string | undefined;\n}\n\n/** The IP access list was successfully deleted. */\n// eslint-disable-next-line @typescript-eslint/no-empty-object-type\nexport interface DeleteAccountIpAccessListResponse {}\n\nexport interface DeleteEndpointRequest {\n  name?: string | undefined;\n}\n\nexport interface DeleteIpAccessListRequest {\n  /** The ID for the corresponding IP access list */\n  listId?: string | undefined;\n}\n\n/** The IP access list was successfully deleted. */\n// eslint-disable-next-line @typescript-eslint/no-empty-object-type\nexport interface DeleteIpAccessListResponse {}\n\n/**\n * Initiates deleting a private endpoint rule. If the connection state is PENDING or EXPIRED, the private endpoint is\n * immediately deleted. Otherwise, the private endpoint is deactivated and will be deleted after one day of\n * deactivation. When a private endpoint is deactivated, the deactivated field is set to true and the private endpoint\n * is not available to your serverless compute resources.\n */\nexport interface DeleteNccPrivateEndpointRuleRequest {\n  /** Your <Databricks> account ID. You can find your account ID in your <Databricks> accounts console. */\n  accountId?: string | undefined;\n  /** Your Network Connectvity Configuration ID. */\n  networkConnectivityConfigId?: string | undefined;\n  /** Your private endpoint rule ID. */\n  privateEndpointRuleId?: string | undefined;\n}\n\nexport interface DeleteNetworkConnectivityConfigRequest {\n  /** Your <Databricks> account ID. You can find your account ID in your <Databricks> accounts console. */\n  accountId?: string | undefined;\n  /** Your Network Connectivity Configuration ID. */\n  networkConnectivityConfigId?: string | undefined;\n}\n\nexport interface DeleteNetworkPolicyRequest {\n  /** The unique identifier of the network policy to delete. */\n  networkPolicyId?: string | undefined;\n  /** Your <Databricks> account ID. You can find your account ID in your <Databricks> accounts console. */\n  accountId?: string | undefined;\n}\n\nexport interface DeleteNetworkRequest {\n  /** Databricks Account API network configuration ID. */\n  networkId?: string | undefined;\n  accountId?: string | undefined;\n}\n\nexport interface DeletePrivateAccessSettingsRequest {\n  privateAccessSettingsId?: string | undefined;\n  accountId?: string | undefined;\n}\n\nexport interface DeleteVpcEndpointRequest {\n  vpcEndpointId?: string | undefined;\n  accountId?: string | undefined;\n}\n\n/** The network policies applying for egress traffic. */\nexport interface EgressNetworkPolicy {\n  /** The access policy enforced for egress traffic to the internet. */\n  networkAccess?: EgressNetworkPolicy_NetworkAccessPolicy | undefined;\n}\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport interface EgressNetworkPolicy_NetworkAccessPolicy {\n  /** The restriction mode that controls how serverless workloads can access the internet. */\n  restrictionMode?:\n    | EgressNetworkPolicy_NetworkAccessPolicy_RestrictionMode\n    | undefined;\n  /** List of internet destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode. */\n  allowedInternetDestinations?:\n    | EgressNetworkPolicy_NetworkAccessPolicy_InternetDestination[]\n    | undefined;\n  /** List of storage destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode. */\n  allowedStorageDestinations?:\n    | EgressNetworkPolicy_NetworkAccessPolicy_StorageDestination[]\n    | undefined;\n  /** Optional. When policy_enforcement is not provided, we default to ENFORCE_MODE_ALL_SERVICES */\n  policyEnforcement?:\n    | EgressNetworkPolicy_NetworkAccessPolicy_PolicyEnforcement\n    | undefined;\n  /**\n   * List of internet destinations that serverless workloads are blocked from accessing.\n   * These destinations are enforced when restriction mode is RESTRICTED_ACCESS or DRY_RUN.\n   * Currently supports DNS_NAME type only; IP_RANGE support is planned.\n   */\n  blockedInternetDestinations?:\n    | EgressNetworkPolicy_NetworkAccessPolicy_InternetDestination[]\n    | undefined;\n  /**\n   * List of <Databricks> workspace destinations that serverless workloads are\n   * allowed to access when in RESTRICTED_ACCESS mode.\n   */\n  allowedDatabricksDestinations?:\n    | EgressNetworkPolicy_NetworkAccessPolicy_DatabricksDestination[]\n    | undefined;\n}\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport interface EgressNetworkPolicy_NetworkAccessPolicy_DatabricksDestination {\n  /** The workspace IDs to allow egress traffic to. */\n  workspaceIds?: bigint[] | undefined;\n}\n\n/**\n * Users can specify accessible internet destinations when outbound access is restricted.\n * We only support DNS_NAME (FQDN format) destinations for the time being.\n * Going forward we may extend support to host names and IP addresses.\n */\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport interface EgressNetworkPolicy_NetworkAccessPolicy_InternetDestination {\n  /** The internet destination to which access will be allowed. Format dependent on the destination type. */\n  destination?: string | undefined;\n  /** The type of internet destination. Currently only DNS_NAME is supported. */\n  internetDestinationType?:\n    | EgressNetworkPolicy_NetworkAccessPolicy_InternetDestination_InternetDestinationType\n    | undefined;\n}\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport interface EgressNetworkPolicy_NetworkAccessPolicy_PolicyEnforcement {\n  /**\n   * The mode of policy enforcement. ENFORCED blocks traffic that violates policy,\n   * while DRY_RUN only logs violations without blocking. When not specified,\n   * defaults to ENFORCED.\n   */\n  enforcementMode?:\n    | EgressNetworkPolicy_NetworkAccessPolicy_PolicyEnforcement_EnforcementMode\n    | undefined;\n  /**\n   * When empty, it means dry run for all products.\n   * When non-empty, it means dry run for specific products and for the other products, they will run in enforced mode.\n   */\n  dryRunModeProductFilter?:\n    | EgressNetworkPolicy_NetworkAccessPolicy_PolicyEnforcement_DryRunModeProductFilter[]\n    | undefined;\n}\n\n/** Users can specify accessible storage destinations. */\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport interface EgressNetworkPolicy_NetworkAccessPolicy_StorageDestination {\n  bucketName?: string | undefined;\n  region?: string | undefined;\n  /** The type of storage destination. */\n  storageDestinationType?:\n    | EgressNetworkPolicy_NetworkAccessPolicy_StorageDestination_StorageDestinationType\n    | undefined;\n  /** The Azure storage account name. */\n  azureStorageAccount?: string | undefined;\n  /** The Azure storage service type (blob, dfs, etc.). */\n  azureStorageService?: string | undefined;\n}\n\n/** Endpoint represents a cloud networking resource in a user's cloud account and binds it to the <Databricks> account. */\nexport interface Endpoint {\n  /** The resource name of the endpoint, which uniquely identifies the endpoint. */\n  name?: string | undefined;\n  /** The unique identifier for this endpoint under the account. This field is a UUID generated by <Databricks>. */\n  endpointId?: string | undefined;\n  /** The Databricks Account in which the endpoint object exists. */\n  accountId?: string | undefined;\n  /**\n   * The human-readable display name of this endpoint.\n   * The input should conform to RFC-1034, which restricts to letters, numbers, and hyphens,\n   * with the first character a letter, the last a letter or a number, and a 63 character maximum.\n   */\n  displayName?: string | undefined;\n  /**\n   * The use case that determines the type of network connectivity this endpoint provides.\n   * This field is automatically determined based on the endpoint configuration and cloud-specific settings.\n   */\n  useCase?: EndpointUseCase_EndpointUseCase | undefined;\n  /** The cloud provider region where this endpoint is located. */\n  region?: string | undefined;\n  /** The state of the endpoint. The endpoint can only be used if the state is `APPROVED`. */\n  state?: EndpointState | undefined;\n  /**\n   * The cloud info of this endpoint.\n   * (-- Azure is GA; AWS and GCP added for PLAT-165656 (Private Preview). --)\n   */\n  endpointInfo?:\n    | {\n        $case: 'azurePrivateEndpointInfo';\n        /** Info for an Azure private endpoint. */\n        azurePrivateEndpointInfo: AzurePrivateEndpointInfo;\n      }\n    | {\n        $case: 'awsVpcEndpointInfo';\n        /** Info for an AWS VPC endpoint. */\n        awsVpcEndpointInfo: AwsVpcEndpointInfo;\n      }\n    | {\n        $case: 'gcpPscEndpointInfo';\n        /** Info for a GCP Private Service Connect endpoint. */\n        gcpPscEndpointInfo: GcpPscEndpointInfo;\n      }\n    | undefined;\n  /** The timestamp when the endpoint was created. The timestamp is in RFC 3339 format in UTC timezone. */\n  createTime?: Temporal.Instant | undefined;\n}\n\n// eslint-disable-next-line @typescript-eslint/no-empty-object-type\nexport interface EndpointUseCase {}\n\nexport interface GcpEndpoint {\n  /** Output only. The URI of the created PSC endpoint. */\n  pscEndpointUri?: string | undefined;\n  /** Selects which target services this private endpoint reaches. */\n  targetServices?:\n    | {\n        $case: 'serviceAttachment';\n        /**\n         * The full url of the target service attachment.\n         * Example:\n         * projects/my-gcp-project/regions/us-east4/serviceAttachments/my-service-attachment\n         */\n        serviceAttachment: string;\n      }\n    | {\n        $case: 'googleApiEndpoints';\n        /** Selected Google API hostnames, e.g. \"storage.googleapis.com\", \"bigquery.googleapis.com\". */\n        googleApiEndpoints: GoogleApiEndpoints;\n      }\n    | {\n        $case: 'allVpcScServices';\n        /** All Google APIs that support VPC Service Controls (a subset of all Google APIs). */\n        allVpcScServices: boolean;\n      }\n    | undefined;\n}\n\nexport interface GcpNetworkInfo {\n  /** The GCP project ID for network resources. This project is where the VPC and subnet resides. */\n  networkProjectId?: string | undefined;\n  /** The customer-provided VPC ID. */\n  vpcId?: string | undefined;\n  /**\n   * The customer-provided Subnet ID that will be available to Clusters in Workspaces using this\n   * Network.\n   */\n  subnetId?: string | undefined;\n  subnetRegion?: string | undefined;\n  /**\n   * Name of the secondary range within the subnet that will be used by GKE as Pod IP range.\n   * This is BYO VPC specific. DB VPC uses network.getGcpManagedNetworkConfig.getGkeClusterPodIpRange\n   */\n  podIpRangeName?: string | undefined;\n  /** Name of the secondary range within the subnet that will be used by GKE as Service IP range. */\n  serviceIpRangeName?: string | undefined;\n}\n\nexport interface GcpPscEndpointInfo {\n  /**\n   * The ID of the underlying Private Service Connect connection in the GCP consumer project,\n   * assigned by GCP when the PSC connection is created.\n   */\n  pscConnectionId?: string | undefined;\n  /**\n   * The GCP consumer project ID in which this PSC endpoint is created. Provided by the customer\n   * when registering an existing PSC endpoint.\n   */\n  projectId?: string | undefined;\n  /**\n   * The name of this PSC connection in the GCP consumer project. Provided by the customer when\n   * registering an existing PSC endpoint.\n   */\n  pscEndpoint?: string | undefined;\n  /**\n   * The GCP region of the PSC connection endpoint. Provided by the customer when registering an\n   * existing PSC endpoint. GCP supports only same-region PSC, so this must match the workspace\n   * region.\n   */\n  endpointRegion?: string | undefined;\n  /** The ID of the <Databricks> service attachment this PSC endpoint connects to. */\n  serviceAttachmentId?: string | undefined;\n}\n\nexport interface GcpVpcEndpointInfo {\n  pscConnectionId?: string | undefined;\n  projectId?: string | undefined;\n  pscEndpointName?: string | undefined;\n  endpointRegion?: string | undefined;\n  serviceAttachmentId?: string | undefined;\n}\n\nexport interface GetAccountIpAccessListRequest {\n  accountId?: string | undefined;\n  /** The ID for the corresponding IP access list */\n  listId?: string | undefined;\n}\n\nexport interface GetAccountIpAccessListResponse {\n  ipAccessList?: AccountIpAccessList | undefined;\n}\n\nexport interface GetEndpointRequest {\n  name?: string | undefined;\n}\n\nexport interface GetIpAccessListRequest {\n  /** The ID for the corresponding IP access list */\n  listId?: string | undefined;\n}\n\n/** An IP access list was successfully returned. */\nexport interface GetIpAccessListResponse {\n  ipAccessList?: IpAccessList | undefined;\n}\n\nexport interface GetNccPrivateEndpointRuleRequest {\n  /** Your <Databricks> account ID. You can find your account ID in your <Databricks> accounts console. */\n  accountId?: string | undefined;\n  /** Your Network Connectvity Configuration ID. */\n  networkConnectivityConfigId?: string | undefined;\n  /** Your private endpoint rule ID. */\n  privateEndpointRuleId?: string | undefined;\n}\n\n/** ***************************** Public facing RPC requests and responses *****************************\\// */\nexport interface GetNetworkConnectivityConfigRequest {\n  /** Your <Databricks> account ID. You can find your account ID in your <Databricks> accounts console. */\n  accountId?: string | undefined;\n  /** Your Network Connectivity Configuration ID. */\n  networkConnectivityConfigId?: string | undefined;\n}\n\nexport interface GetNetworkPolicyRequest {\n  /** The unique identifier of the network policy to retrieve. */\n  networkPolicyId?: string | undefined;\n  /** Your <Databricks> account ID. You can find your account ID in your <Databricks> accounts console. */\n  accountId?: string | undefined;\n}\n\nexport interface GetNetworkRequest {\n  /** Databricks Account API network configuration ID. */\n  networkId?: string | undefined;\n  accountId?: string | undefined;\n}\n\nexport interface GetPrivateAccessSettingsRequest {\n  privateAccessSettingsId?: string | undefined;\n  accountId?: string | undefined;\n}\n\nexport interface GetVpcEndpointRequest {\n  /** Databricks VPC endpoint ID. */\n  vpcEndpointId?: string | undefined;\n  accountId?: string | undefined;\n}\n\nexport interface GetWorkspaceNetworkOptionRequest {\n  /** Your <Databricks> account ID. You can find your account ID in your <Databricks> accounts console. */\n  accountId?: string | undefined;\n  /** The workspace ID. */\n  workspaceId?: bigint | undefined;\n}\n\n/**\n * Wrapper for a list of Google API hostnames. Wrapped in a message because\n * proto3 oneof does not support repeated fields directly.\n */\nexport interface GoogleApiEndpoints {\n  /**\n   * Google API hostnames, e.g. \"storage.googleapis.com\",\n   * \"bigquery.googleapis.com\". Use \"googleapis.com\" to cover all Google APIs.\n   */\n  endpoints?: string[] | undefined;\n}\n\n/** The network policies applying for ingress traffic. */\nexport interface IngressNetworkPolicy {\n  /**\n   * The network policy restrictions for public access to the workspace.\n   * Configures how public internet traffic is allowed or denied access.\n   */\n  publicAccess?: IngressNetworkPolicy_PublicAccess | undefined;\n  /**\n   * The network policy restrictions for private access.\n   * Configures how requests arriving over private connectivity are governed.\n   */\n  privateAccess?: IngressNetworkPolicy_PrivateAccess | undefined;\n  crossWorkspaceAccess?: IngressNetworkPolicy_CrossWorkspaceAccess | undefined;\n}\n\n/** Matches account-level Databricks API endpoints for an ingress network policy rule. */\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport interface IngressNetworkPolicy_AccountApiDestination {\n  /** The API scopes to match. Use \"all-apis\" to match any account-level API. */\n  scopes?: string[] | undefined;\n  /** Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. */\n  scopeQualifier?: IngressNetworkPolicy_ApiScopeQualifier | undefined;\n}\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport interface IngressNetworkPolicy_AccountDatabricksOneDestination {\n  /** Must be set to true. */\n  allDestinations?: boolean | undefined;\n}\n\n/** The account console UI destination. */\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport interface IngressNetworkPolicy_AccountUiDestination {\n  /** Must be set to true. */\n  allDestinations?: boolean | undefined;\n}\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport interface IngressNetworkPolicy_AppsRuntimeDestination {\n  /** Must be set to true. */\n  allDestinations?: boolean | undefined;\n}\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport interface IngressNetworkPolicy_Authentication {\n  identityType?: IngressNetworkPolicy_Authentication_IdentityType | undefined;\n  /** Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES. */\n  identities?: IngressNetworkPolicy_AuthenticationIdentity[] | undefined;\n}\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport interface IngressNetworkPolicy_AuthenticationIdentity {\n  principalType?:\n    | IngressNetworkPolicy_AuthenticationIdentity_PrincipalType\n    | undefined;\n  principalId?: bigint | undefined;\n}\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport interface IngressNetworkPolicy_CrossWorkspaceAccess {\n  restrictionMode?:\n    | IngressNetworkPolicy_CrossWorkspaceAccess_RestrictionMode\n    | undefined;\n  denyRules?: IngressNetworkPolicy_CrossWorkspaceIngressRule[] | undefined;\n  allowRules?: IngressNetworkPolicy_CrossWorkspaceIngressRule[] | undefined;\n}\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport interface IngressNetworkPolicy_CrossWorkspaceIngressRule {\n  origin?: IngressNetworkPolicy_CrossWorkspaceRequestOrigin | undefined;\n  destination?: IngressNetworkPolicy_RequestDestination | undefined;\n  authentication?: IngressNetworkPolicy_Authentication | undefined;\n  /** The label for this ingress rule. */\n  label?: string | undefined;\n}\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport interface IngressNetworkPolicy_CrossWorkspaceRequestOrigin {\n  source?:\n    | {\n        $case: 'allSourceWorkspaces';\n        /** Matches all source workspaces. */\n        allSourceWorkspaces: boolean;\n      }\n    | {\n        $case: 'selectedWorkspaces';\n        /** Specific source workspace IDs to match. */\n        selectedWorkspaces: IngressNetworkPolicy_WorkspaceIdList;\n      }\n    | undefined;\n}\n\n/** A set of registered endpoints, identified by their endpoint IDs. */\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport interface IngressNetworkPolicy_Endpoints {\n  /** The IDs of the registered endpoints. Must contain at least one endpoint ID. */\n  endpointIds?: string[] | undefined;\n}\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport interface IngressNetworkPolicy_IpRanges {\n  /** We only support IPv4 and IPv4 CIDR notation for now. */\n  ipRanges?: string[] | undefined;\n}\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport interface IngressNetworkPolicy_LakebaseRuntimeDestination {\n  /** Must be set to true. */\n  allDestinations?: boolean | undefined;\n}\n\n/**\n * Configures how requests arriving over private connectivity, such as\n * registered endpoints, are allowed or denied access.\n */\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport interface IngressNetworkPolicy_PrivateAccess {\n  /** The restriction mode for private access. */\n  restrictionMode?:\n    | IngressNetworkPolicy_PrivateAccess_RestrictionMode\n    | undefined;\n  /**\n   * Deny rules are evaluated first. A request matching any deny rule is denied,\n   * regardless of allow rules. Only applies when restriction_mode is RESTRICTED_ACCESS.\n   */\n  denyRules?: IngressNetworkPolicy_PrivateIngressRule[] | undefined;\n  /**\n   * Allow rules are evaluated after deny rules. A request matching any allow rule is\n   * allowed; a request matching no rule is denied by default. Only applies when\n   * restriction_mode is RESTRICTED_ACCESS.\n   */\n  allowRules?: IngressNetworkPolicy_PrivateIngressRule[] | undefined;\n}\n\n/**\n * An ingress rule is enforced when a request satisfies all\n * specified attributes — including request origin, destination, and authentication.\n */\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport interface IngressNetworkPolicy_PrivateIngressRule {\n  /**\n   * The origin the request must match — the private connectivity the request arrives\n   * through, for example a specific set of registered endpoints or any endpoint\n   * registered to the account. See PrivateRequestOrigin.\n   */\n  origin?: IngressNetworkPolicy_PrivateRequestOrigin | undefined;\n  /**\n   * The destination the request must match — the resource being accessed, for example\n   * the workspace UI, workspace APIs, or account-level APIs. See RequestDestination.\n   */\n  destination?: IngressNetworkPolicy_RequestDestination | undefined;\n  /**\n   * The authenticated identity the request must match. When unset, the rule matches\n   * all users and service principals.\n   * On the account-level network policy, scoping to specific identities is not\n   * currently supported, so this field must be unset (the rule matches all users\n   * and service principals).\n   */\n  authentication?: IngressNetworkPolicy_Authentication | undefined;\n  /** The label for this ingress rule. */\n  label?: string | undefined;\n}\n\n/**\n * The origin of a private access request, identified by the endpoint\n * through which the request arrives.\n */\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport interface IngressNetworkPolicy_PrivateRequestOrigin {\n  source?:\n    | {\n        $case: 'endpoints';\n        /** Matches requests arriving through any of the specified registered endpoints. */\n        endpoints: IngressNetworkPolicy_Endpoints;\n      }\n    | {\n        $case: 'allRegisteredEndpoints';\n        /**\n         * Matches requests arriving through any endpoint registered to the account.\n         * Must be set to true when specified.\n         */\n        allRegisteredEndpoints: boolean;\n      }\n    | {\n        $case: 'azureWorkspacePrivateLink';\n        /**\n         * Matches requests arriving through the workspace's Azure Private Link (ui-api)\n         * endpoints. Can only be used in deny rules of workspace-level network policies.\n         * Must be set to true when specified.\n         */\n        azureWorkspacePrivateLink: boolean;\n      }\n    | {\n        $case: 'allPrivateAccess';\n        /**\n         * Matches requests arriving over any private connectivity, including registered\n         * endpoints and the workspace's Azure Private Link (ui-api) endpoints.\n         * Can only be used in deny rules of workspace-level network policies.\n         * Must be set to true when specified.\n         */\n        allPrivateAccess: boolean;\n      }\n    | undefined;\n}\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport interface IngressNetworkPolicy_PublicAccess {\n  restrictionMode?:\n    | IngressNetworkPolicy_PublicAccess_RestrictionMode\n    | undefined;\n  denyRules?: IngressNetworkPolicy_PublicIngressRule[] | undefined;\n  allowRules?: IngressNetworkPolicy_PublicIngressRule[] | undefined;\n}\n\n/**\n * An ingress rule is enforced when a request satisfies all\n * specified attributes — including request origin, destination, and authentication.\n */\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport interface IngressNetworkPolicy_PublicIngressRule {\n  origin?: IngressNetworkPolicy_PublicRequestOrigin | undefined;\n  destination?: IngressNetworkPolicy_RequestDestination | undefined;\n  authentication?: IngressNetworkPolicy_Authentication | undefined;\n  /** The label for this ingress rule. */\n  label?: string | undefined;\n}\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport interface IngressNetworkPolicy_PublicRequestOrigin {\n  source?:\n    | {\n        $case: 'allIpRanges';\n        /** Matches all IPv4 and IPv6 ranges (both public and private). */\n        allIpRanges: boolean;\n      }\n    | {\n        $case: 'includedIpRanges';\n        /** Will not allow IP ranges with private IPs. */\n        includedIpRanges: IngressNetworkPolicy_IpRanges;\n      }\n    | {\n        $case: 'excludedIpRanges';\n        /** Excluded means: all public IP ranges except this one. */\n        excludedIpRanges: IngressNetworkPolicy_IpRanges;\n      }\n    | undefined;\n}\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport interface IngressNetworkPolicy_RequestDestination {\n  /**\n   * When true, match all destinations, no other destination fields can be set.\n   * When not set or false, at least one specific destination must be provided.\n   */\n  allDestinations?: boolean | undefined;\n  workspaceUi?: IngressNetworkPolicy_WorkspaceUiDestination | undefined;\n  workspaceApi?: IngressNetworkPolicy_WorkspaceApiDestination | undefined;\n  appsRuntime?: IngressNetworkPolicy_AppsRuntimeDestination | undefined;\n  lakebaseRuntime?: IngressNetworkPolicy_LakebaseRuntimeDestination | undefined;\n  /**\n   * Matches requests to the account console UI.\n   * Can only be used in the account-level network policy.\n   */\n  accountUi?: IngressNetworkPolicy_AccountUiDestination | undefined;\n  /**\n   * Matches requests to account-level APIs.\n   * Can only be used in the account-level network policy.\n   */\n  accountApi?: IngressNetworkPolicy_AccountApiDestination | undefined;\n  /** Account DatabricksOne destination is not supported. */\n  accountDatabricksOne?:\n    | IngressNetworkPolicy_AccountDatabricksOneDestination\n    | undefined;\n}\n\n/** Matches workspace-level Databricks API endpoints for an ingress network policy rule. */\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport interface IngressNetworkPolicy_WorkspaceApiDestination {\n  scopes?: string[] | undefined;\n  /** Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. */\n  scopeQualifier?: IngressNetworkPolicy_ApiScopeQualifier | undefined;\n}\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport interface IngressNetworkPolicy_WorkspaceIdList {\n  workspaceIds?: bigint[] | undefined;\n}\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport interface IngressNetworkPolicy_WorkspaceUiDestination {\n  /** Must be set to true. */\n  allDestinations?: boolean | undefined;\n}\n\n/** Definition of an IP Access list */\nexport interface IpAccessList {\n  /** Universally unique identifier (UUID) of the IP access list. */\n  listId?: string | undefined;\n  /** Label for the IP access list. This **cannot** be empty. */\n  label?: string | undefined;\n  ipAddresses?: string[] | undefined;\n  /** Total number of IP or CIDR values. */\n  addressCount?: number | undefined;\n  listType?: IpAccessListType | undefined;\n  /** Creation timestamp in milliseconds. */\n  createdAt?: bigint | undefined;\n  /** User ID of the user who created this list. */\n  createdBy?: bigint | undefined;\n  /** Update timestamp in milliseconds. */\n  updatedAt?: bigint | undefined;\n  /** User ID of the user who updated this list. */\n  updatedBy?: bigint | undefined;\n  /** Specifies whether this IP access list is enabled. */\n  enabled?: boolean | undefined;\n}\n\nexport interface ListAccountIpAccessListsRequest {\n  accountId?: string | undefined;\n}\n\n/** IP access lists were successfully returned. */\nexport interface ListAccountIpAccessListsResponse {\n  ipAccessLists?: AccountIpAccessList[] | undefined;\n}\n\nexport interface ListEndpointsRequest {\n  /**\n   * The parent resource name of the account to list endpoints for.\n   * Format: `accounts/{account_id}`.\n   */\n  parent?: string | undefined;\n  pageToken?: string | undefined;\n  pageSize?: number | undefined;\n}\n\nexport interface ListEndpointsResponse {\n  items?: Endpoint[] | undefined;\n  nextPageToken?: string | undefined;\n}\n\n// eslint-disable-next-line @typescript-eslint/no-empty-object-type\nexport interface ListIpAccessLists {}\n\n/** IP access lists were successfully returned. */\nexport interface ListIpAccessListsResponse {\n  ipAccessLists?: IpAccessList[] | undefined;\n}\n\n/** Gets an array of private endpoint rules. */\nexport interface ListNccPrivateEndpointRulesRequest {\n  /** Your <Databricks> account ID. You can find your account ID in your <Databricks> accounts console. */\n  accountId?: string | undefined;\n  /** Your Network Connectvity Configuration ID. */\n  networkConnectivityConfigId?: string | undefined;\n  /** Pagination token to go to next page based on previous query. */\n  pageToken?: string | undefined;\n}\n\n/** The private endpoint rule list was successfully retrieved. */\nexport interface ListNccPrivateEndpointRulesResponse {\n  items?: NccPrivateEndpointRule[] | undefined;\n  /** A token that can be used to get the next page of results. If null, there are no more results to show. */\n  nextPageToken?: string | undefined;\n}\n\nexport interface ListNetworkConnectivityConfigsRequest {\n  /** Your <Databricks> account ID. You can find your account ID in your <Databricks> accounts console. */\n  accountId?: string | undefined;\n  /** Pagination token to go to next page based on previous query. */\n  pageToken?: string | undefined;\n}\n\n/** The network connectivity configuration list was successfully retrieved. */\nexport interface ListNetworkConnectivityConfigsResponse {\n  items?: NetworkConnectivityConfig[] | undefined;\n  /** A token that can be used to get the next page of results. If null, there are no more results to show. */\n  nextPageToken?: string | undefined;\n}\n\nexport interface ListNetworkPoliciesRequest {\n  /** Your <Databricks> account ID. You can find your account ID in your <Databricks> accounts console. */\n  accountId?: string | undefined;\n  /** Pagination token to go to next page based on previous query. */\n  pageToken?: string | undefined;\n}\n\nexport interface ListNetworkPoliciesResponse {\n  /** List of network policies. */\n  items?: AccountNetworkPolicy[] | undefined;\n  /** A token that can be used to get the next page of results. If null, there are no more results to show. */\n  nextPageToken?: string | undefined;\n}\n\nexport interface ListNetworkRequest {\n  accountId?: string | undefined;\n}\n\nexport interface ListNetworkResponse {\n  networks?: Network[] | undefined;\n}\n\nexport interface ListPrivateAccessSettingsRequest {\n  accountId?: string | undefined;\n}\n\nexport interface ListPrivateAccessSettingsResponse {\n  privateAccessSettings?: PrivateAccessSettings[] | undefined;\n}\n\nexport interface ListVpcEndpointRequest {\n  accountId?: string | undefined;\n}\n\nexport interface ListVpcEndpointResponse {\n  vpcEndpoints?: VpcEndpoint[] | undefined;\n}\n\n/**\n * Properties of the new private endpoint rule.\n * Note that you must approve the endpoint in Azure portal after initialization.\n */\nexport interface NccPrivateEndpointRule {\n  /** The ID of a private endpoint rule. */\n  ruleId?: string | undefined;\n  /** The ID of a network connectivity configuration, which is the parent resource of this private endpoint rule object. */\n  networkConnectivityConfigId?: string | undefined;\n  /**\n   * The current status of this private endpoint. The private endpoint rules are effective only if the connection state\n   * is ESTABLISHED. Remember that you must approve new endpoints on your resources in the Cloud console\n   * before they take effect.\n   * The possible values are:\n   * - PENDING: The endpoint has been created and pending approval.\n   * - ESTABLISHED: The endpoint has been approved and is ready to use in your serverless compute resources.\n   * - REJECTED: Connection was rejected by the private link resource owner.\n   * - DISCONNECTED: Connection was removed by the private link resource owner, the private endpoint becomes informative and should be deleted for clean-up.\n   * - EXPIRED: If the endpoint was created but not approved in 14 days, it will be EXPIRED.\n   * - CREATING: The endpoint creation is in progress. Once successfully created, the state will transition to PENDING.\n   * - CREATE_FAILED: The endpoint creation failed. You can check the error_message field for more details.\n   */\n  connectionState?:\n    | NccPrivateEndpointRule_PrivateLinkConnectionState\n    | undefined;\n  /**\n   * Only used by private endpoints to customer-managed private endpoint services.\n   *\n   * Domain names of target private link service.\n   * When updating this field, the full list of target domain_names must be specified.\n   */\n  domainNames?: string[] | undefined;\n  /** Time in epoch milliseconds when this object was created. */\n  creationTime?: bigint | undefined;\n  /** Time in epoch milliseconds when this object was updated. */\n  updatedTime?: bigint | undefined;\n  /** Whether this private endpoint is deactivated. */\n  deactivated?: boolean | undefined;\n  /** Time in epoch milliseconds when this object was deactivated. */\n  deactivatedAt?: bigint | undefined;\n  errorMessage?: string | undefined;\n  /** The Azure resource ID of the target resource. */\n  resourceId?: string | undefined;\n  /**\n   * Not used by customer-managed private endpoint services.\n   *\n   * The sub-resource type (group ID) of the target resource.\n   * Note that to connect to workspace root storage (root DBFS), you need two endpoints, one for blob and one for dfs.\n   */\n  groupId?: string | undefined;\n  /** The name of the Azure private endpoint resource. */\n  endpointName?: string | undefined;\n  /** <Databricks> account ID. You can find your account ID from the Accounts Console. */\n  accountId?: string | undefined;\n  /** The full target AWS endpoint service name that connects to the destination resources of the private endpoint. */\n  endpointService?: string | undefined;\n  /**\n   * Only used by private endpoints towards AWS S3 service.\n   *\n   * The globally unique S3 bucket names that will be accessed via the VPC endpoint.\n   * The bucket names must be in the same region as the NCC/endpoint service.\n   * When updating this field, we perform full update on this field. Please ensure a full list of desired\n   * resource_names is provided.\n   */\n  resourceNames?: string[] | undefined;\n  /** The AWS VPC endpoint ID. You can use this ID to identify the VPC endpoint created by <Databricks>. */\n  vpcEndpointId?: string | undefined;\n  /**\n   * Update this field to activate/deactivate this private endpoint to allow egress access from\n   * serverless compute resources. Only honored for first-party services on each cloud (e.g. AWS S3).\n   */\n  enabled?: boolean | undefined;\n  endpoint?: {$case: 'gcpEndpoint'; gcpEndpoint: GcpEndpoint} | undefined;\n}\n\nexport interface Network {\n  /** The <Databricks> network configuration ID. */\n  networkId?: string | undefined;\n  /** The <Databricks> account ID associated with this network configuration. */\n  accountId?: string | undefined;\n  /** Workspace ID associated with this network configuration. */\n  workspaceId?: bigint | undefined;\n  /** The ID of the VPC associated with this network configuration. VPC IDs can be used in multiple networks. */\n  vpcId?: string | undefined;\n  /** IDs of at least two subnets associated with this network. Subnet IDs **cannot** be used in multiple network configurations. */\n  subnetIds?: string[] | undefined;\n  /** IDs of one to five security groups associated with this network. Security group IDs **cannot** be used in multiple network configurations. */\n  securityGroupIds?: string[] | undefined;\n  vpcStatus?: VpcStatus | undefined;\n  /** Array of error messages about the network configuration. */\n  errorMessages?: NetworkHealth[] | undefined;\n  /** The human-readable name of the network configuration. */\n  networkName?: string | undefined;\n  /** Time in epoch milliseconds when the network was created. */\n  creationTime?: bigint | undefined;\n  /** Array of warning messages about the network configuration. */\n  warningMessages?: NetworkWarning[] | undefined;\n  vpcEndpoints?: NetworkVpcEndpoints | undefined;\n  networkInfo?:\n    | {$case: 'gcpNetworkInfo'; gcpNetworkInfo: GcpNetworkInfo}\n    | undefined;\n}\n\n/** Properties of the new network connectivity configuration. */\nexport interface NetworkConnectivityConfig {\n  /** <Databricks> network connectivity configuration ID. */\n  networkConnectivityConfigId?: string | undefined;\n  /** Your <Databricks> account ID. You can find your account ID in your <Databricks> accounts console. */\n  accountId?: string | undefined;\n  /**\n   * The name of the network connectivity configuration. The name can contain alphanumeric characters, hyphens,\n   * and underscores. The length must be between 3 and 30 characters. The name must match the regular\n   * expression ^[0-9a-zA-Z-_]{3,30}$\n   */\n  name?: string | undefined;\n  /**\n   * The region for the network connectivity configuration.\n   * Only workspaces in the same region can be attached to the network connectivity configuration.\n   */\n  region?: string | undefined;\n  /** The network connectivity rules that apply to network traffic from your serverless compute resources. */\n  egressConfig?:\n    | CustomerFacingNetworkConnectivityConfigEgressConfig\n    | undefined;\n  /** Time in epoch milliseconds when this object was updated. */\n  updatedTime?: bigint | undefined;\n  /** Time in epoch milliseconds when this object was created. */\n  creationTime?: bigint | undefined;\n}\n\n/**\n * Properties of the new private endpoint rule.\n * Note that for private endpoints towards a VPC endpoint service behind a customer-managed NLB,\n * you must approve the endpoint in AWS console after initialization.\n */\nexport interface NetworkConnectivityConfigAwsPrivateEndpointRule {\n  /** The ID of a private endpoint rule. */\n  ruleId?: string | undefined;\n  /** The ID of a network connectivity configuration, which is the parent resource of this private endpoint rule object. */\n  networkConnectivityConfigId?: string | undefined;\n  /** <Databricks> account ID. You can find your account ID from the Accounts Console. */\n  accountId?: string | undefined;\n  /** The full target AWS endpoint service name that connects to the destination resources of the private endpoint. */\n  endpointService?: string | undefined;\n  /**\n   * Only used by private endpoints towards a VPC endpoint service for customer-managed VPC endpoint service.\n   *\n   * The target AWS resource FQDNs accessible via the VPC endpoint service.\n   * When updating this field, we perform full update on this field. Please ensure a full list of desired domain_names is provided.\n   */\n  domainNames?: string[] | undefined;\n  /**\n   * Only used by private endpoints towards AWS S3 service.\n   *\n   * The globally unique S3 bucket names that will be accessed via the VPC endpoint.\n   * The bucket names must be in the same region as the NCC/endpoint service.\n   * When updating this field, we perform full update on this field.\n   * Please ensure a full list of desired resource_names is provided.\n   */\n  resourceNames?: string[] | undefined;\n  /** The AWS VPC endpoint ID. You can use this ID to identify VPC endpoint created by <Databricks>. */\n  vpcEndpointId?: string | undefined;\n  /**\n   * The current status of this private endpoint. The private endpoint rules are effective only if the connection state\n   * is ESTABLISHED. Remember that you must approve new endpoints on your resources in the AWS console\n   * before they take effect.\n   * The possible values are:\n   * - PENDING: The endpoint has been created and pending approval.\n   * - ESTABLISHED: The endpoint has been approved and is ready to use in your serverless compute resources.\n   * - REJECTED: Connection was rejected by the private link resource owner.\n   * - DISCONNECTED: Connection was removed by the private link resource owner, the private endpoint becomes informative and should be deleted for clean-up.\n   * - EXPIRED: If the endpoint is created but not approved in 14 days, it is EXPIRED.\n   */\n  connectionState?:\n    | NetworkConnectivityConfigAwsPrivateEndpointRule_PrivateLinkConnectionState\n    | undefined;\n  /** Time in epoch milliseconds when this object was created. */\n  creationTime?: bigint | undefined;\n  /** Time in epoch milliseconds when this object was updated. */\n  updatedTime?: bigint | undefined;\n  /** Whether this private endpoint is deactivated. */\n  deactivated?: boolean | undefined;\n  /** Time in epoch milliseconds when this object was deactivated. */\n  deactivatedAt?: bigint | undefined;\n  /**\n   * Only used by private endpoints towards an AWS S3 service.\n   *\n   * Update this field to activate/deactivate this private endpoint to allow egress access from serverless compute resources.\n   */\n  enabled?: boolean | undefined;\n  errorMessage?: string | undefined;\n}\n\n/**\n * Properties of the new private endpoint rule.\n * Note that you must approve the endpoint in Azure portal after initialization.\n */\nexport interface NetworkConnectivityConfigAzurePrivateEndpointRule {\n  /** The ID of a private endpoint rule. */\n  ruleId?: string | undefined;\n  /** The ID of a network connectivity configuration, which is the parent resource of this private endpoint rule object. */\n  networkConnectivityConfigId?: string | undefined;\n  /** The Azure resource ID of the target resource. */\n  resourceId?: string | undefined;\n  /**\n   * Only used by private endpoints to Azure first-party services.\n   *\n   * The sub-resource type (group ID) of the target resource.\n   * Note that to connect to workspace root storage (root DBFS), you need two endpoints, one for blob and one for dfs.\n   */\n  groupId?: string | undefined;\n  /** The name of the Azure private endpoint resource. */\n  endpointName?: string | undefined;\n  /**\n   * The current status of this private endpoint. The private endpoint rules are effective only if the connection state\n   * is ESTABLISHED. Remember that you must approve new endpoints on your resources in the Azure portal\n   * before they take effect.\n   * The possible values are:\n   * - INIT: (deprecated) The endpoint has been created and pending approval.\n   * - PENDING: The endpoint has been created and pending approval.\n   * - ESTABLISHED: The endpoint has been approved and is ready to use in your serverless compute resources.\n   * - REJECTED: Connection was rejected by the private link resource owner.\n   * - DISCONNECTED: Connection was removed by the private link resource owner, the private endpoint becomes informative and should be deleted for clean-up.\n   * - EXPIRED: If the endpoint was created but not approved in 14 days, it will be EXPIRED.\n   */\n  connectionState?:\n    | NetworkConnectivityConfigAzurePrivateEndpointRule_PrivateLinkConnectionState\n    | undefined;\n  /** Time in epoch milliseconds when this object was created. */\n  creationTime?: bigint | undefined;\n  /** Time in epoch milliseconds when this object was updated. */\n  updatedTime?: bigint | undefined;\n  /** Whether this private endpoint is deactivated. */\n  deactivated?: boolean | undefined;\n  /** Time in epoch milliseconds when this object was deactivated. */\n  deactivatedAt?: bigint | undefined;\n  /**\n   * Not used by customer-managed private endpoint services.\n   *\n   * Domain names of target private link service.\n   * When updating this field, the full list of target domain_names must be specified.\n   */\n  domainNames?: string[] | undefined;\n  errorMessage?: string | undefined;\n}\n\n/**\n * Egress network configurations. Provides network configurations for Databricks -> Customer\n * traffic.\n */\n// eslint-disable-next-line @typescript-eslint/no-empty-object-type\nexport interface NetworkConnectivityConfigEgressConfig {}\n\n/** Default rules don't have specific targets. */\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport interface NetworkConnectivityConfigEgressConfig_DefaultRule {\n  azureServiceEndpointRule?:\n    | NetworkConnectivityConfigEgressConfig_DefaultRule_AzureServiceEndpointRule\n    | undefined;\n  awsStableIpRule?:\n    | NetworkConnectivityConfigEgressConfig_DefaultRule_AwsStableIpRule\n    | undefined;\n}\n\n/** The stable AWS IP CIDR blocks. You can use these to configure the firewall of your resources to allow traffic from your <Databricks> workspace. */\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport interface NetworkConnectivityConfigEgressConfig_DefaultRule_AwsStableIpRule {\n  /** The list of stable IP CIDR blocks from which <Databricks> network traffic originates when accessing your resources. */\n  cidrBlocks?: string[] | undefined;\n}\n\n/**\n * The stable Azure service endpoints. You can configure the firewall of your Azure resources\n * to allow traffic from your <Databricks> serverless compute resources.\n */\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport interface NetworkConnectivityConfigEgressConfig_DefaultRule_AzureServiceEndpointRule {\n  /** The Azure region in which this service endpoint rule applies.. */\n  targetRegion?: string | undefined;\n  /** The Azure services to which this service endpoint rule applies to. */\n  targetServices?: EgressResourceType[] | undefined;\n  /** The list of subnets from which <Databricks> network traffic originates when accessing your Azure resources. */\n  subnets?: string[] | undefined;\n}\n\nexport interface NetworkHealth {\n  errorType?: string | undefined;\n  /** Details of the error. */\n  errorMessage?: string | undefined;\n}\n\nexport interface NetworkVpcEndpoints {\n  /** The VPC endpoint ID used by this network to access the Databricks REST API. */\n  restApi?: string[] | undefined;\n  /** The VPC endpoint ID used by this network to access the <Databricks> secure cluster connectivity relay. */\n  dataplaneRelay?: string[] | undefined;\n}\n\nexport interface NetworkWarning {\n  warningType?: string | undefined;\n  /** Details of the warning. */\n  warningMessage?: string | undefined;\n}\n\n/** * */\nexport interface PrivateAccessSettings {\n  /** <Databricks> private access settings ID. */\n  privateAccessSettingsId?: string | undefined;\n  /** The <Databricks> account ID that hosts the private access settings. */\n  accountId?: string | undefined;\n  /** The human-readable name of the private access settings object. */\n  privateAccessSettingsName?: string | undefined;\n  /** The AWS region for workspaces attached to this private access settings object. */\n  region?: string | undefined;\n  /** Determines if the workspace can be accessed over public internet. For fully private workspaces, you can optionally specify false, but only if you implement both the front-end and the back-end PrivateLink connections. Otherwise, specify true, which means that public access is enabled. */\n  publicAccessEnabled?: boolean | undefined;\n  /**\n   * The private access level controls which VPC endpoints can connect to the UI or API of any workspace that attaches this private access settings object.\n   * `ACCOUNT` level access (the default) allows only VPC endpoints that are registered in your <Databricks> account connect to your workspace.\n   * `ENDPOINT` level access allows only specified VPC endpoints connect to your workspace. For details, see allowed_vpc_endpoint_ids.\n   */\n  privateAccessLevel?: PrivateAccessLevel | undefined;\n  /**\n   * An array of Databricks VPC endpoint IDs. This is the <Databricks> ID that is returned when registering the VPC endpoint configuration in your <Databricks> account. This is not the ID of the VPC endpoint in AWS.\n   * Only used when private_access_level is set to ENDPOINT. This is an allow list of VPC endpoints that in your account that can connect to your workspace over AWS PrivateLink.\n   * If hybrid access to your workspace is enabled by setting public_access_enabled to true, this control only works for PrivateLink connections. To control how your workspace is accessed via public internet, see IP access lists.\n   */\n  allowedVpcEndpointIds?: string[] | undefined;\n}\n\n/** Details required to replace an IP access list. */\nexport interface ReplaceAccountIpAccessListRequest {\n  accountId?: string | undefined;\n  /** The ID for the corresponding IP access list */\n  listId?: string | undefined;\n  /** Label for the IP access list. This **cannot** be empty. */\n  label?: string | undefined;\n  listType?: AccountIpAccessListType_IpAccessListType | undefined;\n  ipAddresses?: string[] | undefined;\n  /** Specifies whether this IP access list is enabled. */\n  enabled?: boolean | undefined;\n}\n\n/** The IP access list was successfully replaced. */\nexport interface ReplaceAccountIpAccessListResponse {\n  ipAccessList?: AccountIpAccessList | undefined;\n}\n\n/** Details required to replace an IP access list. */\nexport interface ReplaceIpAccessListRequest {\n  /** The ID for the corresponding IP access list */\n  listId?: string | undefined;\n  /** Label for the IP access list. This **cannot** be empty. */\n  label?: string | undefined;\n  listType?: IpAccessListType | undefined;\n  ipAddresses?: string[] | undefined;\n  /** Specifies whether this IP access list is enabled. */\n  enabled?: boolean | undefined;\n}\n\n/** The IP access list was successfully replaced. */\nexport interface ReplaceIpAccessListResponse {\n  ipAccessList?: IpAccessList | undefined;\n}\n\n/** Details required to update an IP access list. */\nexport interface UpdateAccountIpAccessListRequest {\n  accountId?: string | undefined;\n  /** The ID for the corresponding IP access list */\n  listId?: string | undefined;\n  /** Label for the IP access list. This **cannot** be empty. */\n  label?: string | undefined;\n  listType?: AccountIpAccessListType_IpAccessListType | undefined;\n  ipAddresses?: string[] | undefined;\n  /** Specifies whether this IP access list is enabled. */\n  enabled?: boolean | undefined;\n}\n\n/** The IP access list was successfully updated. */\nexport interface UpdateAccountIpAccessListResponse {\n  ipAccessList?: AccountIpAccessList | undefined;\n}\n\n/** Details required to update an IP access list. */\nexport interface UpdateIpAccessListRequest {\n  /** The ID for the corresponding IP access list */\n  listId?: string | undefined;\n  /** Label for the IP access list. This **cannot** be empty. */\n  label?: string | undefined;\n  listType?: IpAccessListType | undefined;\n  ipAddresses?: string[] | undefined;\n  /** Specifies whether this IP access list is enabled. */\n  enabled?: boolean | undefined;\n}\n\n/** The IP access list was successfully updated. */\nexport interface UpdateIpAccessListResponse {\n  ipAccessList?: IpAccessList | undefined;\n}\n\n/** Your Network Connectivity Configuration ID. */\nexport interface UpdateNccPrivateEndpointRuleRequest {\n  /** The ID of a network connectivity configuration, which is the parent resource of this private endpoint rule object. */\n  networkConnectivityConfigId?: string | undefined;\n  /** Your <Databricks> account ID. You can find your account ID in your <Databricks> accounts console. */\n  accountId?: string | undefined;\n  /** Your private endpoint rule ID. */\n  privateEndpointRuleId?: string | undefined;\n  privateEndpointRule?: UpdatePrivateEndpointRule | undefined;\n  updateMask?: FieldMask<UpdatePrivateEndpointRule> | undefined;\n}\n\nexport interface UpdateNetworkPolicyRequest {\n  /** The unique identifier for the network policy. */\n  networkPolicyId?: string | undefined;\n  /** Your <Databricks> account ID. You can find your account ID in your <Databricks> accounts console. */\n  accountId?: string | undefined;\n  /** Updated network policy configuration details. */\n  networkPolicy?: AccountNetworkPolicy | undefined;\n}\n\nexport interface UpdatePrivateAccessSettingsRequest {\n  /** Properties of the new private access settings object. */\n  customerFacingPrivateAccessSettings?: PrivateAccessSettings | undefined;\n}\n\n/**\n * Properties of the new private endpoint rule.\n * Note that you must approve the endpoint in Azure portal after initialization.\n */\nexport interface UpdatePrivateEndpointRule {\n  /** The ID of a private endpoint rule. */\n  ruleId?: string | undefined;\n  /** The ID of a network connectivity configuration, which is the parent resource of this private endpoint rule object. */\n  networkConnectivityConfigId?: string | undefined;\n  /**\n   * The current status of this private endpoint. The private endpoint rules are effective only if the connection state\n   * is ESTABLISHED. Remember that you must approve new endpoints on your resources in the Cloud console\n   * before they take effect.\n   * The possible values are:\n   * - PENDING: The endpoint has been created and pending approval.\n   * - ESTABLISHED: The endpoint has been approved and is ready to use in your serverless compute resources.\n   * - REJECTED: Connection was rejected by the private link resource owner.\n   * - DISCONNECTED: Connection was removed by the private link resource owner, the private endpoint becomes informative and should be deleted for clean-up.\n   * - EXPIRED: If the endpoint was created but not approved in 14 days, it will be EXPIRED.\n   * - CREATING: The endpoint creation is in progress. Once successfully created, the state will transition to PENDING.\n   * - CREATE_FAILED: The endpoint creation failed. You can check the error_message field for more details.\n   */\n  connectionState?:\n    | NccPrivateEndpointRule_PrivateLinkConnectionState\n    | undefined;\n  /**\n   * Only used by private endpoints to customer-managed private endpoint services.\n   *\n   * Domain names of target private link service.\n   * When updating this field, the full list of target domain_names must be specified.\n   */\n  domainNames?: string[] | undefined;\n  /** Time in epoch milliseconds when this object was created. */\n  creationTime?: bigint | undefined;\n  /** Time in epoch milliseconds when this object was updated. */\n  updatedTime?: bigint | undefined;\n  /** Whether this private endpoint is deactivated. */\n  deactivated?: boolean | undefined;\n  /** Time in epoch milliseconds when this object was deactivated. */\n  deactivatedAt?: bigint | undefined;\n  errorMessage?: string | undefined;\n  /** The Azure resource ID of the target resource. */\n  resourceId?: string | undefined;\n  /**\n   * Not used by customer-managed private endpoint services.\n   *\n   * The sub-resource type (group ID) of the target resource.\n   * Note that to connect to workspace root storage (root DBFS), you need two endpoints, one for blob and one for dfs.\n   */\n  groupId?: string | undefined;\n  /** The name of the Azure private endpoint resource. */\n  endpointName?: string | undefined;\n  /** <Databricks> account ID. You can find your account ID from the Accounts Console. */\n  accountId?: string | undefined;\n  /** The full target AWS endpoint service name that connects to the destination resources of the private endpoint. */\n  endpointService?: string | undefined;\n  /**\n   * Only used by private endpoints towards AWS S3 service.\n   *\n   * The globally unique S3 bucket names that will be accessed via the VPC endpoint.\n   * The bucket names must be in the same region as the NCC/endpoint service.\n   * When updating this field, we perform full update on this field. Please ensure a full list of desired\n   * resource_names is provided.\n   */\n  resourceNames?: string[] | undefined;\n  /** The AWS VPC endpoint ID. You can use this ID to identify the VPC endpoint created by <Databricks>. */\n  vpcEndpointId?: string | undefined;\n  /**\n   * Update this field to activate/deactivate this private endpoint to allow egress access from\n   * serverless compute resources. Only honored for first-party services on each cloud (e.g. AWS S3).\n   */\n  enabled?: boolean | undefined;\n  endpoint?: {$case: 'gcpEndpoint'; gcpEndpoint: GcpEndpoint} | undefined;\n}\n\nexport interface UpdateWorkspaceNetworkOptionRequest {\n  /** Your <Databricks> account ID. You can find your account ID in your <Databricks> accounts console. */\n  accountId?: string | undefined;\n  /** The workspace ID. */\n  workspaceId?: bigint | undefined;\n  /** The network option details for the workspace. */\n  workspaceNetworkOption?: WorkspaceNetworkOption | undefined;\n}\n\n/** * */\nexport interface VpcEndpoint {\n  /** Databricks VPC endpoint ID. This is the <Databricks>-specific name of the VPC endpoint. Do not confuse this with the `aws_vpc_endpoint_id`, which is the ID within AWS of the VPC endpoint. */\n  vpcEndpointId?: string | undefined;\n  /** The <Databricks> account ID that hosts the VPC endpoint configuration. */\n  accountId?: string | undefined;\n  /** The human-readable name of the storage configuration. */\n  vpcEndpointName?: string | undefined;\n  /** The ID of the VPC endpoint object in AWS. */\n  awsVpcEndpointId?: string | undefined;\n  /** The ID of the <Databricks> [endpoint service](https://docs.aws.amazon.com/vpc/latest/privatelink/endpoint-service.html) that this VPC endpoint is connected to. For a list of endpoint service IDs for each supported AWS region, see the [Databricks PrivateLink documentation](https://docs.databricks.com/administration-guide/cloud-configurations/aws/privatelink.html). */\n  awsEndpointServiceId?: string | undefined;\n  /**\n   * This enumeration represents the type of Databricks VPC endpoint service that was used when creating this VPC endpoint.\n   * If the VPC endpoint connects to the <Databricks> control plane for either the front-end connection or the back-end REST API connection, the value is GENERAL_ACCESS.\n   * If the VPC endpoint connects to the <Databricks> workspace for the back-end secure cluster connectivity relay, the value is DATAPLANE_RELAY_ACCESS.\n   */\n  useCase?: VpcEndpointUseCase | undefined;\n  /** The AWS region in which this VPC endpoint object exists. */\n  region?: string | undefined;\n  /** The AWS Account in which the VPC endpoint object exists. */\n  awsAccountId?: string | undefined;\n  /** The current state (such as `available` or `rejected`) of the VPC endpoint. Derived from AWS. For the full set of values, see [AWS DescribeVpcEndpoint documentation](https://docs.aws.amazon.com/cli/latest/reference/ec2/describe-vpc-endpoints.html). */\n  state?: string | undefined;\n  vpcEndpointInfo?:\n    | {\n        $case: 'gcpVpcEndpointInfo';\n        /**\n         * The cloud info of this vpc endpoint.\n         * Info for a GCP vpc endpoint.\n         */\n        gcpVpcEndpointInfo: GcpVpcEndpointInfo;\n      }\n    | undefined;\n}\n\nexport interface WorkspaceNetworkOption {\n  /**\n   * The network policy ID to apply to the workspace. This controls the network access rules\n   * for all serverless compute resources in the workspace. Each workspace can only be\n   * linked to one policy at a time. If no policy is explicitly assigned,\n   * the workspace will use 'default-policy'.\n   */\n  networkPolicyId?: string | undefined;\n  /** The workspace ID. */\n  workspaceId?: bigint | undefined;\n}\n\nexport const unmarshalAccountIpAccessListSchema: z.ZodType<AccountIpAccessList> =\n  z\n    .object({\n      list_id: z.string().optional(),\n      label: z.string().optional(),\n      ip_addresses: z.array(z.string()).optional(),\n      address_count: z.number().optional(),\n      list_type: z.string().optional(),\n      created_at: z\n        .union([z.number(), z.bigint(), z.string()])\n        .transform(v => BigInt(v))\n        .optional(),\n      created_by: z\n        .union([z.number(), z.bigint(), z.string()])\n        .transform(v => BigInt(v))\n        .optional(),\n      updated_at: z\n        .union([z.number(), z.bigint(), z.string()])\n        .transform(v => BigInt(v))\n        .optional(),\n      updated_by: z\n        .union([z.number(), z.bigint(), z.string()])\n        .transform(v => BigInt(v))\n        .optional(),\n      enabled: z.boolean().optional(),\n    })\n    .transform(d => ({\n      listId: d.list_id,\n      label: d.label,\n      ipAddresses: d.ip_addresses,\n      addressCount: d.address_count,\n      listType: d.list_type,\n      createdAt: d.created_at,\n      createdBy: d.created_by,\n      updatedAt: d.updated_at,\n      updatedBy: d.updated_by,\n      enabled: d.enabled,\n    }));\n\nexport const unmarshalAccountNetworkPolicySchema: z.ZodType<AccountNetworkPolicy> =\n  z\n    .object({\n      network_policy_id: z.string().optional(),\n      account_id: z.string().optional(),\n      egress: z.lazy(() => unmarshalEgressNetworkPolicySchema).optional(),\n      ingress: z.lazy(() => unmarshalIngressNetworkPolicySchema).optional(),\n      ingress_dry_run: z\n        .lazy(() => unmarshalIngressNetworkPolicySchema)\n        .optional(),\n    })\n    .transform(d => ({\n      networkPolicyId: d.network_policy_id,\n      accountId: d.account_id,\n      egress: d.egress,\n      ingress: d.ingress,\n      ingressDryRun: d.ingress_dry_run,\n    }));\n\nexport const unmarshalAwsVpcEndpointInfoSchema: z.ZodType<AwsVpcEndpointInfo> =\n  z\n    .object({\n      aws_vpc_endpoint_id: z.string().optional(),\n      aws_endpoint_service_id: z.string().optional(),\n      aws_account_id: z.string().optional(),\n    })\n    .transform(d => ({\n      awsVpcEndpointId: d.aws_vpc_endpoint_id,\n      awsEndpointServiceId: d.aws_endpoint_service_id,\n      awsAccountId: d.aws_account_id,\n    }));\n\nexport const unmarshalAzurePrivateEndpointInfoSchema: z.ZodType<AzurePrivateEndpointInfo> =\n  z\n    .object({\n      private_endpoint_name: z.string().optional(),\n      private_endpoint_resource_guid: z.string().optional(),\n      private_endpoint_resource_id: z.string().optional(),\n      private_link_service_id: z.string().optional(),\n    })\n    .transform(d => ({\n      privateEndpointName: d.private_endpoint_name,\n      privateEndpointResourceGuid: d.private_endpoint_resource_guid,\n      privateEndpointResourceId: d.private_endpoint_resource_id,\n      privateLinkServiceId: d.private_link_service_id,\n    }));\n\nexport const unmarshalCreateAccountIpAccessListResponseSchema: z.ZodType<CreateAccountIpAccessListResponse> =\n  z\n    .object({\n      ip_access_list: z\n        .lazy(() => unmarshalAccountIpAccessListSchema)\n        .optional(),\n    })\n    .transform(d => ({\n      ipAccessList: d.ip_access_list,\n    }));\n\nexport const unmarshalCreateIpAccessListResponseSchema: z.ZodType<CreateIpAccessListResponse> =\n  z\n    .object({\n      ip_access_list: z.lazy(() => unmarshalIpAccessListSchema).optional(),\n    })\n    .transform(d => ({\n      ipAccessList: d.ip_access_list,\n    }));\n\nexport const unmarshalCustomerFacingNetworkConnectivityConfigEgressConfigSchema: z.ZodType<CustomerFacingNetworkConnectivityConfigEgressConfig> =\n  z\n    .object({\n      default_rules: z\n        .lazy(\n          () => unmarshalNetworkConnectivityConfigEgressConfig_DefaultRuleSchema\n        )\n        .optional(),\n      target_rules: z\n        .lazy(\n          () =>\n            unmarshalCustomerFacingNetworkConnectivityConfigEgressConfig_CustomerFacingTargetRuleSchema\n        )\n        .optional(),\n    })\n    .transform(d => ({\n      defaultRules: d.default_rules,\n      targetRules: d.target_rules,\n    }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const unmarshalCustomerFacingNetworkConnectivityConfigEgressConfig_CustomerFacingTargetRuleSchema: z.ZodType<CustomerFacingNetworkConnectivityConfigEgressConfig_CustomerFacingTargetRule> =\n  z\n    .object({\n      azure_private_endpoint_rules: z\n        .array(\n          z.lazy(\n            () =>\n              unmarshalNetworkConnectivityConfigAzurePrivateEndpointRuleSchema\n          )\n        )\n        .optional(),\n      aws_private_endpoint_rules: z\n        .array(\n          z.lazy(\n            () => unmarshalNetworkConnectivityConfigAwsPrivateEndpointRuleSchema\n          )\n        )\n        .optional(),\n    })\n    .transform(d => ({\n      azurePrivateEndpointRules: d.azure_private_endpoint_rules,\n      awsPrivateEndpointRules: d.aws_private_endpoint_rules,\n    }));\n\nexport const unmarshalDeleteAccountIpAccessListResponseSchema: z.ZodType<DeleteAccountIpAccessListResponse> =\n  z.object({});\n\nexport const unmarshalDeleteIpAccessListResponseSchema: z.ZodType<DeleteIpAccessListResponse> =\n  z.object({});\n\nexport const unmarshalEgressNetworkPolicySchema: z.ZodType<EgressNetworkPolicy> =\n  z\n    .object({\n      network_access: z\n        .lazy(() => unmarshalEgressNetworkPolicy_NetworkAccessPolicySchema)\n        .optional(),\n    })\n    .transform(d => ({\n      networkAccess: d.network_access,\n    }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const unmarshalEgressNetworkPolicy_NetworkAccessPolicySchema: z.ZodType<EgressNetworkPolicy_NetworkAccessPolicy> =\n  z\n    .object({\n      restriction_mode: z.string().optional(),\n      allowed_internet_destinations: z\n        .array(\n          z.lazy(\n            () =>\n              unmarshalEgressNetworkPolicy_NetworkAccessPolicy_InternetDestinationSchema\n          )\n        )\n        .optional(),\n      allowed_storage_destinations: z\n        .array(\n          z.lazy(\n            () =>\n              unmarshalEgressNetworkPolicy_NetworkAccessPolicy_StorageDestinationSchema\n          )\n        )\n        .optional(),\n      policy_enforcement: z\n        .lazy(\n          () =>\n            unmarshalEgressNetworkPolicy_NetworkAccessPolicy_PolicyEnforcementSchema\n        )\n        .optional(),\n      blocked_internet_destinations: z\n        .array(\n          z.lazy(\n            () =>\n              unmarshalEgressNetworkPolicy_NetworkAccessPolicy_InternetDestinationSchema\n          )\n        )\n        .optional(),\n      allowed_databricks_destinations: z\n        .array(\n          z.lazy(\n            () =>\n              unmarshalEgressNetworkPolicy_NetworkAccessPolicy_DatabricksDestinationSchema\n          )\n        )\n        .optional(),\n    })\n    .transform(d => ({\n      restrictionMode: d.restriction_mode,\n      allowedInternetDestinations: d.allowed_internet_destinations,\n      allowedStorageDestinations: d.allowed_storage_destinations,\n      policyEnforcement: d.policy_enforcement,\n      blockedInternetDestinations: d.blocked_internet_destinations,\n      allowedDatabricksDestinations: d.allowed_databricks_destinations,\n    }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const unmarshalEgressNetworkPolicy_NetworkAccessPolicy_DatabricksDestinationSchema: z.ZodType<EgressNetworkPolicy_NetworkAccessPolicy_DatabricksDestination> =\n  z\n    .object({\n      workspace_ids: z\n        .array(\n          z\n            .union([z.number(), z.bigint(), z.string()])\n            .transform(v => BigInt(v))\n        )\n        .optional(),\n    })\n    .transform(d => ({\n      workspaceIds: d.workspace_ids,\n    }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const unmarshalEgressNetworkPolicy_NetworkAccessPolicy_InternetDestinationSchema: z.ZodType<EgressNetworkPolicy_NetworkAccessPolicy_InternetDestination> =\n  z\n    .object({\n      destination: z.string().optional(),\n      internet_destination_type: z.string().optional(),\n    })\n    .transform(d => ({\n      destination: d.destination,\n      internetDestinationType: d.internet_destination_type,\n    }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const unmarshalEgressNetworkPolicy_NetworkAccessPolicy_PolicyEnforcementSchema: z.ZodType<EgressNetworkPolicy_NetworkAccessPolicy_PolicyEnforcement> =\n  z\n    .object({\n      enforcement_mode: z.string().optional(),\n      dry_run_mode_product_filter: z.array(z.string()).optional(),\n    })\n    .transform(d => ({\n      enforcementMode: d.enforcement_mode,\n      dryRunModeProductFilter: d.dry_run_mode_product_filter,\n    }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const unmarshalEgressNetworkPolicy_NetworkAccessPolicy_StorageDestinationSchema: z.ZodType<EgressNetworkPolicy_NetworkAccessPolicy_StorageDestination> =\n  z\n    .object({\n      bucket_name: z.string().optional(),\n      region: z.string().optional(),\n      storage_destination_type: z.string().optional(),\n      azure_storage_account: z.string().optional(),\n      azure_storage_service: z.string().optional(),\n    })\n    .transform(d => ({\n      bucketName: d.bucket_name,\n      region: d.region,\n      storageDestinationType: d.storage_destination_type,\n      azureStorageAccount: d.azure_storage_account,\n      azureStorageService: d.azure_storage_service,\n    }));\n\nexport const unmarshalEndpointSchema: z.ZodType<Endpoint> = z\n  .object({\n    name: z.string().optional(),\n    endpoint_id: z.string().optional(),\n    account_id: z.string().optional(),\n    display_name: z.string().optional(),\n    use_case: z.string().optional(),\n    region: z.string().optional(),\n    state: z.string().optional(),\n    azure_private_endpoint_info: z\n      .lazy(() => unmarshalAzurePrivateEndpointInfoSchema)\n      .optional(),\n    aws_vpc_endpoint_info: z\n      .lazy(() => unmarshalAwsVpcEndpointInfoSchema)\n      .optional(),\n    gcp_psc_endpoint_info: z\n      .lazy(() => unmarshalGcpPscEndpointInfoSchema)\n      .optional(),\n    create_time: z\n      .string()\n      .transform(s => Temporal.Instant.from(s))\n      .optional(),\n  })\n  .transform(d => ({\n    name: d.name,\n    endpointId: d.endpoint_id,\n    accountId: d.account_id,\n    displayName: d.display_name,\n    useCase: d.use_case,\n    region: d.region,\n    state: d.state,\n    endpointInfo:\n      d.azure_private_endpoint_info !== undefined\n        ? {\n            $case: 'azurePrivateEndpointInfo' as const,\n            azurePrivateEndpointInfo: d.azure_private_endpoint_info,\n          }\n        : d.aws_vpc_endpoint_info !== undefined\n          ? {\n              $case: 'awsVpcEndpointInfo' as const,\n              awsVpcEndpointInfo: d.aws_vpc_endpoint_info,\n            }\n          : d.gcp_psc_endpoint_info !== undefined\n            ? {\n                $case: 'gcpPscEndpointInfo' as const,\n                gcpPscEndpointInfo: d.gcp_psc_endpoint_info,\n              }\n            : undefined,\n    createTime: d.create_time,\n  }));\n\nexport const unmarshalGcpEndpointSchema: z.ZodType<GcpEndpoint> = z\n  .object({\n    psc_endpoint_uri: z.string().optional(),\n    service_attachment: z.string().optional(),\n    google_api_endpoints: z\n      .lazy(() => unmarshalGoogleApiEndpointsSchema)\n      .optional(),\n    all_vpc_sc_services: z.boolean().optional(),\n  })\n  .transform(d => ({\n    pscEndpointUri: d.psc_endpoint_uri,\n    targetServices:\n      d.service_attachment !== undefined\n        ? {\n            $case: 'serviceAttachment' as const,\n            serviceAttachment: d.service_attachment,\n          }\n        : d.google_api_endpoints !== undefined\n          ? {\n              $case: 'googleApiEndpoints' as const,\n              googleApiEndpoints: d.google_api_endpoints,\n            }\n          : d.all_vpc_sc_services !== undefined\n            ? {\n                $case: 'allVpcScServices' as const,\n                allVpcScServices: d.all_vpc_sc_services,\n              }\n            : undefined,\n  }));\n\nexport const unmarshalGcpNetworkInfoSchema: z.ZodType<GcpNetworkInfo> = z\n  .object({\n    network_project_id: z.string().optional(),\n    vpc_id: z.string().optional(),\n    subnet_id: z.string().optional(),\n    subnet_region: z.string().optional(),\n    pod_ip_range_name: z.string().optional(),\n    service_ip_range_name: z.string().optional(),\n  })\n  .transform(d => ({\n    networkProjectId: d.network_project_id,\n    vpcId: d.vpc_id,\n    subnetId: d.subnet_id,\n    subnetRegion: d.subnet_region,\n    podIpRangeName: d.pod_ip_range_name,\n    serviceIpRangeName: d.service_ip_range_name,\n  }));\n\nexport const unmarshalGcpPscEndpointInfoSchema: z.ZodType<GcpPscEndpointInfo> =\n  z\n    .object({\n      psc_connection_id: z.string().optional(),\n      project_id: z.string().optional(),\n      psc_endpoint: z.string().optional(),\n      endpoint_region: z.string().optional(),\n      service_attachment_id: z.string().optional(),\n    })\n    .transform(d => ({\n      pscConnectionId: d.psc_connection_id,\n      projectId: d.project_id,\n      pscEndpoint: d.psc_endpoint,\n      endpointRegion: d.endpoint_region,\n      serviceAttachmentId: d.service_attachment_id,\n    }));\n\nexport const unmarshalGcpVpcEndpointInfoSchema: z.ZodType<GcpVpcEndpointInfo> =\n  z\n    .object({\n      psc_connection_id: z.string().optional(),\n      project_id: z.string().optional(),\n      psc_endpoint_name: z.string().optional(),\n      endpoint_region: z.string().optional(),\n      service_attachment_id: z.string().optional(),\n    })\n    .transform(d => ({\n      pscConnectionId: d.psc_connection_id,\n      projectId: d.project_id,\n      pscEndpointName: d.psc_endpoint_name,\n      endpointRegion: d.endpoint_region,\n      serviceAttachmentId: d.service_attachment_id,\n    }));\n\nexport const unmarshalGetAccountIpAccessListResponseSchema: z.ZodType<GetAccountIpAccessListResponse> =\n  z\n    .object({\n      ip_access_list: z\n        .lazy(() => unmarshalAccountIpAccessListSchema)\n        .optional(),\n    })\n    .transform(d => ({\n      ipAccessList: d.ip_access_list,\n    }));\n\nexport const unmarshalGetIpAccessListResponseSchema: z.ZodType<GetIpAccessListResponse> =\n  z\n    .object({\n      ip_access_list: z.lazy(() => unmarshalIpAccessListSchema).optional(),\n    })\n    .transform(d => ({\n      ipAccessList: d.ip_access_list,\n    }));\n\nexport const unmarshalGoogleApiEndpointsSchema: z.ZodType<GoogleApiEndpoints> =\n  z\n    .object({\n      endpoints: z.array(z.string()).optional(),\n    })\n    .transform(d => ({\n      endpoints: d.endpoints,\n    }));\n\nexport const unmarshalIngressNetworkPolicySchema: z.ZodType<IngressNetworkPolicy> =\n  z\n    .object({\n      public_access: z\n        .lazy(() => unmarshalIngressNetworkPolicy_PublicAccessSchema)\n        .optional(),\n      private_access: z\n        .lazy(() => unmarshalIngressNetworkPolicy_PrivateAccessSchema)\n        .optional(),\n      cross_workspace_access: z\n        .lazy(() => unmarshalIngressNetworkPolicy_CrossWorkspaceAccessSchema)\n        .optional(),\n    })\n    .transform(d => ({\n      publicAccess: d.public_access,\n      privateAccess: d.private_access,\n      crossWorkspaceAccess: d.cross_workspace_access,\n    }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const unmarshalIngressNetworkPolicy_AccountApiDestinationSchema: z.ZodType<IngressNetworkPolicy_AccountApiDestination> =\n  z\n    .object({\n      scopes: z.array(z.string()).optional(),\n      scope_qualifier: z.string().optional(),\n    })\n    .transform(d => ({\n      scopes: d.scopes,\n      scopeQualifier: d.scope_qualifier,\n    }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const unmarshalIngressNetworkPolicy_AccountDatabricksOneDestinationSchema: z.ZodType<IngressNetworkPolicy_AccountDatabricksOneDestination> =\n  z\n    .object({\n      all_destinations: z.boolean().optional(),\n    })\n    .transform(d => ({\n      allDestinations: d.all_destinations,\n    }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const unmarshalIngressNetworkPolicy_AccountUiDestinationSchema: z.ZodType<IngressNetworkPolicy_AccountUiDestination> =\n  z\n    .object({\n      all_destinations: z.boolean().optional(),\n    })\n    .transform(d => ({\n      allDestinations: d.all_destinations,\n    }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const unmarshalIngressNetworkPolicy_AppsRuntimeDestinationSchema: z.ZodType<IngressNetworkPolicy_AppsRuntimeDestination> =\n  z\n    .object({\n      all_destinations: z.boolean().optional(),\n    })\n    .transform(d => ({\n      allDestinations: d.all_destinations,\n    }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const unmarshalIngressNetworkPolicy_AuthenticationSchema: z.ZodType<IngressNetworkPolicy_Authentication> =\n  z\n    .object({\n      identity_type: z.string().optional(),\n      identities: z\n        .array(\n          z.lazy(\n            () => unmarshalIngressNetworkPolicy_AuthenticationIdentitySchema\n          )\n        )\n        .optional(),\n    })\n    .transform(d => ({\n      identityType: d.identity_type,\n      identities: d.identities,\n    }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const unmarshalIngressNetworkPolicy_AuthenticationIdentitySchema: z.ZodType<IngressNetworkPolicy_AuthenticationIdentity> =\n  z\n    .object({\n      principal_type: z.string().optional(),\n      principal_id: z\n        .union([z.number(), z.bigint(), z.string()])\n        .transform(v => BigInt(v))\n        .optional(),\n    })\n    .transform(d => ({\n      principalType: d.principal_type,\n      principalId: d.principal_id,\n    }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const unmarshalIngressNetworkPolicy_CrossWorkspaceAccessSchema: z.ZodType<IngressNetworkPolicy_CrossWorkspaceAccess> =\n  z\n    .object({\n      restriction_mode: z.string().optional(),\n      deny_rules: z\n        .array(\n          z.lazy(\n            () => unmarshalIngressNetworkPolicy_CrossWorkspaceIngressRuleSchema\n          )\n        )\n        .optional(),\n      allow_rules: z\n        .array(\n          z.lazy(\n            () => unmarshalIngressNetworkPolicy_CrossWorkspaceIngressRuleSchema\n          )\n        )\n        .optional(),\n    })\n    .transform(d => ({\n      restrictionMode: d.restriction_mode,\n      denyRules: d.deny_rules,\n      allowRules: d.allow_rules,\n    }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const unmarshalIngressNetworkPolicy_CrossWorkspaceIngressRuleSchema: z.ZodType<IngressNetworkPolicy_CrossWorkspaceIngressRule> =\n  z\n    .object({\n      origin: z\n        .lazy(\n          () => unmarshalIngressNetworkPolicy_CrossWorkspaceRequestOriginSchema\n        )\n        .optional(),\n      destination: z\n        .lazy(() => unmarshalIngressNetworkPolicy_RequestDestinationSchema)\n        .optional(),\n      authentication: z\n        .lazy(() => unmarshalIngressNetworkPolicy_AuthenticationSchema)\n        .optional(),\n      label: z.string().optional(),\n    })\n    .transform(d => ({\n      origin: d.origin,\n      destination: d.destination,\n      authentication: d.authentication,\n      label: d.label,\n    }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const unmarshalIngressNetworkPolicy_CrossWorkspaceRequestOriginSchema: z.ZodType<IngressNetworkPolicy_CrossWorkspaceRequestOrigin> =\n  z\n    .object({\n      all_source_workspaces: z.boolean().optional(),\n      selected_workspaces: z\n        .lazy(() => unmarshalIngressNetworkPolicy_WorkspaceIdListSchema)\n        .optional(),\n    })\n    .transform(d => ({\n      source:\n        d.all_source_workspaces !== undefined\n          ? {\n              $case: 'allSourceWorkspaces' as const,\n              allSourceWorkspaces: d.all_source_workspaces,\n            }\n          : d.selected_workspaces !== undefined\n            ? {\n                $case: 'selectedWorkspaces' as const,\n                selectedWorkspaces: d.selected_workspaces,\n              }\n            : undefined,\n    }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const unmarshalIngressNetworkPolicy_EndpointsSchema: z.ZodType<IngressNetworkPolicy_Endpoints> =\n  z\n    .object({\n      endpoint_ids: z.array(z.string()).optional(),\n    })\n    .transform(d => ({\n      endpointIds: d.endpoint_ids,\n    }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const unmarshalIngressNetworkPolicy_IpRangesSchema: z.ZodType<IngressNetworkPolicy_IpRanges> =\n  z\n    .object({\n      ip_ranges: z.array(z.string()).optional(),\n    })\n    .transform(d => ({\n      ipRanges: d.ip_ranges,\n    }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const unmarshalIngressNetworkPolicy_LakebaseRuntimeDestinationSchema: z.ZodType<IngressNetworkPolicy_LakebaseRuntimeDestination> =\n  z\n    .object({\n      all_destinations: z.boolean().optional(),\n    })\n    .transform(d => ({\n      allDestinations: d.all_destinations,\n    }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const unmarshalIngressNetworkPolicy_PrivateAccessSchema: z.ZodType<IngressNetworkPolicy_PrivateAccess> =\n  z\n    .object({\n      restriction_mode: z.string().optional(),\n      deny_rules: z\n        .array(\n          z.lazy(() => unmarshalIngressNetworkPolicy_PrivateIngressRuleSchema)\n        )\n        .optional(),\n      allow_rules: z\n        .array(\n          z.lazy(() => unmarshalIngressNetworkPolicy_PrivateIngressRuleSchema)\n        )\n        .optional(),\n    })\n    .transform(d => ({\n      restrictionMode: d.restriction_mode,\n      denyRules: d.deny_rules,\n      allowRules: d.allow_rules,\n    }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const unmarshalIngressNetworkPolicy_PrivateIngressRuleSchema: z.ZodType<IngressNetworkPolicy_PrivateIngressRule> =\n  z\n    .object({\n      origin: z\n        .lazy(() => unmarshalIngressNetworkPolicy_PrivateRequestOriginSchema)\n        .optional(),\n      destination: z\n        .lazy(() => unmarshalIngressNetworkPolicy_RequestDestinationSchema)\n        .optional(),\n      authentication: z\n        .lazy(() => unmarshalIngressNetworkPolicy_AuthenticationSchema)\n        .optional(),\n      label: z.string().optional(),\n    })\n    .transform(d => ({\n      origin: d.origin,\n      destination: d.destination,\n      authentication: d.authentication,\n      label: d.label,\n    }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const unmarshalIngressNetworkPolicy_PrivateRequestOriginSchema: z.ZodType<IngressNetworkPolicy_PrivateRequestOrigin> =\n  z\n    .object({\n      endpoints: z\n        .lazy(() => unmarshalIngressNetworkPolicy_EndpointsSchema)\n        .optional(),\n      all_registered_endpoints: z.boolean().optional(),\n      azure_workspace_private_link: z.boolean().optional(),\n      all_private_access: z.boolean().optional(),\n    })\n    .transform(d => ({\n      source:\n        d.endpoints !== undefined\n          ? {$case: 'endpoints' as const, endpoints: d.endpoints}\n          : d.all_registered_endpoints !== undefined\n            ? {\n                $case: 'allRegisteredEndpoints' as const,\n                allRegisteredEndpoints: d.all_registered_endpoints,\n              }\n            : d.azure_workspace_private_link !== undefined\n              ? {\n                  $case: 'azureWorkspacePrivateLink' as const,\n                  azureWorkspacePrivateLink: d.azure_workspace_private_link,\n                }\n              : d.all_private_access !== undefined\n                ? {\n                    $case: 'allPrivateAccess' as const,\n                    allPrivateAccess: d.all_private_access,\n                  }\n                : undefined,\n    }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const unmarshalIngressNetworkPolicy_PublicAccessSchema: z.ZodType<IngressNetworkPolicy_PublicAccess> =\n  z\n    .object({\n      restriction_mode: z.string().optional(),\n      deny_rules: z\n        .array(\n          z.lazy(() => unmarshalIngressNetworkPolicy_PublicIngressRuleSchema)\n        )\n        .optional(),\n      allow_rules: z\n        .array(\n          z.lazy(() => unmarshalIngressNetworkPolicy_PublicIngressRuleSchema)\n        )\n        .optional(),\n    })\n    .transform(d => ({\n      restrictionMode: d.restriction_mode,\n      denyRules: d.deny_rules,\n      allowRules: d.allow_rules,\n    }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const unmarshalIngressNetworkPolicy_PublicIngressRuleSchema: z.ZodType<IngressNetworkPolicy_PublicIngressRule> =\n  z\n    .object({\n      origin: z\n        .lazy(() => unmarshalIngressNetworkPolicy_PublicRequestOriginSchema)\n        .optional(),\n      destination: z\n        .lazy(() => unmarshalIngressNetworkPolicy_RequestDestinationSchema)\n        .optional(),\n      authentication: z\n        .lazy(() => unmarshalIngressNetworkPolicy_AuthenticationSchema)\n        .optional(),\n      label: z.string().optional(),\n    })\n    .transform(d => ({\n      origin: d.origin,\n      destination: d.destination,\n      authentication: d.authentication,\n      label: d.label,\n    }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const unmarshalIngressNetworkPolicy_PublicRequestOriginSchema: z.ZodType<IngressNetworkPolicy_PublicRequestOrigin> =\n  z\n    .object({\n      all_ip_ranges: z.boolean().optional(),\n      included_ip_ranges: z\n        .lazy(() => unmarshalIngressNetworkPolicy_IpRangesSchema)\n        .optional(),\n      excluded_ip_ranges: z\n        .lazy(() => unmarshalIngressNetworkPolicy_IpRangesSchema)\n        .optional(),\n    })\n    .transform(d => ({\n      source:\n        d.all_ip_ranges !== undefined\n          ? {$case: 'allIpRanges' as const, allIpRanges: d.all_ip_ranges}\n          : d.included_ip_ranges !== undefined\n            ? {\n                $case: 'includedIpRanges' as const,\n                includedIpRanges: d.included_ip_ranges,\n              }\n            : d.excluded_ip_ranges !== undefined\n              ? {\n                  $case: 'excludedIpRanges' as const,\n                  excludedIpRanges: d.excluded_ip_ranges,\n                }\n              : undefined,\n    }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const unmarshalIngressNetworkPolicy_RequestDestinationSchema: z.ZodType<IngressNetworkPolicy_RequestDestination> =\n  z\n    .object({\n      all_destinations: z.boolean().optional(),\n      workspace_ui: z\n        .lazy(() => unmarshalIngressNetworkPolicy_WorkspaceUiDestinationSchema)\n        .optional(),\n      workspace_api: z\n        .lazy(() => unmarshalIngressNetworkPolicy_WorkspaceApiDestinationSchema)\n        .optional(),\n      apps_runtime: z\n        .lazy(() => unmarshalIngressNetworkPolicy_AppsRuntimeDestinationSchema)\n        .optional(),\n      lakebase_runtime: z\n        .lazy(\n          () => unmarshalIngressNetworkPolicy_LakebaseRuntimeDestinationSchema\n        )\n        .optional(),\n      account_ui: z\n        .lazy(() => unmarshalIngressNetworkPolicy_AccountUiDestinationSchema)\n        .optional(),\n      account_api: z\n        .lazy(() => unmarshalIngressNetworkPolicy_AccountApiDestinationSchema)\n        .optional(),\n      account_databricks_one: z\n        .lazy(\n          () =>\n            unmarshalIngressNetworkPolicy_AccountDatabricksOneDestinationSchema\n        )\n        .optional(),\n    })\n    .transform(d => ({\n      allDestinations: d.all_destinations,\n      workspaceUi: d.workspace_ui,\n      workspaceApi: d.workspace_api,\n      appsRuntime: d.apps_runtime,\n      lakebaseRuntime: d.lakebase_runtime,\n      accountUi: d.account_ui,\n      accountApi: d.account_api,\n      accountDatabricksOne: d.account_databricks_one,\n    }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const unmarshalIngressNetworkPolicy_WorkspaceApiDestinationSchema: z.ZodType<IngressNetworkPolicy_WorkspaceApiDestination> =\n  z\n    .object({\n      scopes: z.array(z.string()).optional(),\n      scope_qualifier: z.string().optional(),\n    })\n    .transform(d => ({\n      scopes: d.scopes,\n      scopeQualifier: d.scope_qualifier,\n    }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const unmarshalIngressNetworkPolicy_WorkspaceIdListSchema: z.ZodType<IngressNetworkPolicy_WorkspaceIdList> =\n  z\n    .object({\n      workspace_ids: z\n        .array(\n          z\n            .union([z.number(), z.bigint(), z.string()])\n            .transform(v => BigInt(v))\n        )\n        .optional(),\n    })\n    .transform(d => ({\n      workspaceIds: d.workspace_ids,\n    }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const unmarshalIngressNetworkPolicy_WorkspaceUiDestinationSchema: z.ZodType<IngressNetworkPolicy_WorkspaceUiDestination> =\n  z\n    .object({\n      all_destinations: z.boolean().optional(),\n    })\n    .transform(d => ({\n      allDestinations: d.all_destinations,\n    }));\n\nexport const unmarshalIpAccessListSchema: z.ZodType<IpAccessList> = z\n  .object({\n    list_id: z.string().optional(),\n    label: z.string().optional(),\n    ip_addresses: z.array(z.string()).optional(),\n    address_count: z.number().optional(),\n    list_type: z.string().optional(),\n    created_at: z\n      .union([z.number(), z.bigint(), z.string()])\n      .transform(v => BigInt(v))\n      .optional(),\n    created_by: z\n      .union([z.number(), z.bigint(), z.string()])\n      .transform(v => BigInt(v))\n      .optional(),\n    updated_at: z\n      .union([z.number(), z.bigint(), z.string()])\n      .transform(v => BigInt(v))\n      .optional(),\n    updated_by: z\n      .union([z.number(), z.bigint(), z.string()])\n      .transform(v => BigInt(v))\n      .optional(),\n    enabled: z.boolean().optional(),\n  })\n  .transform(d => ({\n    listId: d.list_id,\n    label: d.label,\n    ipAddresses: d.ip_addresses,\n    addressCount: d.address_count,\n    listType: d.list_type,\n    createdAt: d.created_at,\n    createdBy: d.created_by,\n    updatedAt: d.updated_at,\n    updatedBy: d.updated_by,\n    enabled: d.enabled,\n  }));\n\nexport const unmarshalListAccountIpAccessListsResponseSchema: z.ZodType<ListAccountIpAccessListsResponse> =\n  z\n    .object({\n      ip_access_lists: z\n        .array(z.lazy(() => unmarshalAccountIpAccessListSchema))\n        .optional(),\n    })\n    .transform(d => ({\n      ipAccessLists: d.ip_access_lists,\n    }));\n\nexport const unmarshalListEndpointsResponseSchema: z.ZodType<ListEndpointsResponse> =\n  z\n    .object({\n      items: z.array(z.lazy(() => unmarshalEndpointSchema)).optional(),\n      next_page_token: z.string().optional(),\n    })\n    .transform(d => ({\n      items: d.items,\n      nextPageToken: d.next_page_token,\n    }));\n\nexport const unmarshalListIpAccessListsResponseSchema: z.ZodType<ListIpAccessListsResponse> =\n  z\n    .object({\n      ip_access_lists: z\n        .array(z.lazy(() => unmarshalIpAccessListSchema))\n        .optional(),\n    })\n    .transform(d => ({\n      ipAccessLists: d.ip_access_lists,\n    }));\n\nexport const unmarshalListNccPrivateEndpointRulesResponseSchema: z.ZodType<ListNccPrivateEndpointRulesResponse> =\n  z\n    .object({\n      items: z\n        .array(z.lazy(() => unmarshalNccPrivateEndpointRuleSchema))\n        .optional(),\n      next_page_token: z.string().optional(),\n    })\n    .transform(d => ({\n      items: d.items,\n      nextPageToken: d.next_page_token,\n    }));\n\nexport const unmarshalListNetworkConnectivityConfigsResponseSchema: z.ZodType<ListNetworkConnectivityConfigsResponse> =\n  z\n    .object({\n      items: z\n        .array(z.lazy(() => unmarshalNetworkConnectivityConfigSchema))\n        .optional(),\n      next_page_token: z.string().optional(),\n    })\n    .transform(d => ({\n      items: d.items,\n      nextPageToken: d.next_page_token,\n    }));\n\nexport const unmarshalListNetworkPoliciesResponseSchema: z.ZodType<ListNetworkPoliciesResponse> =\n  z\n    .object({\n      items: z\n        .array(z.lazy(() => unmarshalAccountNetworkPolicySchema))\n        .optional(),\n      next_page_token: z.string().optional(),\n    })\n    .transform(d => ({\n      items: d.items,\n      nextPageToken: d.next_page_token,\n    }));\n\nexport const unmarshalNccPrivateEndpointRuleSchema: z.ZodType<NccPrivateEndpointRule> =\n  z\n    .object({\n      rule_id: z.string().optional(),\n      network_connectivity_config_id: z.string().optional(),\n      connection_state: z.string().optional(),\n      domain_names: z.array(z.string()).optional(),\n      creation_time: z\n        .union([z.number(), z.bigint(), z.string()])\n        .transform(v => BigInt(v))\n        .optional(),\n      updated_time: z\n        .union([z.number(), z.bigint(), z.string()])\n        .transform(v => BigInt(v))\n        .optional(),\n      deactivated: z.boolean().optional(),\n      deactivated_at: z\n        .union([z.number(), z.bigint(), z.string()])\n        .transform(v => BigInt(v))\n        .optional(),\n      error_message: z.string().optional(),\n      resource_id: z.string().optional(),\n      group_id: z.string().optional(),\n      endpoint_name: z.string().optional(),\n      account_id: z.string().optional(),\n      endpoint_service: z.string().optional(),\n      resource_names: z.array(z.string()).optional(),\n      vpc_endpoint_id: z.string().optional(),\n      enabled: z.boolean().optional(),\n      gcp_endpoint: z.lazy(() => unmarshalGcpEndpointSchema).optional(),\n    })\n    .transform(d => ({\n      ruleId: d.rule_id,\n      networkConnectivityConfigId: d.network_connectivity_config_id,\n      connectionState: d.connection_state,\n      domainNames: d.domain_names,\n      creationTime: d.creation_time,\n      updatedTime: d.updated_time,\n      deactivated: d.deactivated,\n      deactivatedAt: d.deactivated_at,\n      errorMessage: d.error_message,\n      resourceId: d.resource_id,\n      groupId: d.group_id,\n      endpointName: d.endpoint_name,\n      accountId: d.account_id,\n      endpointService: d.endpoint_service,\n      resourceNames: d.resource_names,\n      vpcEndpointId: d.vpc_endpoint_id,\n      enabled: d.enabled,\n      endpoint:\n        d.gcp_endpoint !== undefined\n          ? {$case: 'gcpEndpoint' as const, gcpEndpoint: d.gcp_endpoint}\n          : undefined,\n    }));\n\nexport const unmarshalNetworkSchema: z.ZodType<Network> = z\n  .object({\n    network_id: z.string().optional(),\n    account_id: z.string().optional(),\n    workspace_id: z\n      .union([z.number(), z.bigint(), z.string()])\n      .transform(v => BigInt(v))\n      .optional(),\n    vpc_id: z.string().optional(),\n    subnet_ids: z.array(z.string()).optional(),\n    security_group_ids: z.array(z.string()).optional(),\n    vpc_status: z.string().optional(),\n    error_messages: z\n      .array(z.lazy(() => unmarshalNetworkHealthSchema))\n      .optional(),\n    network_name: z.string().optional(),\n    creation_time: z\n      .union([z.number(), z.bigint(), z.string()])\n      .transform(v => BigInt(v))\n      .optional(),\n    warning_messages: z\n      .array(z.lazy(() => unmarshalNetworkWarningSchema))\n      .optional(),\n    vpc_endpoints: z.lazy(() => unmarshalNetworkVpcEndpointsSchema).optional(),\n    gcp_network_info: z.lazy(() => unmarshalGcpNetworkInfoSchema).optional(),\n  })\n  .transform(d => ({\n    networkId: d.network_id,\n    accountId: d.account_id,\n    workspaceId: d.workspace_id,\n    vpcId: d.vpc_id,\n    subnetIds: d.subnet_ids,\n    securityGroupIds: d.security_group_ids,\n    vpcStatus: d.vpc_status,\n    errorMessages: d.error_messages,\n    networkName: d.network_name,\n    creationTime: d.creation_time,\n    warningMessages: d.warning_messages,\n    vpcEndpoints: d.vpc_endpoints,\n    networkInfo:\n      d.gcp_network_info !== undefined\n        ? {$case: 'gcpNetworkInfo' as const, gcpNetworkInfo: d.gcp_network_info}\n        : undefined,\n  }));\n\nexport const unmarshalNetworkConnectivityConfigSchema: z.ZodType<NetworkConnectivityConfig> =\n  z\n    .object({\n      network_connectivity_config_id: z.string().optional(),\n      account_id: z.string().optional(),\n      name: z.string().optional(),\n      region: z.string().optional(),\n      egress_config: z\n        .lazy(\n          () =>\n            unmarshalCustomerFacingNetworkConnectivityConfigEgressConfigSchema\n        )\n        .optional(),\n      updated_time: z\n        .union([z.number(), z.bigint(), z.string()])\n        .transform(v => BigInt(v))\n        .optional(),\n      creation_time: z\n        .union([z.number(), z.bigint(), z.string()])\n        .transform(v => BigInt(v))\n        .optional(),\n    })\n    .transform(d => ({\n      networkConnectivityConfigId: d.network_connectivity_config_id,\n      accountId: d.account_id,\n      name: d.name,\n      region: d.region,\n      egressConfig: d.egress_config,\n      updatedTime: d.updated_time,\n      creationTime: d.creation_time,\n    }));\n\nexport const unmarshalNetworkConnectivityConfigAwsPrivateEndpointRuleSchema: z.ZodType<NetworkConnectivityConfigAwsPrivateEndpointRule> =\n  z\n    .object({\n      rule_id: z.string().optional(),\n      network_connectivity_config_id: z.string().optional(),\n      account_id: z.string().optional(),\n      endpoint_service: z.string().optional(),\n      domain_names: z.array(z.string()).optional(),\n      resource_names: z.array(z.string()).optional(),\n      vpc_endpoint_id: z.string().optional(),\n      connection_state: z.string().optional(),\n      creation_time: z\n        .union([z.number(), z.bigint(), z.string()])\n        .transform(v => BigInt(v))\n        .optional(),\n      updated_time: z\n        .union([z.number(), z.bigint(), z.string()])\n        .transform(v => BigInt(v))\n        .optional(),\n      deactivated: z.boolean().optional(),\n      deactivated_at: z\n        .union([z.number(), z.bigint(), z.string()])\n        .transform(v => BigInt(v))\n        .optional(),\n      enabled: z.boolean().optional(),\n      error_message: z.string().optional(),\n    })\n    .transform(d => ({\n      ruleId: d.rule_id,\n      networkConnectivityConfigId: d.network_connectivity_config_id,\n      accountId: d.account_id,\n      endpointService: d.endpoint_service,\n      domainNames: d.domain_names,\n      resourceNames: d.resource_names,\n      vpcEndpointId: d.vpc_endpoint_id,\n      connectionState: d.connection_state,\n      creationTime: d.creation_time,\n      updatedTime: d.updated_time,\n      deactivated: d.deactivated,\n      deactivatedAt: d.deactivated_at,\n      enabled: d.enabled,\n      errorMessage: d.error_message,\n    }));\n\nexport const unmarshalNetworkConnectivityConfigAzurePrivateEndpointRuleSchema: z.ZodType<NetworkConnectivityConfigAzurePrivateEndpointRule> =\n  z\n    .object({\n      rule_id: z.string().optional(),\n      network_connectivity_config_id: z.string().optional(),\n      resource_id: z.string().optional(),\n      group_id: z.string().optional(),\n      endpoint_name: z.string().optional(),\n      connection_state: z.string().optional(),\n      creation_time: z\n        .union([z.number(), z.bigint(), z.string()])\n        .transform(v => BigInt(v))\n        .optional(),\n      updated_time: z\n        .union([z.number(), z.bigint(), z.string()])\n        .transform(v => BigInt(v))\n        .optional(),\n      deactivated: z.boolean().optional(),\n      deactivated_at: z\n        .union([z.number(), z.bigint(), z.string()])\n        .transform(v => BigInt(v))\n        .optional(),\n      domain_names: z.array(z.string()).optional(),\n      error_message: z.string().optional(),\n    })\n    .transform(d => ({\n      ruleId: d.rule_id,\n      networkConnectivityConfigId: d.network_connectivity_config_id,\n      resourceId: d.resource_id,\n      groupId: d.group_id,\n      endpointName: d.endpoint_name,\n      connectionState: d.connection_state,\n      creationTime: d.creation_time,\n      updatedTime: d.updated_time,\n      deactivated: d.deactivated,\n      deactivatedAt: d.deactivated_at,\n      domainNames: d.domain_names,\n      errorMessage: d.error_message,\n    }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const unmarshalNetworkConnectivityConfigEgressConfig_DefaultRuleSchema: z.ZodType<NetworkConnectivityConfigEgressConfig_DefaultRule> =\n  z\n    .object({\n      azure_service_endpoint_rule: z\n        .lazy(\n          () =>\n            unmarshalNetworkConnectivityConfigEgressConfig_DefaultRule_AzureServiceEndpointRuleSchema\n        )\n        .optional(),\n      aws_stable_ip_rule: z\n        .lazy(\n          () =>\n            unmarshalNetworkConnectivityConfigEgressConfig_DefaultRule_AwsStableIpRuleSchema\n        )\n        .optional(),\n    })\n    .transform(d => ({\n      azureServiceEndpointRule: d.azure_service_endpoint_rule,\n      awsStableIpRule: d.aws_stable_ip_rule,\n    }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const unmarshalNetworkConnectivityConfigEgressConfig_DefaultRule_AwsStableIpRuleSchema: z.ZodType<NetworkConnectivityConfigEgressConfig_DefaultRule_AwsStableIpRule> =\n  z\n    .object({\n      cidr_blocks: z.array(z.string()).optional(),\n    })\n    .transform(d => ({\n      cidrBlocks: d.cidr_blocks,\n    }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const unmarshalNetworkConnectivityConfigEgressConfig_DefaultRule_AzureServiceEndpointRuleSchema: z.ZodType<NetworkConnectivityConfigEgressConfig_DefaultRule_AzureServiceEndpointRule> =\n  z\n    .object({\n      target_region: z.string().optional(),\n      target_services: z.array(z.string()).optional(),\n      subnets: z.array(z.string()).optional(),\n    })\n    .transform(d => ({\n      targetRegion: d.target_region,\n      targetServices: d.target_services,\n      subnets: d.subnets,\n    }));\n\nexport const unmarshalNetworkHealthSchema: z.ZodType<NetworkHealth> = z\n  .object({\n    error_type: z.string().optional(),\n    error_message: z.string().optional(),\n  })\n  .transform(d => ({\n    errorType: d.error_type,\n    errorMessage: d.error_message,\n  }));\n\nexport const unmarshalNetworkVpcEndpointsSchema: z.ZodType<NetworkVpcEndpoints> =\n  z\n    .object({\n      rest_api: z.array(z.string()).optional(),\n      dataplane_relay: z.array(z.string()).optional(),\n    })\n    .transform(d => ({\n      restApi: d.rest_api,\n      dataplaneRelay: d.dataplane_relay,\n    }));\n\nexport const unmarshalNetworkWarningSchema: z.ZodType<NetworkWarning> = z\n  .object({\n    warning_type: z.string().optional(),\n    warning_message: z.string().optional(),\n  })\n  .transform(d => ({\n    warningType: d.warning_type,\n    warningMessage: d.warning_message,\n  }));\n\nexport const unmarshalPrivateAccessSettingsSchema: z.ZodType<PrivateAccessSettings> =\n  z\n    .object({\n      private_access_settings_id: z.string().optional(),\n      account_id: z.string().optional(),\n      private_access_settings_name: z.string().optional(),\n      region: z.string().optional(),\n      public_access_enabled: z.boolean().optional(),\n      private_access_level: z.string().optional(),\n      allowed_vpc_endpoint_ids: z.array(z.string()).optional(),\n    })\n    .transform(d => ({\n      privateAccessSettingsId: d.private_access_settings_id,\n      accountId: d.account_id,\n      privateAccessSettingsName: d.private_access_settings_name,\n      region: d.region,\n      publicAccessEnabled: d.public_access_enabled,\n      privateAccessLevel: d.private_access_level,\n      allowedVpcEndpointIds: d.allowed_vpc_endpoint_ids,\n    }));\n\nexport const unmarshalReplaceAccountIpAccessListResponseSchema: z.ZodType<ReplaceAccountIpAccessListResponse> =\n  z\n    .object({\n      ip_access_list: z\n        .lazy(() => unmarshalAccountIpAccessListSchema)\n        .optional(),\n    })\n    .transform(d => ({\n      ipAccessList: d.ip_access_list,\n    }));\n\nexport const unmarshalReplaceIpAccessListResponseSchema: z.ZodType<ReplaceIpAccessListResponse> =\n  z\n    .object({\n      ip_access_list: z.lazy(() => unmarshalIpAccessListSchema).optional(),\n    })\n    .transform(d => ({\n      ipAccessList: d.ip_access_list,\n    }));\n\nexport const unmarshalUpdateAccountIpAccessListResponseSchema: z.ZodType<UpdateAccountIpAccessListResponse> =\n  z\n    .object({\n      ip_access_list: z\n        .lazy(() => unmarshalAccountIpAccessListSchema)\n        .optional(),\n    })\n    .transform(d => ({\n      ipAccessList: d.ip_access_list,\n    }));\n\nexport const unmarshalUpdateIpAccessListResponseSchema: z.ZodType<UpdateIpAccessListResponse> =\n  z\n    .object({\n      ip_access_list: z.lazy(() => unmarshalIpAccessListSchema).optional(),\n    })\n    .transform(d => ({\n      ipAccessList: d.ip_access_list,\n    }));\n\nexport const unmarshalVpcEndpointSchema: z.ZodType<VpcEndpoint> = z\n  .object({\n    vpc_endpoint_id: z.string().optional(),\n    account_id: z.string().optional(),\n    vpc_endpoint_name: z.string().optional(),\n    aws_vpc_endpoint_id: z.string().optional(),\n    aws_endpoint_service_id: z.string().optional(),\n    use_case: z.string().optional(),\n    region: z.string().optional(),\n    aws_account_id: z.string().optional(),\n    state: z.string().optional(),\n    gcp_vpc_endpoint_info: z\n      .lazy(() => unmarshalGcpVpcEndpointInfoSchema)\n      .optional(),\n  })\n  .transform(d => ({\n    vpcEndpointId: d.vpc_endpoint_id,\n    accountId: d.account_id,\n    vpcEndpointName: d.vpc_endpoint_name,\n    awsVpcEndpointId: d.aws_vpc_endpoint_id,\n    awsEndpointServiceId: d.aws_endpoint_service_id,\n    useCase: d.use_case,\n    region: d.region,\n    awsAccountId: d.aws_account_id,\n    state: d.state,\n    vpcEndpointInfo:\n      d.gcp_vpc_endpoint_info !== undefined\n        ? {\n            $case: 'gcpVpcEndpointInfo' as const,\n            gcpVpcEndpointInfo: d.gcp_vpc_endpoint_info,\n          }\n        : undefined,\n  }));\n\nexport const unmarshalWorkspaceNetworkOptionSchema: z.ZodType<WorkspaceNetworkOption> =\n  z\n    .object({\n      network_policy_id: z.string().optional(),\n      workspace_id: z\n        .union([z.number(), z.bigint(), z.string()])\n        .transform(v => BigInt(v))\n        .optional(),\n    })\n    .transform(d => ({\n      networkPolicyId: d.network_policy_id,\n      workspaceId: d.workspace_id,\n    }));\n\nexport const marshalAccountNetworkPolicySchema: z.ZodType = z\n  .object({\n    networkPolicyId: z.string().optional(),\n    accountId: z.string().optional(),\n    egress: z.lazy(() => marshalEgressNetworkPolicySchema).optional(),\n    ingress: z.lazy(() => marshalIngressNetworkPolicySchema).optional(),\n    ingressDryRun: z.lazy(() => marshalIngressNetworkPolicySchema).optional(),\n  })\n  .transform(d => ({\n    network_policy_id: d.networkPolicyId,\n    account_id: d.accountId,\n    egress: d.egress,\n    ingress: d.ingress,\n    ingress_dry_run: d.ingressDryRun,\n  }));\n\nexport const marshalAwsVpcEndpointInfoSchema: z.ZodType = z\n  .object({\n    awsVpcEndpointId: z.string().optional(),\n    awsEndpointServiceId: z.string().optional(),\n    awsAccountId: z.string().optional(),\n  })\n  .transform(d => ({\n    aws_vpc_endpoint_id: d.awsVpcEndpointId,\n    aws_endpoint_service_id: d.awsEndpointServiceId,\n    aws_account_id: d.awsAccountId,\n  }));\n\nexport const marshalAzurePrivateEndpointInfoSchema: z.ZodType = z\n  .object({\n    privateEndpointName: z.string().optional(),\n    privateEndpointResourceGuid: z.string().optional(),\n    privateEndpointResourceId: z.string().optional(),\n    privateLinkServiceId: z.string().optional(),\n  })\n  .transform(d => ({\n    private_endpoint_name: d.privateEndpointName,\n    private_endpoint_resource_guid: d.privateEndpointResourceGuid,\n    private_endpoint_resource_id: d.privateEndpointResourceId,\n    private_link_service_id: d.privateLinkServiceId,\n  }));\n\nexport const marshalCreateAccountIpAccessListRequestSchema: z.ZodType = z\n  .object({\n    accountId: z.string().optional(),\n    label: z.string().optional(),\n    listType: z.string().optional(),\n    ipAddresses: z.array(z.string()).optional(),\n  })\n  .transform(d => ({\n    account_id: d.accountId,\n    label: d.label,\n    list_type: d.listType,\n    ip_addresses: d.ipAddresses,\n  }));\n\nexport const marshalCreateIpAccessListRequestSchema: z.ZodType = z\n  .object({\n    label: z.string().optional(),\n    listType: z.string().optional(),\n    ipAddresses: z.array(z.string()).optional(),\n  })\n  .transform(d => ({\n    label: d.label,\n    list_type: d.listType,\n    ip_addresses: d.ipAddresses,\n  }));\n\nexport const marshalCreateNetworkConnectivityConfigurationSchema: z.ZodType = z\n  .object({\n    networkConnectivityConfigId: z.string().optional(),\n    accountId: z.string().optional(),\n    name: z.string().optional(),\n    region: z.string().optional(),\n    egressConfig: z\n      .lazy(\n        () => marshalCustomerFacingNetworkConnectivityConfigEgressConfigSchema\n      )\n      .optional(),\n    updatedTime: z.bigint().optional(),\n    creationTime: z.bigint().optional(),\n  })\n  .transform(d => ({\n    network_connectivity_config_id: d.networkConnectivityConfigId,\n    account_id: d.accountId,\n    name: d.name,\n    region: d.region,\n    egress_config: d.egressConfig,\n    updated_time: d.updatedTime,\n    creation_time: d.creationTime,\n  }));\n\nexport const marshalCreateNetworkRequestSchema: z.ZodType = z\n  .object({\n    accountId: z.string().optional(),\n    networkName: z.string().optional(),\n    vpcId: z.string().optional(),\n    subnetIds: z.array(z.string()).optional(),\n    securityGroupIds: z.array(z.string()).optional(),\n    vpcEndpoints: z.lazy(() => marshalNetworkVpcEndpointsSchema).optional(),\n    gcpNetworkInfo: z.lazy(() => marshalGcpNetworkInfoSchema).optional(),\n  })\n  .transform(d => ({\n    account_id: d.accountId,\n    network_name: d.networkName,\n    vpc_id: d.vpcId,\n    subnet_ids: d.subnetIds,\n    security_group_ids: d.securityGroupIds,\n    vpc_endpoints: d.vpcEndpoints,\n    gcp_network_info: d.gcpNetworkInfo,\n  }));\n\nexport const marshalCreatePrivateAccessSettingsRequestSchema: z.ZodType = z\n  .object({\n    accountId: z.string().optional(),\n    privateAccessSettingsName: z.string().optional(),\n    region: z.string().optional(),\n    publicAccessEnabled: z.boolean().optional(),\n    privateAccessLevel: z.string().optional(),\n    allowedVpcEndpointIds: z.array(z.string()).optional(),\n  })\n  .transform(d => ({\n    account_id: d.accountId,\n    private_access_settings_name: d.privateAccessSettingsName,\n    region: d.region,\n    public_access_enabled: d.publicAccessEnabled,\n    private_access_level: d.privateAccessLevel,\n    allowed_vpc_endpoint_ids: d.allowedVpcEndpointIds,\n  }));\n\nexport const marshalCreatePrivateEndpointRuleSchema: z.ZodType = z\n  .object({\n    ruleId: z.string().optional(),\n    networkConnectivityConfigId: z.string().optional(),\n    connectionState: z.string().optional(),\n    domainNames: z.array(z.string()).optional(),\n    creationTime: z.bigint().optional(),\n    updatedTime: z.bigint().optional(),\n    deactivated: z.boolean().optional(),\n    deactivatedAt: z.bigint().optional(),\n    errorMessage: z.string().optional(),\n    resourceId: z.string().optional(),\n    groupId: z.string().optional(),\n    endpointName: z.string().optional(),\n    accountId: z.string().optional(),\n    endpointService: z.string().optional(),\n    resourceNames: z.array(z.string()).optional(),\n    vpcEndpointId: z.string().optional(),\n    enabled: z.boolean().optional(),\n    endpoint: z\n      .discriminatedUnion('$case', [\n        z.object({\n          $case: z.literal('gcpEndpoint'),\n          gcpEndpoint: z.lazy(() => marshalGcpEndpointSchema),\n        }),\n      ])\n      .optional(),\n  })\n  .transform(d => ({\n    rule_id: d.ruleId,\n    network_connectivity_config_id: d.networkConnectivityConfigId,\n    connection_state: d.connectionState,\n    domain_names: d.domainNames,\n    creation_time: d.creationTime,\n    updated_time: d.updatedTime,\n    deactivated: d.deactivated,\n    deactivated_at: d.deactivatedAt,\n    error_message: d.errorMessage,\n    resource_id: d.resourceId,\n    group_id: d.groupId,\n    endpoint_name: d.endpointName,\n    account_id: d.accountId,\n    endpoint_service: d.endpointService,\n    resource_names: d.resourceNames,\n    vpc_endpoint_id: d.vpcEndpointId,\n    enabled: d.enabled,\n    ...(d.endpoint?.$case === 'gcpEndpoint' && {\n      gcp_endpoint: d.endpoint.gcpEndpoint,\n    }),\n  }));\n\nexport const marshalCreateVpcEndpointRequestSchema: z.ZodType = z\n  .object({\n    accountId: z.string().optional(),\n    vpcEndpointName: z.string().optional(),\n    region: z.string().optional(),\n    awsVpcEndpointId: z.string().optional(),\n    vpcEndpointInfo: z\n      .discriminatedUnion('$case', [\n        z.object({\n          $case: z.literal('gcpVpcEndpointInfo'),\n          gcpVpcEndpointInfo: z.lazy(() => marshalGcpVpcEndpointInfoSchema),\n        }),\n      ])\n      .optional(),\n  })\n  .transform(d => ({\n    account_id: d.accountId,\n    vpc_endpoint_name: d.vpcEndpointName,\n    region: d.region,\n    aws_vpc_endpoint_id: d.awsVpcEndpointId,\n    ...(d.vpcEndpointInfo?.$case === 'gcpVpcEndpointInfo' && {\n      gcp_vpc_endpoint_info: d.vpcEndpointInfo.gcpVpcEndpointInfo,\n    }),\n  }));\n\nexport const marshalCustomerFacingNetworkConnectivityConfigEgressConfigSchema: z.ZodType =\n  z\n    .object({\n      defaultRules: z\n        .lazy(\n          () => marshalNetworkConnectivityConfigEgressConfig_DefaultRuleSchema\n        )\n        .optional(),\n      targetRules: z\n        .lazy(\n          () =>\n            marshalCustomerFacingNetworkConnectivityConfigEgressConfig_CustomerFacingTargetRuleSchema\n        )\n        .optional(),\n    })\n    .transform(d => ({\n      default_rules: d.defaultRules,\n      target_rules: d.targetRules,\n    }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const marshalCustomerFacingNetworkConnectivityConfigEgressConfig_CustomerFacingTargetRuleSchema: z.ZodType =\n  z\n    .object({\n      azurePrivateEndpointRules: z\n        .array(\n          z.lazy(\n            () => marshalNetworkConnectivityConfigAzurePrivateEndpointRuleSchema\n          )\n        )\n        .optional(),\n      awsPrivateEndpointRules: z\n        .array(\n          z.lazy(\n            () => marshalNetworkConnectivityConfigAwsPrivateEndpointRuleSchema\n          )\n        )\n        .optional(),\n    })\n    .transform(d => ({\n      azure_private_endpoint_rules: d.azurePrivateEndpointRules,\n      aws_private_endpoint_rules: d.awsPrivateEndpointRules,\n    }));\n\nexport const marshalEgressNetworkPolicySchema: z.ZodType = z\n  .object({\n    networkAccess: z\n      .lazy(() => marshalEgressNetworkPolicy_NetworkAccessPolicySchema)\n      .optional(),\n  })\n  .transform(d => ({\n    network_access: d.networkAccess,\n  }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const marshalEgressNetworkPolicy_NetworkAccessPolicySchema: z.ZodType = z\n  .object({\n    restrictionMode: z.string().optional(),\n    allowedInternetDestinations: z\n      .array(\n        z.lazy(\n          () =>\n            marshalEgressNetworkPolicy_NetworkAccessPolicy_InternetDestinationSchema\n        )\n      )\n      .optional(),\n    allowedStorageDestinations: z\n      .array(\n        z.lazy(\n          () =>\n            marshalEgressNetworkPolicy_NetworkAccessPolicy_StorageDestinationSchema\n        )\n      )\n      .optional(),\n    policyEnforcement: z\n      .lazy(\n        () =>\n          marshalEgressNetworkPolicy_NetworkAccessPolicy_PolicyEnforcementSchema\n      )\n      .optional(),\n    blockedInternetDestinations: z\n      .array(\n        z.lazy(\n          () =>\n            marshalEgressNetworkPolicy_NetworkAccessPolicy_InternetDestinationSchema\n        )\n      )\n      .optional(),\n    allowedDatabricksDestinations: z\n      .array(\n        z.lazy(\n          () =>\n            marshalEgressNetworkPolicy_NetworkAccessPolicy_DatabricksDestinationSchema\n        )\n      )\n      .optional(),\n  })\n  .transform(d => ({\n    restriction_mode: d.restrictionMode,\n    allowed_internet_destinations: d.allowedInternetDestinations,\n    allowed_storage_destinations: d.allowedStorageDestinations,\n    policy_enforcement: d.policyEnforcement,\n    blocked_internet_destinations: d.blockedInternetDestinations,\n    allowed_databricks_destinations: d.allowedDatabricksDestinations,\n  }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const marshalEgressNetworkPolicy_NetworkAccessPolicy_DatabricksDestinationSchema: z.ZodType =\n  z\n    .object({\n      workspaceIds: z.array(z.bigint()).optional(),\n    })\n    .transform(d => ({\n      workspace_ids: d.workspaceIds,\n    }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const marshalEgressNetworkPolicy_NetworkAccessPolicy_InternetDestinationSchema: z.ZodType =\n  z\n    .object({\n      destination: z.string().optional(),\n      internetDestinationType: z.string().optional(),\n    })\n    .transform(d => ({\n      destination: d.destination,\n      internet_destination_type: d.internetDestinationType,\n    }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const marshalEgressNetworkPolicy_NetworkAccessPolicy_PolicyEnforcementSchema: z.ZodType =\n  z\n    .object({\n      enforcementMode: z.string().optional(),\n      dryRunModeProductFilter: z.array(z.string()).optional(),\n    })\n    .transform(d => ({\n      enforcement_mode: d.enforcementMode,\n      dry_run_mode_product_filter: d.dryRunModeProductFilter,\n    }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const marshalEgressNetworkPolicy_NetworkAccessPolicy_StorageDestinationSchema: z.ZodType =\n  z\n    .object({\n      bucketName: z.string().optional(),\n      region: z.string().optional(),\n      storageDestinationType: z.string().optional(),\n      azureStorageAccount: z.string().optional(),\n      azureStorageService: z.string().optional(),\n    })\n    .transform(d => ({\n      bucket_name: d.bucketName,\n      region: d.region,\n      storage_destination_type: d.storageDestinationType,\n      azure_storage_account: d.azureStorageAccount,\n      azure_storage_service: d.azureStorageService,\n    }));\n\nexport const marshalEndpointSchema: z.ZodType = z\n  .object({\n    name: z.string().optional(),\n    endpointId: z.string().optional(),\n    accountId: z.string().optional(),\n    displayName: z.string().optional(),\n    useCase: z.string().optional(),\n    region: z.string().optional(),\n    state: z.string().optional(),\n    endpointInfo: z\n      .discriminatedUnion('$case', [\n        z.object({\n          $case: z.literal('azurePrivateEndpointInfo'),\n          azurePrivateEndpointInfo: z.lazy(\n            () => marshalAzurePrivateEndpointInfoSchema\n          ),\n        }),\n        z.object({\n          $case: z.literal('awsVpcEndpointInfo'),\n          awsVpcEndpointInfo: z.lazy(() => marshalAwsVpcEndpointInfoSchema),\n        }),\n        z.object({\n          $case: z.literal('gcpPscEndpointInfo'),\n          gcpPscEndpointInfo: z.lazy(() => marshalGcpPscEndpointInfoSchema),\n        }),\n      ])\n      .optional(),\n    createTime: z\n      .any()\n      .transform((d: Temporal.Instant) => d.toString())\n      .optional(),\n  })\n  .transform(d => ({\n    name: d.name,\n    endpoint_id: d.endpointId,\n    account_id: d.accountId,\n    display_name: d.displayName,\n    use_case: d.useCase,\n    region: d.region,\n    state: d.state,\n    ...(d.endpointInfo?.$case === 'azurePrivateEndpointInfo' && {\n      azure_private_endpoint_info: d.endpointInfo.azurePrivateEndpointInfo,\n    }),\n    ...(d.endpointInfo?.$case === 'awsVpcEndpointInfo' && {\n      aws_vpc_endpoint_info: d.endpointInfo.awsVpcEndpointInfo,\n    }),\n    ...(d.endpointInfo?.$case === 'gcpPscEndpointInfo' && {\n      gcp_psc_endpoint_info: d.endpointInfo.gcpPscEndpointInfo,\n    }),\n    create_time: d.createTime,\n  }));\n\nexport const marshalGcpEndpointSchema: z.ZodType = z\n  .object({\n    pscEndpointUri: z.string().optional(),\n    targetServices: z\n      .discriminatedUnion('$case', [\n        z.object({\n          $case: z.literal('serviceAttachment'),\n          serviceAttachment: z.string(),\n        }),\n        z.object({\n          $case: z.literal('googleApiEndpoints'),\n          googleApiEndpoints: z.lazy(() => marshalGoogleApiEndpointsSchema),\n        }),\n        z.object({\n          $case: z.literal('allVpcScServices'),\n          allVpcScServices: z.boolean(),\n        }),\n      ])\n      .optional(),\n  })\n  .transform(d => ({\n    psc_endpoint_uri: d.pscEndpointUri,\n    ...(d.targetServices?.$case === 'serviceAttachment' && {\n      service_attachment: d.targetServices.serviceAttachment,\n    }),\n    ...(d.targetServices?.$case === 'googleApiEndpoints' && {\n      google_api_endpoints: d.targetServices.googleApiEndpoints,\n    }),\n    ...(d.targetServices?.$case === 'allVpcScServices' && {\n      all_vpc_sc_services: d.targetServices.allVpcScServices,\n    }),\n  }));\n\nexport const marshalGcpNetworkInfoSchema: z.ZodType = z\n  .object({\n    networkProjectId: z.string().optional(),\n    vpcId: z.string().optional(),\n    subnetId: z.string().optional(),\n    subnetRegion: z.string().optional(),\n    podIpRangeName: z.string().optional(),\n    serviceIpRangeName: z.string().optional(),\n  })\n  .transform(d => ({\n    network_project_id: d.networkProjectId,\n    vpc_id: d.vpcId,\n    subnet_id: d.subnetId,\n    subnet_region: d.subnetRegion,\n    pod_ip_range_name: d.podIpRangeName,\n    service_ip_range_name: d.serviceIpRangeName,\n  }));\n\nexport const marshalGcpPscEndpointInfoSchema: z.ZodType = z\n  .object({\n    pscConnectionId: z.string().optional(),\n    projectId: z.string().optional(),\n    pscEndpoint: z.string().optional(),\n    endpointRegion: z.string().optional(),\n    serviceAttachmentId: z.string().optional(),\n  })\n  .transform(d => ({\n    psc_connection_id: d.pscConnectionId,\n    project_id: d.projectId,\n    psc_endpoint: d.pscEndpoint,\n    endpoint_region: d.endpointRegion,\n    service_attachment_id: d.serviceAttachmentId,\n  }));\n\nexport const marshalGcpVpcEndpointInfoSchema: z.ZodType = z\n  .object({\n    pscConnectionId: z.string().optional(),\n    projectId: z.string().optional(),\n    pscEndpointName: z.string().optional(),\n    endpointRegion: z.string().optional(),\n    serviceAttachmentId: z.string().optional(),\n  })\n  .transform(d => ({\n    psc_connection_id: d.pscConnectionId,\n    project_id: d.projectId,\n    psc_endpoint_name: d.pscEndpointName,\n    endpoint_region: d.endpointRegion,\n    service_attachment_id: d.serviceAttachmentId,\n  }));\n\nexport const marshalGoogleApiEndpointsSchema: z.ZodType = z\n  .object({\n    endpoints: z.array(z.string()).optional(),\n  })\n  .transform(d => ({\n    endpoints: d.endpoints,\n  }));\n\nexport const marshalIngressNetworkPolicySchema: z.ZodType = z\n  .object({\n    publicAccess: z\n      .lazy(() => marshalIngressNetworkPolicy_PublicAccessSchema)\n      .optional(),\n    privateAccess: z\n      .lazy(() => marshalIngressNetworkPolicy_PrivateAccessSchema)\n      .optional(),\n    crossWorkspaceAccess: z\n      .lazy(() => marshalIngressNetworkPolicy_CrossWorkspaceAccessSchema)\n      .optional(),\n  })\n  .transform(d => ({\n    public_access: d.publicAccess,\n    private_access: d.privateAccess,\n    cross_workspace_access: d.crossWorkspaceAccess,\n  }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const marshalIngressNetworkPolicy_AccountApiDestinationSchema: z.ZodType =\n  z\n    .object({\n      scopes: z.array(z.string()).optional(),\n      scopeQualifier: z.string().optional(),\n    })\n    .transform(d => ({\n      scopes: d.scopes,\n      scope_qualifier: d.scopeQualifier,\n    }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const marshalIngressNetworkPolicy_AccountDatabricksOneDestinationSchema: z.ZodType =\n  z\n    .object({\n      allDestinations: z.boolean().optional(),\n    })\n    .transform(d => ({\n      all_destinations: d.allDestinations,\n    }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const marshalIngressNetworkPolicy_AccountUiDestinationSchema: z.ZodType =\n  z\n    .object({\n      allDestinations: z.boolean().optional(),\n    })\n    .transform(d => ({\n      all_destinations: d.allDestinations,\n    }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const marshalIngressNetworkPolicy_AppsRuntimeDestinationSchema: z.ZodType =\n  z\n    .object({\n      allDestinations: z.boolean().optional(),\n    })\n    .transform(d => ({\n      all_destinations: d.allDestinations,\n    }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const marshalIngressNetworkPolicy_AuthenticationSchema: z.ZodType = z\n  .object({\n    identityType: z.string().optional(),\n    identities: z\n      .array(\n        z.lazy(() => marshalIngressNetworkPolicy_AuthenticationIdentitySchema)\n      )\n      .optional(),\n  })\n  .transform(d => ({\n    identity_type: d.identityType,\n    identities: d.identities,\n  }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const marshalIngressNetworkPolicy_AuthenticationIdentitySchema: z.ZodType =\n  z\n    .object({\n      principalType: z.string().optional(),\n      principalId: z.bigint().optional(),\n    })\n    .transform(d => ({\n      principal_type: d.principalType,\n      principal_id: d.principalId,\n    }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const marshalIngressNetworkPolicy_CrossWorkspaceAccessSchema: z.ZodType =\n  z\n    .object({\n      restrictionMode: z.string().optional(),\n      denyRules: z\n        .array(\n          z.lazy(\n            () => marshalIngressNetworkPolicy_CrossWorkspaceIngressRuleSchema\n          )\n        )\n        .optional(),\n      allowRules: z\n        .array(\n          z.lazy(\n            () => marshalIngressNetworkPolicy_CrossWorkspaceIngressRuleSchema\n          )\n        )\n        .optional(),\n    })\n    .transform(d => ({\n      restriction_mode: d.restrictionMode,\n      deny_rules: d.denyRules,\n      allow_rules: d.allowRules,\n    }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const marshalIngressNetworkPolicy_CrossWorkspaceIngressRuleSchema: z.ZodType =\n  z\n    .object({\n      origin: z\n        .lazy(\n          () => marshalIngressNetworkPolicy_CrossWorkspaceRequestOriginSchema\n        )\n        .optional(),\n      destination: z\n        .lazy(() => marshalIngressNetworkPolicy_RequestDestinationSchema)\n        .optional(),\n      authentication: z\n        .lazy(() => marshalIngressNetworkPolicy_AuthenticationSchema)\n        .optional(),\n      label: z.string().optional(),\n    })\n    .transform(d => ({\n      origin: d.origin,\n      destination: d.destination,\n      authentication: d.authentication,\n      label: d.label,\n    }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const marshalIngressNetworkPolicy_CrossWorkspaceRequestOriginSchema: z.ZodType =\n  z\n    .object({\n      source: z\n        .discriminatedUnion('$case', [\n          z.object({\n            $case: z.literal('allSourceWorkspaces'),\n            allSourceWorkspaces: z.boolean(),\n          }),\n          z.object({\n            $case: z.literal('selectedWorkspaces'),\n            selectedWorkspaces: z.lazy(\n              () => marshalIngressNetworkPolicy_WorkspaceIdListSchema\n            ),\n          }),\n        ])\n        .optional(),\n    })\n    .transform(d => ({\n      ...(d.source?.$case === 'allSourceWorkspaces' && {\n        all_source_workspaces: d.source.allSourceWorkspaces,\n      }),\n      ...(d.source?.$case === 'selectedWorkspaces' && {\n        selected_workspaces: d.source.selectedWorkspaces,\n      }),\n    }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const marshalIngressNetworkPolicy_EndpointsSchema: z.ZodType = z\n  .object({\n    endpointIds: z.array(z.string()).optional(),\n  })\n  .transform(d => ({\n    endpoint_ids: d.endpointIds,\n  }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const marshalIngressNetworkPolicy_IpRangesSchema: z.ZodType = z\n  .object({\n    ipRanges: z.array(z.string()).optional(),\n  })\n  .transform(d => ({\n    ip_ranges: d.ipRanges,\n  }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const marshalIngressNetworkPolicy_LakebaseRuntimeDestinationSchema: z.ZodType =\n  z\n    .object({\n      allDestinations: z.boolean().optional(),\n    })\n    .transform(d => ({\n      all_destinations: d.allDestinations,\n    }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const marshalIngressNetworkPolicy_PrivateAccessSchema: z.ZodType = z\n  .object({\n    restrictionMode: z.string().optional(),\n    denyRules: z\n      .array(z.lazy(() => marshalIngressNetworkPolicy_PrivateIngressRuleSchema))\n      .optional(),\n    allowRules: z\n      .array(z.lazy(() => marshalIngressNetworkPolicy_PrivateIngressRuleSchema))\n      .optional(),\n  })\n  .transform(d => ({\n    restriction_mode: d.restrictionMode,\n    deny_rules: d.denyRules,\n    allow_rules: d.allowRules,\n  }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const marshalIngressNetworkPolicy_PrivateIngressRuleSchema: z.ZodType = z\n  .object({\n    origin: z\n      .lazy(() => marshalIngressNetworkPolicy_PrivateRequestOriginSchema)\n      .optional(),\n    destination: z\n      .lazy(() => marshalIngressNetworkPolicy_RequestDestinationSchema)\n      .optional(),\n    authentication: z\n      .lazy(() => marshalIngressNetworkPolicy_AuthenticationSchema)\n      .optional(),\n    label: z.string().optional(),\n  })\n  .transform(d => ({\n    origin: d.origin,\n    destination: d.destination,\n    authentication: d.authentication,\n    label: d.label,\n  }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const marshalIngressNetworkPolicy_PrivateRequestOriginSchema: z.ZodType =\n  z\n    .object({\n      source: z\n        .discriminatedUnion('$case', [\n          z.object({\n            $case: z.literal('endpoints'),\n            endpoints: z.lazy(\n              () => marshalIngressNetworkPolicy_EndpointsSchema\n            ),\n          }),\n          z.object({\n            $case: z.literal('allRegisteredEndpoints'),\n            allRegisteredEndpoints: z.boolean(),\n          }),\n          z.object({\n            $case: z.literal('azureWorkspacePrivateLink'),\n            azureWorkspacePrivateLink: z.boolean(),\n          }),\n          z.object({\n            $case: z.literal('allPrivateAccess'),\n            allPrivateAccess: z.boolean(),\n          }),\n        ])\n        .optional(),\n    })\n    .transform(d => ({\n      ...(d.source?.$case === 'endpoints' && {endpoints: d.source.endpoints}),\n      ...(d.source?.$case === 'allRegisteredEndpoints' && {\n        all_registered_endpoints: d.source.allRegisteredEndpoints,\n      }),\n      ...(d.source?.$case === 'azureWorkspacePrivateLink' && {\n        azure_workspace_private_link: d.source.azureWorkspacePrivateLink,\n      }),\n      ...(d.source?.$case === 'allPrivateAccess' && {\n        all_private_access: d.source.allPrivateAccess,\n      }),\n    }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const marshalIngressNetworkPolicy_PublicAccessSchema: z.ZodType = z\n  .object({\n    restrictionMode: z.string().optional(),\n    denyRules: z\n      .array(z.lazy(() => marshalIngressNetworkPolicy_PublicIngressRuleSchema))\n      .optional(),\n    allowRules: z\n      .array(z.lazy(() => marshalIngressNetworkPolicy_PublicIngressRuleSchema))\n      .optional(),\n  })\n  .transform(d => ({\n    restriction_mode: d.restrictionMode,\n    deny_rules: d.denyRules,\n    allow_rules: d.allowRules,\n  }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const marshalIngressNetworkPolicy_PublicIngressRuleSchema: z.ZodType = z\n  .object({\n    origin: z\n      .lazy(() => marshalIngressNetworkPolicy_PublicRequestOriginSchema)\n      .optional(),\n    destination: z\n      .lazy(() => marshalIngressNetworkPolicy_RequestDestinationSchema)\n      .optional(),\n    authentication: z\n      .lazy(() => marshalIngressNetworkPolicy_AuthenticationSchema)\n      .optional(),\n    label: z.string().optional(),\n  })\n  .transform(d => ({\n    origin: d.origin,\n    destination: d.destination,\n    authentication: d.authentication,\n    label: d.label,\n  }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const marshalIngressNetworkPolicy_PublicRequestOriginSchema: z.ZodType =\n  z\n    .object({\n      source: z\n        .discriminatedUnion('$case', [\n          z.object({$case: z.literal('allIpRanges'), allIpRanges: z.boolean()}),\n          z.object({\n            $case: z.literal('includedIpRanges'),\n            includedIpRanges: z.lazy(\n              () => marshalIngressNetworkPolicy_IpRangesSchema\n            ),\n          }),\n          z.object({\n            $case: z.literal('excludedIpRanges'),\n            excludedIpRanges: z.lazy(\n              () => marshalIngressNetworkPolicy_IpRangesSchema\n            ),\n          }),\n        ])\n        .optional(),\n    })\n    .transform(d => ({\n      ...(d.source?.$case === 'allIpRanges' && {\n        all_ip_ranges: d.source.allIpRanges,\n      }),\n      ...(d.source?.$case === 'includedIpRanges' && {\n        included_ip_ranges: d.source.includedIpRanges,\n      }),\n      ...(d.source?.$case === 'excludedIpRanges' && {\n        excluded_ip_ranges: d.source.excludedIpRanges,\n      }),\n    }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const marshalIngressNetworkPolicy_RequestDestinationSchema: z.ZodType = z\n  .object({\n    allDestinations: z.boolean().optional(),\n    workspaceUi: z\n      .lazy(() => marshalIngressNetworkPolicy_WorkspaceUiDestinationSchema)\n      .optional(),\n    workspaceApi: z\n      .lazy(() => marshalIngressNetworkPolicy_WorkspaceApiDestinationSchema)\n      .optional(),\n    appsRuntime: z\n      .lazy(() => marshalIngressNetworkPolicy_AppsRuntimeDestinationSchema)\n      .optional(),\n    lakebaseRuntime: z\n      .lazy(() => marshalIngressNetworkPolicy_LakebaseRuntimeDestinationSchema)\n      .optional(),\n    accountUi: z\n      .lazy(() => marshalIngressNetworkPolicy_AccountUiDestinationSchema)\n      .optional(),\n    accountApi: z\n      .lazy(() => marshalIngressNetworkPolicy_AccountApiDestinationSchema)\n      .optional(),\n    accountDatabricksOne: z\n      .lazy(\n        () => marshalIngressNetworkPolicy_AccountDatabricksOneDestinationSchema\n      )\n      .optional(),\n  })\n  .transform(d => ({\n    all_destinations: d.allDestinations,\n    workspace_ui: d.workspaceUi,\n    workspace_api: d.workspaceApi,\n    apps_runtime: d.appsRuntime,\n    lakebase_runtime: d.lakebaseRuntime,\n    account_ui: d.accountUi,\n    account_api: d.accountApi,\n    account_databricks_one: d.accountDatabricksOne,\n  }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const marshalIngressNetworkPolicy_WorkspaceApiDestinationSchema: z.ZodType =\n  z\n    .object({\n      scopes: z.array(z.string()).optional(),\n      scopeQualifier: z.string().optional(),\n    })\n    .transform(d => ({\n      scopes: d.scopes,\n      scope_qualifier: d.scopeQualifier,\n    }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const marshalIngressNetworkPolicy_WorkspaceIdListSchema: z.ZodType = z\n  .object({\n    workspaceIds: z.array(z.bigint()).optional(),\n  })\n  .transform(d => ({\n    workspace_ids: d.workspaceIds,\n  }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const marshalIngressNetworkPolicy_WorkspaceUiDestinationSchema: z.ZodType =\n  z\n    .object({\n      allDestinations: z.boolean().optional(),\n    })\n    .transform(d => ({\n      all_destinations: d.allDestinations,\n    }));\n\nexport const marshalNetworkConnectivityConfigAwsPrivateEndpointRuleSchema: z.ZodType =\n  z\n    .object({\n      ruleId: z.string().optional(),\n      networkConnectivityConfigId: z.string().optional(),\n      accountId: z.string().optional(),\n      endpointService: z.string().optional(),\n      domainNames: z.array(z.string()).optional(),\n      resourceNames: z.array(z.string()).optional(),\n      vpcEndpointId: z.string().optional(),\n      connectionState: z.string().optional(),\n      creationTime: z.bigint().optional(),\n      updatedTime: z.bigint().optional(),\n      deactivated: z.boolean().optional(),\n      deactivatedAt: z.bigint().optional(),\n      enabled: z.boolean().optional(),\n      errorMessage: z.string().optional(),\n    })\n    .transform(d => ({\n      rule_id: d.ruleId,\n      network_connectivity_config_id: d.networkConnectivityConfigId,\n      account_id: d.accountId,\n      endpoint_service: d.endpointService,\n      domain_names: d.domainNames,\n      resource_names: d.resourceNames,\n      vpc_endpoint_id: d.vpcEndpointId,\n      connection_state: d.connectionState,\n      creation_time: d.creationTime,\n      updated_time: d.updatedTime,\n      deactivated: d.deactivated,\n      deactivated_at: d.deactivatedAt,\n      enabled: d.enabled,\n      error_message: d.errorMessage,\n    }));\n\nexport const marshalNetworkConnectivityConfigAzurePrivateEndpointRuleSchema: z.ZodType =\n  z\n    .object({\n      ruleId: z.string().optional(),\n      networkConnectivityConfigId: z.string().optional(),\n      resourceId: z.string().optional(),\n      groupId: z.string().optional(),\n      endpointName: z.string().optional(),\n      connectionState: z.string().optional(),\n      creationTime: z.bigint().optional(),\n      updatedTime: z.bigint().optional(),\n      deactivated: z.boolean().optional(),\n      deactivatedAt: z.bigint().optional(),\n      domainNames: z.array(z.string()).optional(),\n      errorMessage: z.string().optional(),\n    })\n    .transform(d => ({\n      rule_id: d.ruleId,\n      network_connectivity_config_id: d.networkConnectivityConfigId,\n      resource_id: d.resourceId,\n      group_id: d.groupId,\n      endpoint_name: d.endpointName,\n      connection_state: d.connectionState,\n      creation_time: d.creationTime,\n      updated_time: d.updatedTime,\n      deactivated: d.deactivated,\n      deactivated_at: d.deactivatedAt,\n      domain_names: d.domainNames,\n      error_message: d.errorMessage,\n    }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const marshalNetworkConnectivityConfigEgressConfig_DefaultRuleSchema: z.ZodType =\n  z\n    .object({\n      azureServiceEndpointRule: z\n        .lazy(\n          () =>\n            marshalNetworkConnectivityConfigEgressConfig_DefaultRule_AzureServiceEndpointRuleSchema\n        )\n        .optional(),\n      awsStableIpRule: z\n        .lazy(\n          () =>\n            marshalNetworkConnectivityConfigEgressConfig_DefaultRule_AwsStableIpRuleSchema\n        )\n        .optional(),\n    })\n    .transform(d => ({\n      azure_service_endpoint_rule: d.azureServiceEndpointRule,\n      aws_stable_ip_rule: d.awsStableIpRule,\n    }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const marshalNetworkConnectivityConfigEgressConfig_DefaultRule_AwsStableIpRuleSchema: z.ZodType =\n  z\n    .object({\n      cidrBlocks: z.array(z.string()).optional(),\n    })\n    .transform(d => ({\n      cidr_blocks: d.cidrBlocks,\n    }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const marshalNetworkConnectivityConfigEgressConfig_DefaultRule_AzureServiceEndpointRuleSchema: z.ZodType =\n  z\n    .object({\n      targetRegion: z.string().optional(),\n      targetServices: z.array(z.string()).optional(),\n      subnets: z.array(z.string()).optional(),\n    })\n    .transform(d => ({\n      target_region: d.targetRegion,\n      target_services: d.targetServices,\n      subnets: d.subnets,\n    }));\n\nexport const marshalNetworkVpcEndpointsSchema: z.ZodType = z\n  .object({\n    restApi: z.array(z.string()).optional(),\n    dataplaneRelay: z.array(z.string()).optional(),\n  })\n  .transform(d => ({\n    rest_api: d.restApi,\n    dataplane_relay: d.dataplaneRelay,\n  }));\n\nexport const marshalPrivateAccessSettingsSchema: z.ZodType = z\n  .object({\n    privateAccessSettingsId: z.string().optional(),\n    accountId: z.string().optional(),\n    privateAccessSettingsName: z.string().optional(),\n    region: z.string().optional(),\n    publicAccessEnabled: z.boolean().optional(),\n    privateAccessLevel: z.string().optional(),\n    allowedVpcEndpointIds: z.array(z.string()).optional(),\n  })\n  .transform(d => ({\n    private_access_settings_id: d.privateAccessSettingsId,\n    account_id: d.accountId,\n    private_access_settings_name: d.privateAccessSettingsName,\n    region: d.region,\n    public_access_enabled: d.publicAccessEnabled,\n    private_access_level: d.privateAccessLevel,\n    allowed_vpc_endpoint_ids: d.allowedVpcEndpointIds,\n  }));\n\nexport const marshalReplaceAccountIpAccessListRequestSchema: z.ZodType = z\n  .object({\n    accountId: z.string().optional(),\n    listId: z.string().optional(),\n    label: z.string().optional(),\n    listType: z.string().optional(),\n    ipAddresses: z.array(z.string()).optional(),\n    enabled: z.boolean().optional(),\n  })\n  .transform(d => ({\n    account_id: d.accountId,\n    list_id: d.listId,\n    label: d.label,\n    list_type: d.listType,\n    ip_addresses: d.ipAddresses,\n    enabled: d.enabled,\n  }));\n\nexport const marshalReplaceIpAccessListRequestSchema: z.ZodType = z\n  .object({\n    listId: z.string().optional(),\n    label: z.string().optional(),\n    listType: z.string().optional(),\n    ipAddresses: z.array(z.string()).optional(),\n    enabled: z.boolean().optional(),\n  })\n  .transform(d => ({\n    list_id: d.listId,\n    label: d.label,\n    list_type: d.listType,\n    ip_addresses: d.ipAddresses,\n    enabled: d.enabled,\n  }));\n\nexport const marshalUpdateAccountIpAccessListRequestSchema: z.ZodType = z\n  .object({\n    accountId: z.string().optional(),\n    listId: z.string().optional(),\n    label: z.string().optional(),\n    listType: z.string().optional(),\n    ipAddresses: z.array(z.string()).optional(),\n    enabled: z.boolean().optional(),\n  })\n  .transform(d => ({\n    account_id: d.accountId,\n    list_id: d.listId,\n    label: d.label,\n    list_type: d.listType,\n    ip_addresses: d.ipAddresses,\n    enabled: d.enabled,\n  }));\n\nexport const marshalUpdateIpAccessListRequestSchema: z.ZodType = z\n  .object({\n    listId: z.string().optional(),\n    label: z.string().optional(),\n    listType: z.string().optional(),\n    ipAddresses: z.array(z.string()).optional(),\n    enabled: z.boolean().optional(),\n  })\n  .transform(d => ({\n    list_id: d.listId,\n    label: d.label,\n    list_type: d.listType,\n    ip_addresses: d.ipAddresses,\n    enabled: d.enabled,\n  }));\n\nexport const marshalUpdatePrivateEndpointRuleSchema: z.ZodType = z\n  .object({\n    ruleId: z.string().optional(),\n    networkConnectivityConfigId: z.string().optional(),\n    connectionState: z.string().optional(),\n    domainNames: z.array(z.string()).optional(),\n    creationTime: z.bigint().optional(),\n    updatedTime: z.bigint().optional(),\n    deactivated: z.boolean().optional(),\n    deactivatedAt: z.bigint().optional(),\n    errorMessage: z.string().optional(),\n    resourceId: z.string().optional(),\n    groupId: z.string().optional(),\n    endpointName: z.string().optional(),\n    accountId: z.string().optional(),\n    endpointService: z.string().optional(),\n    resourceNames: z.array(z.string()).optional(),\n    vpcEndpointId: z.string().optional(),\n    enabled: z.boolean().optional(),\n    endpoint: z\n      .discriminatedUnion('$case', [\n        z.object({\n          $case: z.literal('gcpEndpoint'),\n          gcpEndpoint: z.lazy(() => marshalGcpEndpointSchema),\n        }),\n      ])\n      .optional(),\n  })\n  .transform(d => ({\n    rule_id: d.ruleId,\n    network_connectivity_config_id: d.networkConnectivityConfigId,\n    connection_state: d.connectionState,\n    domain_names: d.domainNames,\n    creation_time: d.creationTime,\n    updated_time: d.updatedTime,\n    deactivated: d.deactivated,\n    deactivated_at: d.deactivatedAt,\n    error_message: d.errorMessage,\n    resource_id: d.resourceId,\n    group_id: d.groupId,\n    endpoint_name: d.endpointName,\n    account_id: d.accountId,\n    endpoint_service: d.endpointService,\n    resource_names: d.resourceNames,\n    vpc_endpoint_id: d.vpcEndpointId,\n    enabled: d.enabled,\n    ...(d.endpoint?.$case === 'gcpEndpoint' && {\n      gcp_endpoint: d.endpoint.gcpEndpoint,\n    }),\n  }));\n\nexport const marshalWorkspaceNetworkOptionSchema: z.ZodType = z\n  .object({\n    networkPolicyId: z.string().optional(),\n    workspaceId: z.bigint().optional(),\n  })\n  .transform(d => ({\n    network_policy_id: d.networkPolicyId,\n    workspace_id: d.workspaceId,\n  }));\n\nconst gcpEndpointFieldMaskSchema: FieldMaskSchema = {\n  allVpcScServices: {wire: 'all_vpc_sc_services'},\n  googleApiEndpoints: {\n    wire: 'google_api_endpoints',\n    children: () => googleApiEndpointsFieldMaskSchema,\n  },\n  pscEndpointUri: {wire: 'psc_endpoint_uri'},\n  serviceAttachment: {wire: 'service_attachment'},\n};\n\nconst googleApiEndpointsFieldMaskSchema: FieldMaskSchema = {\n  endpoints: {wire: 'endpoints'},\n};\n\nconst updatePrivateEndpointRuleFieldMaskSchema: FieldMaskSchema = {\n  accountId: {wire: 'account_id'},\n  connectionState: {wire: 'connection_state'},\n  creationTime: {wire: 'creation_time'},\n  deactivated: {wire: 'deactivated'},\n  deactivatedAt: {wire: 'deactivated_at'},\n  domainNames: {wire: 'domain_names'},\n  enabled: {wire: 'enabled'},\n  endpointName: {wire: 'endpoint_name'},\n  endpointService: {wire: 'endpoint_service'},\n  errorMessage: {wire: 'error_message'},\n  gcpEndpoint: {\n    wire: 'gcp_endpoint',\n    children: () => gcpEndpointFieldMaskSchema,\n  },\n  groupId: {wire: 'group_id'},\n  networkConnectivityConfigId: {wire: 'network_connectivity_config_id'},\n  resourceId: {wire: 'resource_id'},\n  resourceNames: {wire: 'resource_names'},\n  ruleId: {wire: 'rule_id'},\n  updatedTime: {wire: 'updated_time'},\n  vpcEndpointId: {wire: 'vpc_endpoint_id'},\n};\n\nexport function updatePrivateEndpointRuleFieldMask(\n  ...paths: string[]\n): FieldMask<UpdatePrivateEndpointRule> {\n  return FieldMask.build<UpdatePrivateEndpointRule>(\n    paths,\n    updatePrivateEndpointRuleFieldMaskSchema\n  );\n}\n"],"mappings":";;;;;;;;;;AAaA,MAAa,qBAAqB;CAChC,kCAAkC;CAClC,oBAAoB;CACrB;AAMD,MAAa,gBAAgB;CAE3B,SAAS;CAET,UAAU;CAEV,QAAQ;CAER,cAAc;CACf;;;;;;;AAYD,MAAa,mBAAmB;CAC9B,OAAO;CAEP,OAAO;CACR;AAMD,MAAa,qBAAqB;CAEhC,UAAU;CAEV,SAAS;CACV;AAMD,MAAa,qBAAqB;CAChC,kBAAkB;CAClB,wBAAwB;CAExB,gBAAgB;CACjB;AAMD,MAAa,YAAY;CACvB,OAAO;CACP,QAAQ;CACR,YAAY;CAEZ,QAAQ;CACT;;;;;;;AAYD,MAAa,2CAA2C;CAEtD,OAAO;CAEP,OAAO;CACR;AAOD,MAAa,sFACX;CACE,uCACE;CAEF,UAAU;CACX;;AASH,MAAa,oFACX;CACE,yCACE;CAEF,OAAO;CAEP,YAAY;CACb;AAQH,MAAa,4EACX;CACE,8BAA8B;CAE9B,UAAU;CAEV,SAAS;CACV;;;;;;;AAcH,MAAa,0DAA0D;CACrE,8BAA8B;CAC9B,aAAa;CACb,mBAAmB;CACpB;AAOD,MAAa,oFACX;CACE,sCACE;CAKF,QAAQ;CACR,eAAe;CACf,sBAAsB;CACvB;AAQH,MAAa,kCAAkC,EAE7C,gBAAgB,kBACjB;;;;;;AAYD,MAAa,yCAAyC;CAEpD,0BAA0B;CAE1B,yBAAyB;CAC1B;AAOD,MAAa,mDAAmD;CAC9D,2BAA2B;CAC3B,yBAAyB;CACzB,sCAAsC;CACtC,mCAAmC;CACpC;AAOD,MAAa,4DAA4D;CACvE,4BAA4B;CAC5B,qBAAqB;CACrB,kCAAkC;CACnC;AAOD,MAAa,4DAA4D;CACvE,aAAa;CACb,mBAAmB;CAMnB,aAAa;CACd;;;;;;;;AAcD,MAAa,qDAAqD;CAKhE,gCAAgC;CAKhC,mBAAmB;CACpB;AAOD,MAAa,oDAAoD;CAC/D,aAAa;CACb,mBAAmB;CACpB;AAOD,MAAa,oDAAoD;CAC/D,2CACE;CAEF,aAAa;CAEb,UAAU;CAKV,cAAc;CAEd,SAAS;CAET,SAAS;CAET,UAAU;CAEV,eAAe;CAChB;AAOD,MAAa,6EACX;CACE,2CACE;CAEF,aAAa;CAEb,UAAU;CAKV,cAAc;CAEd,SAAS;CAET,SAAS;CAET,UAAU;CAEV,eAAe;CAChB;AAQH,MAAa,+EACX;CACE,2CACE;CAEF,MAAM;CAEN,aAAa;CAEb,UAAU;CAKV,cAAc;CAEd,SAAS;CAET,SAAS;CAET,UAAU;CAEV,eAAe;CAChB;AAqoDH,MAAa,qCACX,EACG,OAAO;CACN,SAAS,EAAE,QAAQ,CAAC,UAAU;CAC9B,OAAO,EAAE,QAAQ,CAAC,UAAU;CAC5B,cAAc,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CAC5C,eAAe,EAAE,QAAQ,CAAC,UAAU;CACpC,WAAW,EAAE,QAAQ,CAAC,UAAU;CAChC,YAAY,EACT,MAAM;EAAC,EAAE,QAAQ;EAAE,EAAE,QAAQ;EAAE,EAAE,QAAQ;EAAC,CAAC,CAC3C,WAAU,MAAK,OAAO,EAAE,CAAC,CACzB,UAAU;CACb,YAAY,EACT,MAAM;EAAC,EAAE,QAAQ;EAAE,EAAE,QAAQ;EAAE,EAAE,QAAQ;EAAC,CAAC,CAC3C,WAAU,MAAK,OAAO,EAAE,CAAC,CACzB,UAAU;CACb,YAAY,EACT,MAAM;EAAC,EAAE,QAAQ;EAAE,EAAE,QAAQ;EAAE,EAAE,QAAQ;EAAC,CAAC,CAC3C,WAAU,MAAK,OAAO,EAAE,CAAC,CACzB,UAAU;CACb,YAAY,EACT,MAAM;EAAC,EAAE,QAAQ;EAAE,EAAE,QAAQ;EAAE,EAAE,QAAQ;EAAC,CAAC,CAC3C,WAAU,MAAK,OAAO,EAAE,CAAC,CACzB,UAAU;CACb,SAAS,EAAE,SAAS,CAAC,UAAU;CAChC,CAAC,CACD,WAAU,OAAM;CACf,QAAQ,EAAE;CACV,OAAO,EAAE;CACT,aAAa,EAAE;CACf,cAAc,EAAE;CAChB,UAAU,EAAE;CACZ,WAAW,EAAE;CACb,WAAW,EAAE;CACb,WAAW,EAAE;CACb,WAAW,EAAE;CACb,SAAS,EAAE;CACZ,EAAE;AAEP,MAAa,sCACX,EACG,OAAO;CACN,mBAAmB,EAAE,QAAQ,CAAC,UAAU;CACxC,YAAY,EAAE,QAAQ,CAAC,UAAU;CACjC,QAAQ,EAAE,WAAW,mCAAmC,CAAC,UAAU;CACnE,SAAS,EAAE,WAAW,oCAAoC,CAAC,UAAU;CACrE,iBAAiB,EACd,WAAW,oCAAoC,CAC/C,UAAU;CACd,CAAC,CACD,WAAU,OAAM;CACf,iBAAiB,EAAE;CACnB,WAAW,EAAE;CACb,QAAQ,EAAE;CACV,SAAS,EAAE;CACX,eAAe,EAAE;CAClB,EAAE;AAEP,MAAa,oCACX,EACG,OAAO;CACN,qBAAqB,EAAE,QAAQ,CAAC,UAAU;CAC1C,yBAAyB,EAAE,QAAQ,CAAC,UAAU;CAC9C,gBAAgB,EAAE,QAAQ,CAAC,UAAU;CACtC,CAAC,CACD,WAAU,OAAM;CACf,kBAAkB,EAAE;CACpB,sBAAsB,EAAE;CACxB,cAAc,EAAE;CACjB,EAAE;AAEP,MAAa,0CACX,EACG,OAAO;CACN,uBAAuB,EAAE,QAAQ,CAAC,UAAU;CAC5C,gCAAgC,EAAE,QAAQ,CAAC,UAAU;CACrD,8BAA8B,EAAE,QAAQ,CAAC,UAAU;CACnD,yBAAyB,EAAE,QAAQ,CAAC,UAAU;CAC/C,CAAC,CACD,WAAU,OAAM;CACf,qBAAqB,EAAE;CACvB,6BAA6B,EAAE;CAC/B,2BAA2B,EAAE;CAC7B,sBAAsB,EAAE;CACzB,EAAE;AAEP,MAAa,mDACX,EACG,OAAO,EACN,gBAAgB,EACb,WAAW,mCAAmC,CAC9C,UAAU,EACd,CAAC,CACD,WAAU,OAAM,EACf,cAAc,EAAE,gBACjB,EAAE;AAEP,MAAa,4CACX,EACG,OAAO,EACN,gBAAgB,EAAE,WAAW,4BAA4B,CAAC,UAAU,EACrE,CAAC,CACD,WAAU,OAAM,EACf,cAAc,EAAE,gBACjB,EAAE;AAEP,MAAa,qEACX,EACG,OAAO;CACN,eAAe,EACZ,WACO,iEACP,CACA,UAAU;CACb,cAAc,EACX,WAEG,4FACH,CACA,UAAU;CACd,CAAC,CACD,WAAU,OAAM;CACf,cAAc,EAAE;CAChB,aAAa,EAAE;CAChB,EAAE;AAGP,MAAa,8FACX,EACG,OAAO;CACN,8BAA8B,EAC3B,MACC,EAAE,WAEE,iEACH,CACF,CACA,UAAU;CACb,4BAA4B,EACzB,MACC,EAAE,WACM,+DACP,CACF,CACA,UAAU;CACd,CAAC,CACD,WAAU,OAAM;CACf,2BAA2B,EAAE;CAC7B,yBAAyB,EAAE;CAC5B,EAAE;AAEP,MAAa,mDACX,EAAE,OAAO,EAAE,CAAC;AAEd,MAAa,4CACX,EAAE,OAAO,EAAE,CAAC;AAEd,MAAa,qCACX,EACG,OAAO,EACN,gBAAgB,EACb,WAAW,uDAAuD,CAClE,UAAU,EACd,CAAC,CACD,WAAU,OAAM,EACf,eAAe,EAAE,gBAClB,EAAE;AAGP,MAAa,yDACX,EACG,OAAO;CACN,kBAAkB,EAAE,QAAQ,CAAC,UAAU;CACvC,+BAA+B,EAC5B,MACC,EAAE,WAEE,2EACH,CACF,CACA,UAAU;CACb,8BAA8B,EAC3B,MACC,EAAE,WAEE,0EACH,CACF,CACA,UAAU;CACb,oBAAoB,EACjB,WAEG,yEACH,CACA,UAAU;CACb,+BAA+B,EAC5B,MACC,EAAE,WAEE,2EACH,CACF,CACA,UAAU;CACb,iCAAiC,EAC9B,MACC,EAAE,WAEE,6EACH,CACF,CACA,UAAU;CACd,CAAC,CACD,WAAU,OAAM;CACf,iBAAiB,EAAE;CACnB,6BAA6B,EAAE;CAC/B,4BAA4B,EAAE;CAC9B,mBAAmB,EAAE;CACrB,6BAA6B,EAAE;CAC/B,+BAA+B,EAAE;CAClC,EAAE;AAGP,MAAa,+EACX,EACG,OAAO,EACN,eAAe,EACZ,MACC,EACG,MAAM;CAAC,EAAE,QAAQ;CAAE,EAAE,QAAQ;CAAE,EAAE,QAAQ;CAAC,CAAC,CAC3C,WAAU,MAAK,OAAO,EAAE,CAAC,CAC7B,CACA,UAAU,EACd,CAAC,CACD,WAAU,OAAM,EACf,cAAc,EAAE,eACjB,EAAE;AAGP,MAAa,6EACX,EACG,OAAO;CACN,aAAa,EAAE,QAAQ,CAAC,UAAU;CAClC,2BAA2B,EAAE,QAAQ,CAAC,UAAU;CACjD,CAAC,CACD,WAAU,OAAM;CACf,aAAa,EAAE;CACf,yBAAyB,EAAE;CAC5B,EAAE;AAGP,MAAa,2EACX,EACG,OAAO;CACN,kBAAkB,EAAE,QAAQ,CAAC,UAAU;CACvC,6BAA6B,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CAC5D,CAAC,CACD,WAAU,OAAM;CACf,iBAAiB,EAAE;CACnB,yBAAyB,EAAE;CAC5B,EAAE;AAGP,MAAa,4EACX,EACG,OAAO;CACN,aAAa,EAAE,QAAQ,CAAC,UAAU;CAClC,QAAQ,EAAE,QAAQ,CAAC,UAAU;CAC7B,0BAA0B,EAAE,QAAQ,CAAC,UAAU;CAC/C,uBAAuB,EAAE,QAAQ,CAAC,UAAU;CAC5C,uBAAuB,EAAE,QAAQ,CAAC,UAAU;CAC7C,CAAC,CACD,WAAU,OAAM;CACf,YAAY,EAAE;CACd,QAAQ,EAAE;CACV,wBAAwB,EAAE;CAC1B,qBAAqB,EAAE;CACvB,qBAAqB,EAAE;CACxB,EAAE;AAEP,MAAa,0BAA+C,EACzD,OAAO;CACN,MAAM,EAAE,QAAQ,CAAC,UAAU;CAC3B,aAAa,EAAE,QAAQ,CAAC,UAAU;CAClC,YAAY,EAAE,QAAQ,CAAC,UAAU;CACjC,cAAc,EAAE,QAAQ,CAAC,UAAU;CACnC,UAAU,EAAE,QAAQ,CAAC,UAAU;CAC/B,QAAQ,EAAE,QAAQ,CAAC,UAAU;CAC7B,OAAO,EAAE,QAAQ,CAAC,UAAU;CAC5B,6BAA6B,EAC1B,WAAW,wCAAwC,CACnD,UAAU;CACb,uBAAuB,EACpB,WAAW,kCAAkC,CAC7C,UAAU;CACb,uBAAuB,EACpB,WAAW,kCAAkC,CAC7C,UAAU;CACb,aAAa,EACV,QAAQ,CACR,WAAU,MAAK,SAAS,QAAQ,KAAK,EAAE,CAAC,CACxC,UAAU;CACd,CAAC,CACD,WAAU,OAAM;CACf,MAAM,EAAE;CACR,YAAY,EAAE;CACd,WAAW,EAAE;CACb,aAAa,EAAE;CACf,SAAS,EAAE;CACX,QAAQ,EAAE;CACV,OAAO,EAAE;CACT,cACE,EAAE,gCAAgC,SAC9B;EACE,OAAO;EACP,0BAA0B,EAAE;EAC7B,GACD,EAAE,0BAA0B,SAC1B;EACE,OAAO;EACP,oBAAoB,EAAE;EACvB,GACD,EAAE,0BAA0B,SAC1B;EACE,OAAO;EACP,oBAAoB,EAAE;EACvB,GACD;CACV,YAAY,EAAE;CACf,EAAE;AAEL,MAAa,6BAAqD,EAC/D,OAAO;CACN,kBAAkB,EAAE,QAAQ,CAAC,UAAU;CACvC,oBAAoB,EAAE,QAAQ,CAAC,UAAU;CACzC,sBAAsB,EACnB,WAAW,kCAAkC,CAC7C,UAAU;CACb,qBAAqB,EAAE,SAAS,CAAC,UAAU;CAC5C,CAAC,CACD,WAAU,OAAM;CACf,gBAAgB,EAAE;CAClB,gBACE,EAAE,uBAAuB,SACrB;EACE,OAAO;EACP,mBAAmB,EAAE;EACtB,GACD,EAAE,yBAAyB,SACzB;EACE,OAAO;EACP,oBAAoB,EAAE;EACvB,GACD,EAAE,wBAAwB,SACxB;EACE,OAAO;EACP,kBAAkB,EAAE;EACrB,GACD;CACX,EAAE;AAEL,MAAa,gCAA2D,EACrE,OAAO;CACN,oBAAoB,EAAE,QAAQ,CAAC,UAAU;CACzC,QAAQ,EAAE,QAAQ,CAAC,UAAU;CAC7B,WAAW,EAAE,QAAQ,CAAC,UAAU;CAChC,eAAe,EAAE,QAAQ,CAAC,UAAU;CACpC,mBAAmB,EAAE,QAAQ,CAAC,UAAU;CACxC,uBAAuB,EAAE,QAAQ,CAAC,UAAU;CAC7C,CAAC,CACD,WAAU,OAAM;CACf,kBAAkB,EAAE;CACpB,OAAO,EAAE;CACT,UAAU,EAAE;CACZ,cAAc,EAAE;CAChB,gBAAgB,EAAE;CAClB,oBAAoB,EAAE;CACvB,EAAE;AAEL,MAAa,oCACX,EACG,OAAO;CACN,mBAAmB,EAAE,QAAQ,CAAC,UAAU;CACxC,YAAY,EAAE,QAAQ,CAAC,UAAU;CACjC,cAAc,EAAE,QAAQ,CAAC,UAAU;CACnC,iBAAiB,EAAE,QAAQ,CAAC,UAAU;CACtC,uBAAuB,EAAE,QAAQ,CAAC,UAAU;CAC7C,CAAC,CACD,WAAU,OAAM;CACf,iBAAiB,EAAE;CACnB,WAAW,EAAE;CACb,aAAa,EAAE;CACf,gBAAgB,EAAE;CAClB,qBAAqB,EAAE;CACxB,EAAE;AAEP,MAAa,oCACX,EACG,OAAO;CACN,mBAAmB,EAAE,QAAQ,CAAC,UAAU;CACxC,YAAY,EAAE,QAAQ,CAAC,UAAU;CACjC,mBAAmB,EAAE,QAAQ,CAAC,UAAU;CACxC,iBAAiB,EAAE,QAAQ,CAAC,UAAU;CACtC,uBAAuB,EAAE,QAAQ,CAAC,UAAU;CAC7C,CAAC,CACD,WAAU,OAAM;CACf,iBAAiB,EAAE;CACnB,WAAW,EAAE;CACb,iBAAiB,EAAE;CACnB,gBAAgB,EAAE;CAClB,qBAAqB,EAAE;CACxB,EAAE;AAEP,MAAa,gDACX,EACG,OAAO,EACN,gBAAgB,EACb,WAAW,mCAAmC,CAC9C,UAAU,EACd,CAAC,CACD,WAAU,OAAM,EACf,cAAc,EAAE,gBACjB,EAAE;AAEP,MAAa,yCACX,EACG,OAAO,EACN,gBAAgB,EAAE,WAAW,4BAA4B,CAAC,UAAU,EACrE,CAAC,CACD,WAAU,OAAM,EACf,cAAc,EAAE,gBACjB,EAAE;AAEP,MAAa,oCACX,EACG,OAAO,EACN,WAAW,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU,EAC1C,CAAC,CACD,WAAU,OAAM,EACf,WAAW,EAAE,WACd,EAAE;AAEP,MAAa,sCACX,EACG,OAAO;CACN,eAAe,EACZ,WAAW,iDAAiD,CAC5D,UAAU;CACb,gBAAgB,EACb,WAAW,kDAAkD,CAC7D,UAAU;CACb,wBAAwB,EACrB,WAAW,yDAAyD,CACpE,UAAU;CACd,CAAC,CACD,WAAU,OAAM;CACf,cAAc,EAAE;CAChB,eAAe,EAAE;CACjB,sBAAsB,EAAE;CACzB,EAAE;AAGP,MAAa,4DACX,EACG,OAAO;CACN,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CACtC,iBAAiB,EAAE,QAAQ,CAAC,UAAU;CACvC,CAAC,CACD,WAAU,OAAM;CACf,QAAQ,EAAE;CACV,gBAAgB,EAAE;CACnB,EAAE;AAGP,MAAa,sEACX,EACG,OAAO,EACN,kBAAkB,EAAE,SAAS,CAAC,UAAU,EACzC,CAAC,CACD,WAAU,OAAM,EACf,iBAAiB,EAAE,kBACpB,EAAE;AAGP,MAAa,2DACX,EACG,OAAO,EACN,kBAAkB,EAAE,SAAS,CAAC,UAAU,EACzC,CAAC,CACD,WAAU,OAAM,EACf,iBAAiB,EAAE,kBACpB,EAAE;AAGP,MAAa,6DACX,EACG,OAAO,EACN,kBAAkB,EAAE,SAAS,CAAC,UAAU,EACzC,CAAC,CACD,WAAU,OAAM,EACf,iBAAiB,EAAE,kBACpB,EAAE;AAGP,MAAa,qDACX,EACG,OAAO;CACN,eAAe,EAAE,QAAQ,CAAC,UAAU;CACpC,YAAY,EACT,MACC,EAAE,WACM,2DACP,CACF,CACA,UAAU;CACd,CAAC,CACD,WAAU,OAAM;CACf,cAAc,EAAE;CAChB,YAAY,EAAE;CACf,EAAE;AAGP,MAAa,6DACX,EACG,OAAO;CACN,gBAAgB,EAAE,QAAQ,CAAC,UAAU;CACrC,cAAc,EACX,MAAM;EAAC,EAAE,QAAQ;EAAE,EAAE,QAAQ;EAAE,EAAE,QAAQ;EAAC,CAAC,CAC3C,WAAU,MAAK,OAAO,EAAE,CAAC,CACzB,UAAU;CACd,CAAC,CACD,WAAU,OAAM;CACf,eAAe,EAAE;CACjB,aAAa,EAAE;CAChB,EAAE;AAGP,MAAa,2DACX,EACG,OAAO;CACN,kBAAkB,EAAE,QAAQ,CAAC,UAAU;CACvC,YAAY,EACT,MACC,EAAE,WACM,8DACP,CACF,CACA,UAAU;CACb,aAAa,EACV,MACC,EAAE,WACM,8DACP,CACF,CACA,UAAU;CACd,CAAC,CACD,WAAU,OAAM;CACf,iBAAiB,EAAE;CACnB,WAAW,EAAE;CACb,YAAY,EAAE;CACf,EAAE;AAGP,MAAa,gEACX,EACG,OAAO;CACN,QAAQ,EACL,WACO,gEACP,CACA,UAAU;CACb,aAAa,EACV,WAAW,uDAAuD,CAClE,UAAU;CACb,gBAAgB,EACb,WAAW,mDAAmD,CAC9D,UAAU;CACb,OAAO,EAAE,QAAQ,CAAC,UAAU;CAC7B,CAAC,CACD,WAAU,OAAM;CACf,QAAQ,EAAE;CACV,aAAa,EAAE;CACf,gBAAgB,EAAE;CAClB,OAAO,EAAE;CACV,EAAE;AAGP,MAAa,kEACX,EACG,OAAO;CACN,uBAAuB,EAAE,SAAS,CAAC,UAAU;CAC7C,qBAAqB,EAClB,WAAW,oDAAoD,CAC/D,UAAU;CACd,CAAC,CACD,WAAU,OAAM,EACf,QACE,EAAE,0BAA0B,SACxB;CACE,OAAO;CACP,qBAAqB,EAAE;CACxB,GACD,EAAE,wBAAwB,SACxB;CACE,OAAO;CACP,oBAAoB,EAAE;CACvB,GACD,QACT,EAAE;AAGP,MAAa,gDACX,EACG,OAAO,EACN,cAAc,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU,EAC7C,CAAC,CACD,WAAU,OAAM,EACf,aAAa,EAAE,cAChB,EAAE;AAGP,MAAa,+CACX,EACG,OAAO,EACN,WAAW,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU,EAC1C,CAAC,CACD,WAAU,OAAM,EACf,UAAU,EAAE,WACb,EAAE;AAGP,MAAa,iEACX,EACG,OAAO,EACN,kBAAkB,EAAE,SAAS,CAAC,UAAU,EACzC,CAAC,CACD,WAAU,OAAM,EACf,iBAAiB,EAAE,kBACpB,EAAE;AAGP,MAAa,oDACX,EACG,OAAO;CACN,kBAAkB,EAAE,QAAQ,CAAC,UAAU;CACvC,YAAY,EACT,MACC,EAAE,WAAW,uDAAuD,CACrE,CACA,UAAU;CACb,aAAa,EACV,MACC,EAAE,WAAW,uDAAuD,CACrE,CACA,UAAU;CACd,CAAC,CACD,WAAU,OAAM;CACf,iBAAiB,EAAE;CACnB,WAAW,EAAE;CACb,YAAY,EAAE;CACf,EAAE;AAGP,MAAa,yDACX,EACG,OAAO;CACN,QAAQ,EACL,WAAW,yDAAyD,CACpE,UAAU;CACb,aAAa,EACV,WAAW,uDAAuD,CAClE,UAAU;CACb,gBAAgB,EACb,WAAW,mDAAmD,CAC9D,UAAU;CACb,OAAO,EAAE,QAAQ,CAAC,UAAU;CAC7B,CAAC,CACD,WAAU,OAAM;CACf,QAAQ,EAAE;CACV,aAAa,EAAE;CACf,gBAAgB,EAAE;CAClB,OAAO,EAAE;CACV,EAAE;AAGP,MAAa,2DACX,EACG,OAAO;CACN,WAAW,EACR,WAAW,8CAA8C,CACzD,UAAU;CACb,0BAA0B,EAAE,SAAS,CAAC,UAAU;CAChD,8BAA8B,EAAE,SAAS,CAAC,UAAU;CACpD,oBAAoB,EAAE,SAAS,CAAC,UAAU;CAC3C,CAAC,CACD,WAAU,OAAM,EACf,QACE,EAAE,cAAc,SACZ;CAAC,OAAO;CAAsB,WAAW,EAAE;CAAU,GACrD,EAAE,6BAA6B,SAC7B;CACE,OAAO;CACP,wBAAwB,EAAE;CAC3B,GACD,EAAE,iCAAiC,SACjC;CACE,OAAO;CACP,2BAA2B,EAAE;CAC9B,GACD,EAAE,uBAAuB,SACvB;CACE,OAAO;CACP,kBAAkB,EAAE;CACrB,GACD,QACb,EAAE;AAGP,MAAa,mDACX,EACG,OAAO;CACN,kBAAkB,EAAE,QAAQ,CAAC,UAAU;CACvC,YAAY,EACT,MACC,EAAE,WAAW,sDAAsD,CACpE,CACA,UAAU;CACb,aAAa,EACV,MACC,EAAE,WAAW,sDAAsD,CACpE,CACA,UAAU;CACd,CAAC,CACD,WAAU,OAAM;CACf,iBAAiB,EAAE;CACnB,WAAW,EAAE;CACb,YAAY,EAAE;CACf,EAAE;AAGP,MAAa,wDACX,EACG,OAAO;CACN,QAAQ,EACL,WAAW,wDAAwD,CACnE,UAAU;CACb,aAAa,EACV,WAAW,uDAAuD,CAClE,UAAU;CACb,gBAAgB,EACb,WAAW,mDAAmD,CAC9D,UAAU;CACb,OAAO,EAAE,QAAQ,CAAC,UAAU;CAC7B,CAAC,CACD,WAAU,OAAM;CACf,QAAQ,EAAE;CACV,aAAa,EAAE;CACf,gBAAgB,EAAE;CAClB,OAAO,EAAE;CACV,EAAE;AAGP,MAAa,0DACX,EACG,OAAO;CACN,eAAe,EAAE,SAAS,CAAC,UAAU;CACrC,oBAAoB,EACjB,WAAW,6CAA6C,CACxD,UAAU;CACb,oBAAoB,EACjB,WAAW,6CAA6C,CACxD,UAAU;CACd,CAAC,CACD,WAAU,OAAM,EACf,QACE,EAAE,kBAAkB,SAChB;CAAC,OAAO;CAAwB,aAAa,EAAE;CAAc,GAC7D,EAAE,uBAAuB,SACvB;CACE,OAAO;CACP,kBAAkB,EAAE;CACrB,GACD,EAAE,uBAAuB,SACvB;CACE,OAAO;CACP,kBAAkB,EAAE;CACrB,GACD,QACX,EAAE;AAGP,MAAa,yDACX,EACG,OAAO;CACN,kBAAkB,EAAE,SAAS,CAAC,UAAU;CACxC,cAAc,EACX,WAAW,2DAA2D,CACtE,UAAU;CACb,eAAe,EACZ,WAAW,4DAA4D,CACvE,UAAU;CACb,cAAc,EACX,WAAW,2DAA2D,CACtE,UAAU;CACb,kBAAkB,EACf,WACO,+DACP,CACA,UAAU;CACb,YAAY,EACT,WAAW,yDAAyD,CACpE,UAAU;CACb,aAAa,EACV,WAAW,0DAA0D,CACrE,UAAU;CACb,wBAAwB,EACrB,WAEG,oEACH,CACA,UAAU;CACd,CAAC,CACD,WAAU,OAAM;CACf,iBAAiB,EAAE;CACnB,aAAa,EAAE;CACf,cAAc,EAAE;CAChB,aAAa,EAAE;CACf,iBAAiB,EAAE;CACnB,WAAW,EAAE;CACb,YAAY,EAAE;CACd,sBAAsB,EAAE;CACzB,EAAE;AAGP,MAAa,8DACX,EACG,OAAO;CACN,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CACtC,iBAAiB,EAAE,QAAQ,CAAC,UAAU;CACvC,CAAC,CACD,WAAU,OAAM;CACf,QAAQ,EAAE;CACV,gBAAgB,EAAE;CACnB,EAAE;AAGP,MAAa,sDACX,EACG,OAAO,EACN,eAAe,EACZ,MACC,EACG,MAAM;CAAC,EAAE,QAAQ;CAAE,EAAE,QAAQ;CAAE,EAAE,QAAQ;CAAC,CAAC,CAC3C,WAAU,MAAK,OAAO,EAAE,CAAC,CAC7B,CACA,UAAU,EACd,CAAC,CACD,WAAU,OAAM,EACf,cAAc,EAAE,eACjB,EAAE;AAGP,MAAa,6DACX,EACG,OAAO,EACN,kBAAkB,EAAE,SAAS,CAAC,UAAU,EACzC,CAAC,CACD,WAAU,OAAM,EACf,iBAAiB,EAAE,kBACpB,EAAE;AAEP,MAAa,8BAAuD,EACjE,OAAO;CACN,SAAS,EAAE,QAAQ,CAAC,UAAU;CAC9B,OAAO,EAAE,QAAQ,CAAC,UAAU;CAC5B,cAAc,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CAC5C,eAAe,EAAE,QAAQ,CAAC,UAAU;CACpC,WAAW,EAAE,QAAQ,CAAC,UAAU;CAChC,YAAY,EACT,MAAM;EAAC,EAAE,QAAQ;EAAE,EAAE,QAAQ;EAAE,EAAE,QAAQ;EAAC,CAAC,CAC3C,WAAU,MAAK,OAAO,EAAE,CAAC,CACzB,UAAU;CACb,YAAY,EACT,MAAM;EAAC,EAAE,QAAQ;EAAE,EAAE,QAAQ;EAAE,EAAE,QAAQ;EAAC,CAAC,CAC3C,WAAU,MAAK,OAAO,EAAE,CAAC,CACzB,UAAU;CACb,YAAY,EACT,MAAM;EAAC,EAAE,QAAQ;EAAE,EAAE,QAAQ;EAAE,EAAE,QAAQ;EAAC,CAAC,CAC3C,WAAU,MAAK,OAAO,EAAE,CAAC,CACzB,UAAU;CACb,YAAY,EACT,MAAM;EAAC,EAAE,QAAQ;EAAE,EAAE,QAAQ;EAAE,EAAE,QAAQ;EAAC,CAAC,CAC3C,WAAU,MAAK,OAAO,EAAE,CAAC,CACzB,UAAU;CACb,SAAS,EAAE,SAAS,CAAC,UAAU;CAChC,CAAC,CACD,WAAU,OAAM;CACf,QAAQ,EAAE;CACV,OAAO,EAAE;CACT,aAAa,EAAE;CACf,cAAc,EAAE;CAChB,UAAU,EAAE;CACZ,WAAW,EAAE;CACb,WAAW,EAAE;CACb,WAAW,EAAE;CACb,WAAW,EAAE;CACb,SAAS,EAAE;CACZ,EAAE;AAEL,MAAa,kDACX,EACG,OAAO,EACN,iBAAiB,EACd,MAAM,EAAE,WAAW,mCAAmC,CAAC,CACvD,UAAU,EACd,CAAC,CACD,WAAU,OAAM,EACf,eAAe,EAAE,iBAClB,EAAE;AAEP,MAAa,uCACX,EACG,OAAO;CACN,OAAO,EAAE,MAAM,EAAE,WAAW,wBAAwB,CAAC,CAAC,UAAU;CAChE,iBAAiB,EAAE,QAAQ,CAAC,UAAU;CACvC,CAAC,CACD,WAAU,OAAM;CACf,OAAO,EAAE;CACT,eAAe,EAAE;CAClB,EAAE;AAEP,MAAa,2CACX,EACG,OAAO,EACN,iBAAiB,EACd,MAAM,EAAE,WAAW,4BAA4B,CAAC,CAChD,UAAU,EACd,CAAC,CACD,WAAU,OAAM,EACf,eAAe,EAAE,iBAClB,EAAE;AAEP,MAAa,qDACX,EACG,OAAO;CACN,OAAO,EACJ,MAAM,EAAE,WAAW,sCAAsC,CAAC,CAC1D,UAAU;CACb,iBAAiB,EAAE,QAAQ,CAAC,UAAU;CACvC,CAAC,CACD,WAAU,OAAM;CACf,OAAO,EAAE;CACT,eAAe,EAAE;CAClB,EAAE;AAEP,MAAa,wDACX,EACG,OAAO;CACN,OAAO,EACJ,MAAM,EAAE,WAAW,yCAAyC,CAAC,CAC7D,UAAU;CACb,iBAAiB,EAAE,QAAQ,CAAC,UAAU;CACvC,CAAC,CACD,WAAU,OAAM;CACf,OAAO,EAAE;CACT,eAAe,EAAE;CAClB,EAAE;AAEP,MAAa,6CACX,EACG,OAAO;CACN,OAAO,EACJ,MAAM,EAAE,WAAW,oCAAoC,CAAC,CACxD,UAAU;CACb,iBAAiB,EAAE,QAAQ,CAAC,UAAU;CACvC,CAAC,CACD,WAAU,OAAM;CACf,OAAO,EAAE;CACT,eAAe,EAAE;CAClB,EAAE;AAEP,MAAa,wCACX,EACG,OAAO;CACN,SAAS,EAAE,QAAQ,CAAC,UAAU;CAC9B,gCAAgC,EAAE,QAAQ,CAAC,UAAU;CACrD,kBAAkB,EAAE,QAAQ,CAAC,UAAU;CACvC,cAAc,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CAC5C,eAAe,EACZ,MAAM;EAAC,EAAE,QAAQ;EAAE,EAAE,QAAQ;EAAE,EAAE,QAAQ;EAAC,CAAC,CAC3C,WAAU,MAAK,OAAO,EAAE,CAAC,CACzB,UAAU;CACb,cAAc,EACX,MAAM;EAAC,EAAE,QAAQ;EAAE,EAAE,QAAQ;EAAE,EAAE,QAAQ;EAAC,CAAC,CAC3C,WAAU,MAAK,OAAO,EAAE,CAAC,CACzB,UAAU;CACb,aAAa,EAAE,SAAS,CAAC,UAAU;CACnC,gBAAgB,EACb,MAAM;EAAC,EAAE,QAAQ;EAAE,EAAE,QAAQ;EAAE,EAAE,QAAQ;EAAC,CAAC,CAC3C,WAAU,MAAK,OAAO,EAAE,CAAC,CACzB,UAAU;CACb,eAAe,EAAE,QAAQ,CAAC,UAAU;CACpC,aAAa,EAAE,QAAQ,CAAC,UAAU;CAClC,UAAU,EAAE,QAAQ,CAAC,UAAU;CAC/B,eAAe,EAAE,QAAQ,CAAC,UAAU;CACpC,YAAY,EAAE,QAAQ,CAAC,UAAU;CACjC,kBAAkB,EAAE,QAAQ,CAAC,UAAU;CACvC,gBAAgB,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CAC9C,iBAAiB,EAAE,QAAQ,CAAC,UAAU;CACtC,SAAS,EAAE,SAAS,CAAC,UAAU;CAC/B,cAAc,EAAE,WAAW,2BAA2B,CAAC,UAAU;CAClE,CAAC,CACD,WAAU,OAAM;CACf,QAAQ,EAAE;CACV,6BAA6B,EAAE;CAC/B,iBAAiB,EAAE;CACnB,aAAa,EAAE;CACf,cAAc,EAAE;CAChB,aAAa,EAAE;CACf,aAAa,EAAE;CACf,eAAe,EAAE;CACjB,cAAc,EAAE;CAChB,YAAY,EAAE;CACd,SAAS,EAAE;CACX,cAAc,EAAE;CAChB,WAAW,EAAE;CACb,iBAAiB,EAAE;CACnB,eAAe,EAAE;CACjB,eAAe,EAAE;CACjB,SAAS,EAAE;CACX,UACE,EAAE,iBAAiB,SACf;EAAC,OAAO;EAAwB,aAAa,EAAE;EAAa,GAC5D;CACP,EAAE;AAEP,MAAa,yBAA6C,EACvD,OAAO;CACN,YAAY,EAAE,QAAQ,CAAC,UAAU;CACjC,YAAY,EAAE,QAAQ,CAAC,UAAU;CACjC,cAAc,EACX,MAAM;EAAC,EAAE,QAAQ;EAAE,EAAE,QAAQ;EAAE,EAAE,QAAQ;EAAC,CAAC,CAC3C,WAAU,MAAK,OAAO,EAAE,CAAC,CACzB,UAAU;CACb,QAAQ,EAAE,QAAQ,CAAC,UAAU;CAC7B,YAAY,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CAC1C,oBAAoB,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CAClD,YAAY,EAAE,QAAQ,CAAC,UAAU;CACjC,gBAAgB,EACb,MAAM,EAAE,WAAW,6BAA6B,CAAC,CACjD,UAAU;CACb,cAAc,EAAE,QAAQ,CAAC,UAAU;CACnC,eAAe,EACZ,MAAM;EAAC,EAAE,QAAQ;EAAE,EAAE,QAAQ;EAAE,EAAE,QAAQ;EAAC,CAAC,CAC3C,WAAU,MAAK,OAAO,EAAE,CAAC,CACzB,UAAU;CACb,kBAAkB,EACf,MAAM,EAAE,WAAW,8BAA8B,CAAC,CAClD,UAAU;CACb,eAAe,EAAE,WAAW,mCAAmC,CAAC,UAAU;CAC1E,kBAAkB,EAAE,WAAW,8BAA8B,CAAC,UAAU;CACzE,CAAC,CACD,WAAU,OAAM;CACf,WAAW,EAAE;CACb,WAAW,EAAE;CACb,aAAa,EAAE;CACf,OAAO,EAAE;CACT,WAAW,EAAE;CACb,kBAAkB,EAAE;CACpB,WAAW,EAAE;CACb,eAAe,EAAE;CACjB,aAAa,EAAE;CACf,cAAc,EAAE;CAChB,iBAAiB,EAAE;CACnB,cAAc,EAAE;CAChB,aACE,EAAE,qBAAqB,SACnB;EAAC,OAAO;EAA2B,gBAAgB,EAAE;EAAiB,GACtE;CACP,EAAE;AAEL,MAAa,2CACX,EACG,OAAO;CACN,gCAAgC,EAAE,QAAQ,CAAC,UAAU;CACrD,YAAY,EAAE,QAAQ,CAAC,UAAU;CACjC,MAAM,EAAE,QAAQ,CAAC,UAAU;CAC3B,QAAQ,EAAE,QAAQ,CAAC,UAAU;CAC7B,eAAe,EACZ,WAEG,mEACH,CACA,UAAU;CACb,cAAc,EACX,MAAM;EAAC,EAAE,QAAQ;EAAE,EAAE,QAAQ;EAAE,EAAE,QAAQ;EAAC,CAAC,CAC3C,WAAU,MAAK,OAAO,EAAE,CAAC,CACzB,UAAU;CACb,eAAe,EACZ,MAAM;EAAC,EAAE,QAAQ;EAAE,EAAE,QAAQ;EAAE,EAAE,QAAQ;EAAC,CAAC,CAC3C,WAAU,MAAK,OAAO,EAAE,CAAC,CACzB,UAAU;CACd,CAAC,CACD,WAAU,OAAM;CACf,6BAA6B,EAAE;CAC/B,WAAW,EAAE;CACb,MAAM,EAAE;CACR,QAAQ,EAAE;CACV,cAAc,EAAE;CAChB,aAAa,EAAE;CACf,cAAc,EAAE;CACjB,EAAE;AAEP,MAAa,iEACX,EACG,OAAO;CACN,SAAS,EAAE,QAAQ,CAAC,UAAU;CAC9B,gCAAgC,EAAE,QAAQ,CAAC,UAAU;CACrD,YAAY,EAAE,QAAQ,CAAC,UAAU;CACjC,kBAAkB,EAAE,QAAQ,CAAC,UAAU;CACvC,cAAc,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CAC5C,gBAAgB,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CAC9C,iBAAiB,EAAE,QAAQ,CAAC,UAAU;CACtC,kBAAkB,EAAE,QAAQ,CAAC,UAAU;CACvC,eAAe,EACZ,MAAM;EAAC,EAAE,QAAQ;EAAE,EAAE,QAAQ;EAAE,EAAE,QAAQ;EAAC,CAAC,CAC3C,WAAU,MAAK,OAAO,EAAE,CAAC,CACzB,UAAU;CACb,cAAc,EACX,MAAM;EAAC,EAAE,QAAQ;EAAE,EAAE,QAAQ;EAAE,EAAE,QAAQ;EAAC,CAAC,CAC3C,WAAU,MAAK,OAAO,EAAE,CAAC,CACzB,UAAU;CACb,aAAa,EAAE,SAAS,CAAC,UAAU;CACnC,gBAAgB,EACb,MAAM;EAAC,EAAE,QAAQ;EAAE,EAAE,QAAQ;EAAE,EAAE,QAAQ;EAAC,CAAC,CAC3C,WAAU,MAAK,OAAO,EAAE,CAAC,CACzB,UAAU;CACb,SAAS,EAAE,SAAS,CAAC,UAAU;CAC/B,eAAe,EAAE,QAAQ,CAAC,UAAU;CACrC,CAAC,CACD,WAAU,OAAM;CACf,QAAQ,EAAE;CACV,6BAA6B,EAAE;CAC/B,WAAW,EAAE;CACb,iBAAiB,EAAE;CACnB,aAAa,EAAE;CACf,eAAe,EAAE;CACjB,eAAe,EAAE;CACjB,iBAAiB,EAAE;CACnB,cAAc,EAAE;CAChB,aAAa,EAAE;CACf,aAAa,EAAE;CACf,eAAe,EAAE;CACjB,SAAS,EAAE;CACX,cAAc,EAAE;CACjB,EAAE;AAEP,MAAa,mEACX,EACG,OAAO;CACN,SAAS,EAAE,QAAQ,CAAC,UAAU;CAC9B,gCAAgC,EAAE,QAAQ,CAAC,UAAU;CACrD,aAAa,EAAE,QAAQ,CAAC,UAAU;CAClC,UAAU,EAAE,QAAQ,CAAC,UAAU;CAC/B,eAAe,EAAE,QAAQ,CAAC,UAAU;CACpC,kBAAkB,EAAE,QAAQ,CAAC,UAAU;CACvC,eAAe,EACZ,MAAM;EAAC,EAAE,QAAQ;EAAE,EAAE,QAAQ;EAAE,EAAE,QAAQ;EAAC,CAAC,CAC3C,WAAU,MAAK,OAAO,EAAE,CAAC,CACzB,UAAU;CACb,cAAc,EACX,MAAM;EAAC,EAAE,QAAQ;EAAE,EAAE,QAAQ;EAAE,EAAE,QAAQ;EAAC,CAAC,CAC3C,WAAU,MAAK,OAAO,EAAE,CAAC,CACzB,UAAU;CACb,aAAa,EAAE,SAAS,CAAC,UAAU;CACnC,gBAAgB,EACb,MAAM;EAAC,EAAE,QAAQ;EAAE,EAAE,QAAQ;EAAE,EAAE,QAAQ;EAAC,CAAC,CAC3C,WAAU,MAAK,OAAO,EAAE,CAAC,CACzB,UAAU;CACb,cAAc,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CAC5C,eAAe,EAAE,QAAQ,CAAC,UAAU;CACrC,CAAC,CACD,WAAU,OAAM;CACf,QAAQ,EAAE;CACV,6BAA6B,EAAE;CAC/B,YAAY,EAAE;CACd,SAAS,EAAE;CACX,cAAc,EAAE;CAChB,iBAAiB,EAAE;CACnB,cAAc,EAAE;CAChB,aAAa,EAAE;CACf,aAAa,EAAE;CACf,eAAe,EAAE;CACjB,aAAa,EAAE;CACf,cAAc,EAAE;CACjB,EAAE;AAGP,MAAa,mEACX,EACG,OAAO;CACN,6BAA6B,EAC1B,WAEG,0FACH,CACA,UAAU;CACb,oBAAoB,EACjB,WAEG,iFACH,CACA,UAAU;CACd,CAAC,CACD,WAAU,OAAM;CACf,0BAA0B,EAAE;CAC5B,iBAAiB,EAAE;CACpB,EAAE;AAGP,MAAa,mFACX,EACG,OAAO,EACN,aAAa,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU,EAC5C,CAAC,CACD,WAAU,OAAM,EACf,YAAY,EAAE,aACf,EAAE;AAGP,MAAa,4FACX,EACG,OAAO;CACN,eAAe,EAAE,QAAQ,CAAC,UAAU;CACpC,iBAAiB,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CAC/C,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CACxC,CAAC,CACD,WAAU,OAAM;CACf,cAAc,EAAE;CAChB,gBAAgB,EAAE;CAClB,SAAS,EAAE;CACZ,EAAE;AAEP,MAAa,+BAAyD,EACnE,OAAO;CACN,YAAY,EAAE,QAAQ,CAAC,UAAU;CACjC,eAAe,EAAE,QAAQ,CAAC,UAAU;CACrC,CAAC,CACD,WAAU,OAAM;CACf,WAAW,EAAE;CACb,cAAc,EAAE;CACjB,EAAE;AAEL,MAAa,qCACX,EACG,OAAO;CACN,UAAU,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CACxC,iBAAiB,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CAChD,CAAC,CACD,WAAU,OAAM;CACf,SAAS,EAAE;CACX,gBAAgB,EAAE;CACnB,EAAE;AAEP,MAAa,gCAA2D,EACrE,OAAO;CACN,cAAc,EAAE,QAAQ,CAAC,UAAU;CACnC,iBAAiB,EAAE,QAAQ,CAAC,UAAU;CACvC,CAAC,CACD,WAAU,OAAM;CACf,aAAa,EAAE;CACf,gBAAgB,EAAE;CACnB,EAAE;AAEL,MAAa,uCACX,EACG,OAAO;CACN,4BAA4B,EAAE,QAAQ,CAAC,UAAU;CACjD,YAAY,EAAE,QAAQ,CAAC,UAAU;CACjC,8BAA8B,EAAE,QAAQ,CAAC,UAAU;CACnD,QAAQ,EAAE,QAAQ,CAAC,UAAU;CAC7B,uBAAuB,EAAE,SAAS,CAAC,UAAU;CAC7C,sBAAsB,EAAE,QAAQ,CAAC,UAAU;CAC3C,0BAA0B,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CACzD,CAAC,CACD,WAAU,OAAM;CACf,yBAAyB,EAAE;CAC3B,WAAW,EAAE;CACb,2BAA2B,EAAE;CAC7B,QAAQ,EAAE;CACV,qBAAqB,EAAE;CACvB,oBAAoB,EAAE;CACtB,uBAAuB,EAAE;CAC1B,EAAE;AAEP,MAAa,oDACX,EACG,OAAO,EACN,gBAAgB,EACb,WAAW,mCAAmC,CAC9C,UAAU,EACd,CAAC,CACD,WAAU,OAAM,EACf,cAAc,EAAE,gBACjB,EAAE;AAEP,MAAa,6CACX,EACG,OAAO,EACN,gBAAgB,EAAE,WAAW,4BAA4B,CAAC,UAAU,EACrE,CAAC,CACD,WAAU,OAAM,EACf,cAAc,EAAE,gBACjB,EAAE;AAEP,MAAa,mDACX,EACG,OAAO,EACN,gBAAgB,EACb,WAAW,mCAAmC,CAC9C,UAAU,EACd,CAAC,CACD,WAAU,OAAM,EACf,cAAc,EAAE,gBACjB,EAAE;AAEP,MAAa,4CACX,EACG,OAAO,EACN,gBAAgB,EAAE,WAAW,4BAA4B,CAAC,UAAU,EACrE,CAAC,CACD,WAAU,OAAM,EACf,cAAc,EAAE,gBACjB,EAAE;AAEP,MAAa,6BAAqD,EAC/D,OAAO;CACN,iBAAiB,EAAE,QAAQ,CAAC,UAAU;CACtC,YAAY,EAAE,QAAQ,CAAC,UAAU;CACjC,mBAAmB,EAAE,QAAQ,CAAC,UAAU;CACxC,qBAAqB,EAAE,QAAQ,CAAC,UAAU;CAC1C,yBAAyB,EAAE,QAAQ,CAAC,UAAU;CAC9C,UAAU,EAAE,QAAQ,CAAC,UAAU;CAC/B,QAAQ,EAAE,QAAQ,CAAC,UAAU;CAC7B,gBAAgB,EAAE,QAAQ,CAAC,UAAU;CACrC,OAAO,EAAE,QAAQ,CAAC,UAAU;CAC5B,uBAAuB,EACpB,WAAW,kCAAkC,CAC7C,UAAU;CACd,CAAC,CACD,WAAU,OAAM;CACf,eAAe,EAAE;CACjB,WAAW,EAAE;CACb,iBAAiB,EAAE;CACnB,kBAAkB,EAAE;CACpB,sBAAsB,EAAE;CACxB,SAAS,EAAE;CACX,QAAQ,EAAE;CACV,cAAc,EAAE;CAChB,OAAO,EAAE;CACT,iBACE,EAAE,0BAA0B,SACxB;EACE,OAAO;EACP,oBAAoB,EAAE;EACvB,GACD;CACP,EAAE;AAEL,MAAa,wCACX,EACG,OAAO;CACN,mBAAmB,EAAE,QAAQ,CAAC,UAAU;CACxC,cAAc,EACX,MAAM;EAAC,EAAE,QAAQ;EAAE,EAAE,QAAQ;EAAE,EAAE,QAAQ;EAAC,CAAC,CAC3C,WAAU,MAAK,OAAO,EAAE,CAAC,CACzB,UAAU;CACd,CAAC,CACD,WAAU,OAAM;CACf,iBAAiB,EAAE;CACnB,aAAa,EAAE;CAChB,EAAE;AAEP,MAAa,oCAA+C,EACzD,OAAO;CACN,iBAAiB,EAAE,QAAQ,CAAC,UAAU;CACtC,WAAW,EAAE,QAAQ,CAAC,UAAU;CAChC,QAAQ,EAAE,WAAW,iCAAiC,CAAC,UAAU;CACjE,SAAS,EAAE,WAAW,kCAAkC,CAAC,UAAU;CACnE,eAAe,EAAE,WAAW,kCAAkC,CAAC,UAAU;CAC1E,CAAC,CACD,WAAU,OAAM;CACf,mBAAmB,EAAE;CACrB,YAAY,EAAE;CACd,QAAQ,EAAE;CACV,SAAS,EAAE;CACX,iBAAiB,EAAE;CACpB,EAAE;AAEL,MAAa,kCAA6C,EACvD,OAAO;CACN,kBAAkB,EAAE,QAAQ,CAAC,UAAU;CACvC,sBAAsB,EAAE,QAAQ,CAAC,UAAU;CAC3C,cAAc,EAAE,QAAQ,CAAC,UAAU;CACpC,CAAC,CACD,WAAU,OAAM;CACf,qBAAqB,EAAE;CACvB,yBAAyB,EAAE;CAC3B,gBAAgB,EAAE;CACnB,EAAE;AAEL,MAAa,wCAAmD,EAC7D,OAAO;CACN,qBAAqB,EAAE,QAAQ,CAAC,UAAU;CAC1C,6BAA6B,EAAE,QAAQ,CAAC,UAAU;CAClD,2BAA2B,EAAE,QAAQ,CAAC,UAAU;CAChD,sBAAsB,EAAE,QAAQ,CAAC,UAAU;CAC5C,CAAC,CACD,WAAU,OAAM;CACf,uBAAuB,EAAE;CACzB,gCAAgC,EAAE;CAClC,8BAA8B,EAAE;CAChC,yBAAyB,EAAE;CAC5B,EAAE;AAEL,MAAa,gDAA2D,EACrE,OAAO;CACN,WAAW,EAAE,QAAQ,CAAC,UAAU;CAChC,OAAO,EAAE,QAAQ,CAAC,UAAU;CAC5B,UAAU,EAAE,QAAQ,CAAC,UAAU;CAC/B,aAAa,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CAC5C,CAAC,CACD,WAAU,OAAM;CACf,YAAY,EAAE;CACd,OAAO,EAAE;CACT,WAAW,EAAE;CACb,cAAc,EAAE;CACjB,EAAE;AAEL,MAAa,yCAAoD,EAC9D,OAAO;CACN,OAAO,EAAE,QAAQ,CAAC,UAAU;CAC5B,UAAU,EAAE,QAAQ,CAAC,UAAU;CAC/B,aAAa,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CAC5C,CAAC,CACD,WAAU,OAAM;CACf,OAAO,EAAE;CACT,WAAW,EAAE;CACb,cAAc,EAAE;CACjB,EAAE;AAEL,MAAa,sDAAiE,EAC3E,OAAO;CACN,6BAA6B,EAAE,QAAQ,CAAC,UAAU;CAClD,WAAW,EAAE,QAAQ,CAAC,UAAU;CAChC,MAAM,EAAE,QAAQ,CAAC,UAAU;CAC3B,QAAQ,EAAE,QAAQ,CAAC,UAAU;CAC7B,cAAc,EACX,WACO,iEACP,CACA,UAAU;CACb,aAAa,EAAE,QAAQ,CAAC,UAAU;CAClC,cAAc,EAAE,QAAQ,CAAC,UAAU;CACpC,CAAC,CACD,WAAU,OAAM;CACf,gCAAgC,EAAE;CAClC,YAAY,EAAE;CACd,MAAM,EAAE;CACR,QAAQ,EAAE;CACV,eAAe,EAAE;CACjB,cAAc,EAAE;CAChB,eAAe,EAAE;CAClB,EAAE;AAEL,MAAa,oCAA+C,EACzD,OAAO;CACN,WAAW,EAAE,QAAQ,CAAC,UAAU;CAChC,aAAa,EAAE,QAAQ,CAAC,UAAU;CAClC,OAAO,EAAE,QAAQ,CAAC,UAAU;CAC5B,WAAW,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CACzC,kBAAkB,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CAChD,cAAc,EAAE,WAAW,iCAAiC,CAAC,UAAU;CACvE,gBAAgB,EAAE,WAAW,4BAA4B,CAAC,UAAU;CACrE,CAAC,CACD,WAAU,OAAM;CACf,YAAY,EAAE;CACd,cAAc,EAAE;CAChB,QAAQ,EAAE;CACV,YAAY,EAAE;CACd,oBAAoB,EAAE;CACtB,eAAe,EAAE;CACjB,kBAAkB,EAAE;CACrB,EAAE;AAEL,MAAa,kDAA6D,EACvE,OAAO;CACN,WAAW,EAAE,QAAQ,CAAC,UAAU;CAChC,2BAA2B,EAAE,QAAQ,CAAC,UAAU;CAChD,QAAQ,EAAE,QAAQ,CAAC,UAAU;CAC7B,qBAAqB,EAAE,SAAS,CAAC,UAAU;CAC3C,oBAAoB,EAAE,QAAQ,CAAC,UAAU;CACzC,uBAAuB,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CACtD,CAAC,CACD,WAAU,OAAM;CACf,YAAY,EAAE;CACd,8BAA8B,EAAE;CAChC,QAAQ,EAAE;CACV,uBAAuB,EAAE;CACzB,sBAAsB,EAAE;CACxB,0BAA0B,EAAE;CAC7B,EAAE;AAEL,MAAa,yCAAoD,EAC9D,OAAO;CACN,QAAQ,EAAE,QAAQ,CAAC,UAAU;CAC7B,6BAA6B,EAAE,QAAQ,CAAC,UAAU;CAClD,iBAAiB,EAAE,QAAQ,CAAC,UAAU;CACtC,aAAa,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CAC3C,cAAc,EAAE,QAAQ,CAAC,UAAU;CACnC,aAAa,EAAE,QAAQ,CAAC,UAAU;CAClC,aAAa,EAAE,SAAS,CAAC,UAAU;CACnC,eAAe,EAAE,QAAQ,CAAC,UAAU;CACpC,cAAc,EAAE,QAAQ,CAAC,UAAU;CACnC,YAAY,EAAE,QAAQ,CAAC,UAAU;CACjC,SAAS,EAAE,QAAQ,CAAC,UAAU;CAC9B,cAAc,EAAE,QAAQ,CAAC,UAAU;CACnC,WAAW,EAAE,QAAQ,CAAC,UAAU;CAChC,iBAAiB,EAAE,QAAQ,CAAC,UAAU;CACtC,eAAe,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CAC7C,eAAe,EAAE,QAAQ,CAAC,UAAU;CACpC,SAAS,EAAE,SAAS,CAAC,UAAU;CAC/B,UAAU,EACP,mBAAmB,SAAS,CAC3B,EAAE,OAAO;EACP,OAAO,EAAE,QAAQ,cAAc;EAC/B,aAAa,EAAE,WAAW,yBAAyB;EACpD,CAAC,CACH,CAAC,CACD,UAAU;CACd,CAAC,CACD,WAAU,OAAM;CACf,SAAS,EAAE;CACX,gCAAgC,EAAE;CAClC,kBAAkB,EAAE;CACpB,cAAc,EAAE;CAChB,eAAe,EAAE;CACjB,cAAc,EAAE;CAChB,aAAa,EAAE;CACf,gBAAgB,EAAE;CAClB,eAAe,EAAE;CACjB,aAAa,EAAE;CACf,UAAU,EAAE;CACZ,eAAe,EAAE;CACjB,YAAY,EAAE;CACd,kBAAkB,EAAE;CACpB,gBAAgB,EAAE;CAClB,iBAAiB,EAAE;CACnB,SAAS,EAAE;CACX,GAAI,EAAE,UAAU,UAAU,iBAAiB,EACzC,cAAc,EAAE,SAAS,aAC1B;CACF,EAAE;AAEL,MAAa,wCAAmD,EAC7D,OAAO;CACN,WAAW,EAAE,QAAQ,CAAC,UAAU;CAChC,iBAAiB,EAAE,QAAQ,CAAC,UAAU;CACtC,QAAQ,EAAE,QAAQ,CAAC,UAAU;CAC7B,kBAAkB,EAAE,QAAQ,CAAC,UAAU;CACvC,iBAAiB,EACd,mBAAmB,SAAS,CAC3B,EAAE,OAAO;EACP,OAAO,EAAE,QAAQ,qBAAqB;EACtC,oBAAoB,EAAE,WAAW,gCAAgC;EAClE,CAAC,CACH,CAAC,CACD,UAAU;CACd,CAAC,CACD,WAAU,OAAM;CACf,YAAY,EAAE;CACd,mBAAmB,EAAE;CACrB,QAAQ,EAAE;CACV,qBAAqB,EAAE;CACvB,GAAI,EAAE,iBAAiB,UAAU,wBAAwB,EACvD,uBAAuB,EAAE,gBAAgB,oBAC1C;CACF,EAAE;AAEL,MAAa,mEACX,EACG,OAAO;CACN,cAAc,EACX,WACO,+DACP,CACA,UAAU;CACb,aAAa,EACV,WAEG,0FACH,CACA,UAAU;CACd,CAAC,CACD,WAAU,OAAM;CACf,eAAe,EAAE;CACjB,cAAc,EAAE;CACjB,EAAE;AAGP,MAAa,4FACX,EACG,OAAO;CACN,2BAA2B,EACxB,MACC,EAAE,WACM,+DACP,CACF,CACA,UAAU;CACb,yBAAyB,EACtB,MACC,EAAE,WACM,6DACP,CACF,CACA,UAAU;CACd,CAAC,CACD,WAAU,OAAM;CACf,8BAA8B,EAAE;CAChC,4BAA4B,EAAE;CAC/B,EAAE;AAEP,MAAa,mCAA8C,EACxD,OAAO,EACN,eAAe,EACZ,WAAW,qDAAqD,CAChE,UAAU,EACd,CAAC,CACD,WAAU,OAAM,EACf,gBAAgB,EAAE,eACnB,EAAE;AAGL,MAAa,uDAAkE,EAC5E,OAAO;CACN,iBAAiB,EAAE,QAAQ,CAAC,UAAU;CACtC,6BAA6B,EAC1B,MACC,EAAE,WAEE,yEACH,CACF,CACA,UAAU;CACb,4BAA4B,EACzB,MACC,EAAE,WAEE,wEACH,CACF,CACA,UAAU;CACb,mBAAmB,EAChB,WAEG,uEACH,CACA,UAAU;CACb,6BAA6B,EAC1B,MACC,EAAE,WAEE,yEACH,CACF,CACA,UAAU;CACb,+BAA+B,EAC5B,MACC,EAAE,WAEE,2EACH,CACF,CACA,UAAU;CACd,CAAC,CACD,WAAU,OAAM;CACf,kBAAkB,EAAE;CACpB,+BAA+B,EAAE;CACjC,8BAA8B,EAAE;CAChC,oBAAoB,EAAE;CACtB,+BAA+B,EAAE;CACjC,iCAAiC,EAAE;CACpC,EAAE;AAGL,MAAa,6EACX,EACG,OAAO,EACN,cAAc,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU,EAC7C,CAAC,CACD,WAAU,OAAM,EACf,eAAe,EAAE,cAClB,EAAE;AAGP,MAAa,2EACX,EACG,OAAO;CACN,aAAa,EAAE,QAAQ,CAAC,UAAU;CAClC,yBAAyB,EAAE,QAAQ,CAAC,UAAU;CAC/C,CAAC,CACD,WAAU,OAAM;CACf,aAAa,EAAE;CACf,2BAA2B,EAAE;CAC9B,EAAE;AAGP,MAAa,yEACX,EACG,OAAO;CACN,iBAAiB,EAAE,QAAQ,CAAC,UAAU;CACtC,yBAAyB,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CACxD,CAAC,CACD,WAAU,OAAM;CACf,kBAAkB,EAAE;CACpB,6BAA6B,EAAE;CAChC,EAAE;AAGP,MAAa,0EACX,EACG,OAAO;CACN,YAAY,EAAE,QAAQ,CAAC,UAAU;CACjC,QAAQ,EAAE,QAAQ,CAAC,UAAU;CAC7B,wBAAwB,EAAE,QAAQ,CAAC,UAAU;CAC7C,qBAAqB,EAAE,QAAQ,CAAC,UAAU;CAC1C,qBAAqB,EAAE,QAAQ,CAAC,UAAU;CAC3C,CAAC,CACD,WAAU,OAAM;CACf,aAAa,EAAE;CACf,QAAQ,EAAE;CACV,0BAA0B,EAAE;CAC5B,uBAAuB,EAAE;CACzB,uBAAuB,EAAE;CAC1B,EAAE;AAEP,MAAa,wBAAmC,EAC7C,OAAO;CACN,MAAM,EAAE,QAAQ,CAAC,UAAU;CAC3B,YAAY,EAAE,QAAQ,CAAC,UAAU;CACjC,WAAW,EAAE,QAAQ,CAAC,UAAU;CAChC,aAAa,EAAE,QAAQ,CAAC,UAAU;CAClC,SAAS,EAAE,QAAQ,CAAC,UAAU;CAC9B,QAAQ,EAAE,QAAQ,CAAC,UAAU;CAC7B,OAAO,EAAE,QAAQ,CAAC,UAAU;CAC5B,cAAc,EACX,mBAAmB,SAAS;EAC3B,EAAE,OAAO;GACP,OAAO,EAAE,QAAQ,2BAA2B;GAC5C,0BAA0B,EAAE,WACpB,sCACP;GACF,CAAC;EACF,EAAE,OAAO;GACP,OAAO,EAAE,QAAQ,qBAAqB;GACtC,oBAAoB,EAAE,WAAW,gCAAgC;GAClE,CAAC;EACF,EAAE,OAAO;GACP,OAAO,EAAE,QAAQ,qBAAqB;GACtC,oBAAoB,EAAE,WAAW,gCAAgC;GAClE,CAAC;EACH,CAAC,CACD,UAAU;CACb,YAAY,EACT,KAAK,CACL,WAAW,MAAwB,EAAE,UAAU,CAAC,CAChD,UAAU;CACd,CAAC,CACD,WAAU,OAAM;CACf,MAAM,EAAE;CACR,aAAa,EAAE;CACf,YAAY,EAAE;CACd,cAAc,EAAE;CAChB,UAAU,EAAE;CACZ,QAAQ,EAAE;CACV,OAAO,EAAE;CACT,GAAI,EAAE,cAAc,UAAU,8BAA8B,EAC1D,6BAA6B,EAAE,aAAa,0BAC7C;CACD,GAAI,EAAE,cAAc,UAAU,wBAAwB,EACpD,uBAAuB,EAAE,aAAa,oBACvC;CACD,GAAI,EAAE,cAAc,UAAU,wBAAwB,EACpD,uBAAuB,EAAE,aAAa,oBACvC;CACD,aAAa,EAAE;CAChB,EAAE;AAEL,MAAa,2BAAsC,EAChD,OAAO;CACN,gBAAgB,EAAE,QAAQ,CAAC,UAAU;CACrC,gBAAgB,EACb,mBAAmB,SAAS;EAC3B,EAAE,OAAO;GACP,OAAO,EAAE,QAAQ,oBAAoB;GACrC,mBAAmB,EAAE,QAAQ;GAC9B,CAAC;EACF,EAAE,OAAO;GACP,OAAO,EAAE,QAAQ,qBAAqB;GACtC,oBAAoB,EAAE,WAAW,gCAAgC;GAClE,CAAC;EACF,EAAE,OAAO;GACP,OAAO,EAAE,QAAQ,mBAAmB;GACpC,kBAAkB,EAAE,SAAS;GAC9B,CAAC;EACH,CAAC,CACD,UAAU;CACd,CAAC,CACD,WAAU,OAAM;CACf,kBAAkB,EAAE;CACpB,GAAI,EAAE,gBAAgB,UAAU,uBAAuB,EACrD,oBAAoB,EAAE,eAAe,mBACtC;CACD,GAAI,EAAE,gBAAgB,UAAU,wBAAwB,EACtD,sBAAsB,EAAE,eAAe,oBACxC;CACD,GAAI,EAAE,gBAAgB,UAAU,sBAAsB,EACpD,qBAAqB,EAAE,eAAe,kBACvC;CACF,EAAE;AAEL,MAAa,8BAAyC,EACnD,OAAO;CACN,kBAAkB,EAAE,QAAQ,CAAC,UAAU;CACvC,OAAO,EAAE,QAAQ,CAAC,UAAU;CAC5B,UAAU,EAAE,QAAQ,CAAC,UAAU;CAC/B,cAAc,EAAE,QAAQ,CAAC,UAAU;CACnC,gBAAgB,EAAE,QAAQ,CAAC,UAAU;CACrC,oBAAoB,EAAE,QAAQ,CAAC,UAAU;CAC1C,CAAC,CACD,WAAU,OAAM;CACf,oBAAoB,EAAE;CACtB,QAAQ,EAAE;CACV,WAAW,EAAE;CACb,eAAe,EAAE;CACjB,mBAAmB,EAAE;CACrB,uBAAuB,EAAE;CAC1B,EAAE;AAEL,MAAa,kCAA6C,EACvD,OAAO;CACN,iBAAiB,EAAE,QAAQ,CAAC,UAAU;CACtC,WAAW,EAAE,QAAQ,CAAC,UAAU;CAChC,aAAa,EAAE,QAAQ,CAAC,UAAU;CAClC,gBAAgB,EAAE,QAAQ,CAAC,UAAU;CACrC,qBAAqB,EAAE,QAAQ,CAAC,UAAU;CAC3C,CAAC,CACD,WAAU,OAAM;CACf,mBAAmB,EAAE;CACrB,YAAY,EAAE;CACd,cAAc,EAAE;CAChB,iBAAiB,EAAE;CACnB,uBAAuB,EAAE;CAC1B,EAAE;AAEL,MAAa,kCAA6C,EACvD,OAAO;CACN,iBAAiB,EAAE,QAAQ,CAAC,UAAU;CACtC,WAAW,EAAE,QAAQ,CAAC,UAAU;CAChC,iBAAiB,EAAE,QAAQ,CAAC,UAAU;CACtC,gBAAgB,EAAE,QAAQ,CAAC,UAAU;CACrC,qBAAqB,EAAE,QAAQ,CAAC,UAAU;CAC3C,CAAC,CACD,WAAU,OAAM;CACf,mBAAmB,EAAE;CACrB,YAAY,EAAE;CACd,mBAAmB,EAAE;CACrB,iBAAiB,EAAE;CACnB,uBAAuB,EAAE;CAC1B,EAAE;AAEL,MAAa,kCAA6C,EACvD,OAAO,EACN,WAAW,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU,EAC1C,CAAC,CACD,WAAU,OAAM,EACf,WAAW,EAAE,WACd,EAAE;AAEL,MAAa,oCAA+C,EACzD,OAAO;CACN,cAAc,EACX,WAAW,+CAA+C,CAC1D,UAAU;CACb,eAAe,EACZ,WAAW,gDAAgD,CAC3D,UAAU;CACb,sBAAsB,EACnB,WAAW,uDAAuD,CAClE,UAAU;CACd,CAAC,CACD,WAAU,OAAM;CACf,eAAe,EAAE;CACjB,gBAAgB,EAAE;CAClB,wBAAwB,EAAE;CAC3B,EAAE;AAGL,MAAa,0DACX,EACG,OAAO;CACN,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CACtC,gBAAgB,EAAE,QAAQ,CAAC,UAAU;CACtC,CAAC,CACD,WAAU,OAAM;CACf,QAAQ,EAAE;CACV,iBAAiB,EAAE;CACpB,EAAE;AAGP,MAAa,oEACX,EACG,OAAO,EACN,iBAAiB,EAAE,SAAS,CAAC,UAAU,EACxC,CAAC,CACD,WAAU,OAAM,EACf,kBAAkB,EAAE,iBACrB,EAAE;AAGP,MAAa,yDACX,EACG,OAAO,EACN,iBAAiB,EAAE,SAAS,CAAC,UAAU,EACxC,CAAC,CACD,WAAU,OAAM,EACf,kBAAkB,EAAE,iBACrB,EAAE;AAGP,MAAa,2DACX,EACG,OAAO,EACN,iBAAiB,EAAE,SAAS,CAAC,UAAU,EACxC,CAAC,CACD,WAAU,OAAM,EACf,kBAAkB,EAAE,iBACrB,EAAE;AAGP,MAAa,mDAA8D,EACxE,OAAO;CACN,cAAc,EAAE,QAAQ,CAAC,UAAU;CACnC,YAAY,EACT,MACC,EAAE,WAAW,yDAAyD,CACvE,CACA,UAAU;CACd,CAAC,CACD,WAAU,OAAM;CACf,eAAe,EAAE;CACjB,YAAY,EAAE;CACf,EAAE;AAGL,MAAa,2DACX,EACG,OAAO;CACN,eAAe,EAAE,QAAQ,CAAC,UAAU;CACpC,aAAa,EAAE,QAAQ,CAAC,UAAU;CACnC,CAAC,CACD,WAAU,OAAM;CACf,gBAAgB,EAAE;CAClB,cAAc,EAAE;CACjB,EAAE;AAGP,MAAa,yDACX,EACG,OAAO;CACN,iBAAiB,EAAE,QAAQ,CAAC,UAAU;CACtC,WAAW,EACR,MACC,EAAE,WACM,4DACP,CACF,CACA,UAAU;CACb,YAAY,EACT,MACC,EAAE,WACM,4DACP,CACF,CACA,UAAU;CACd,CAAC,CACD,WAAU,OAAM;CACf,kBAAkB,EAAE;CACpB,YAAY,EAAE;CACd,aAAa,EAAE;CAChB,EAAE;AAGP,MAAa,8DACX,EACG,OAAO;CACN,QAAQ,EACL,WACO,8DACP,CACA,UAAU;CACb,aAAa,EACV,WAAW,qDAAqD,CAChE,UAAU;CACb,gBAAgB,EACb,WAAW,iDAAiD,CAC5D,UAAU;CACb,OAAO,EAAE,QAAQ,CAAC,UAAU;CAC7B,CAAC,CACD,WAAU,OAAM;CACf,QAAQ,EAAE;CACV,aAAa,EAAE;CACf,gBAAgB,EAAE;CAClB,OAAO,EAAE;CACV,EAAE;AAGP,MAAa,gEACX,EACG,OAAO,EACN,QAAQ,EACL,mBAAmB,SAAS,CAC3B,EAAE,OAAO;CACP,OAAO,EAAE,QAAQ,sBAAsB;CACvC,qBAAqB,EAAE,SAAS;CACjC,CAAC,EACF,EAAE,OAAO;CACP,OAAO,EAAE,QAAQ,qBAAqB;CACtC,oBAAoB,EAAE,WACd,kDACP;CACF,CAAC,CACH,CAAC,CACD,UAAU,EACd,CAAC,CACD,WAAU,OAAM;CACf,GAAI,EAAE,QAAQ,UAAU,yBAAyB,EAC/C,uBAAuB,EAAE,OAAO,qBACjC;CACD,GAAI,EAAE,QAAQ,UAAU,wBAAwB,EAC9C,qBAAqB,EAAE,OAAO,oBAC/B;CACF,EAAE;AAGP,MAAa,8CAAyD,EACnE,OAAO,EACN,aAAa,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU,EAC5C,CAAC,CACD,WAAU,OAAM,EACf,cAAc,EAAE,aACjB,EAAE;AAGL,MAAa,6CAAwD,EAClE,OAAO,EACN,UAAU,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU,EACzC,CAAC,CACD,WAAU,OAAM,EACf,WAAW,EAAE,UACd,EAAE;AAGL,MAAa,+DACX,EACG,OAAO,EACN,iBAAiB,EAAE,SAAS,CAAC,UAAU,EACxC,CAAC,CACD,WAAU,OAAM,EACf,kBAAkB,EAAE,iBACrB,EAAE;AAGP,MAAa,kDAA6D,EACvE,OAAO;CACN,iBAAiB,EAAE,QAAQ,CAAC,UAAU;CACtC,WAAW,EACR,MAAM,EAAE,WAAW,qDAAqD,CAAC,CACzE,UAAU;CACb,YAAY,EACT,MAAM,EAAE,WAAW,qDAAqD,CAAC,CACzE,UAAU;CACd,CAAC,CACD,WAAU,OAAM;CACf,kBAAkB,EAAE;CACpB,YAAY,EAAE;CACd,aAAa,EAAE;CAChB,EAAE;AAGL,MAAa,uDAAkE,EAC5E,OAAO;CACN,QAAQ,EACL,WAAW,uDAAuD,CAClE,UAAU;CACb,aAAa,EACV,WAAW,qDAAqD,CAChE,UAAU;CACb,gBAAgB,EACb,WAAW,iDAAiD,CAC5D,UAAU;CACb,OAAO,EAAE,QAAQ,CAAC,UAAU;CAC7B,CAAC,CACD,WAAU,OAAM;CACf,QAAQ,EAAE;CACV,aAAa,EAAE;CACf,gBAAgB,EAAE;CAClB,OAAO,EAAE;CACV,EAAE;AAGL,MAAa,yDACX,EACG,OAAO,EACN,QAAQ,EACL,mBAAmB,SAAS;CAC3B,EAAE,OAAO;EACP,OAAO,EAAE,QAAQ,YAAY;EAC7B,WAAW,EAAE,WACL,4CACP;EACF,CAAC;CACF,EAAE,OAAO;EACP,OAAO,EAAE,QAAQ,yBAAyB;EAC1C,wBAAwB,EAAE,SAAS;EACpC,CAAC;CACF,EAAE,OAAO;EACP,OAAO,EAAE,QAAQ,4BAA4B;EAC7C,2BAA2B,EAAE,SAAS;EACvC,CAAC;CACF,EAAE,OAAO;EACP,OAAO,EAAE,QAAQ,mBAAmB;EACpC,kBAAkB,EAAE,SAAS;EAC9B,CAAC;CACH,CAAC,CACD,UAAU,EACd,CAAC,CACD,WAAU,OAAM;CACf,GAAI,EAAE,QAAQ,UAAU,eAAe,EAAC,WAAW,EAAE,OAAO,WAAU;CACtE,GAAI,EAAE,QAAQ,UAAU,4BAA4B,EAClD,0BAA0B,EAAE,OAAO,wBACpC;CACD,GAAI,EAAE,QAAQ,UAAU,+BAA+B,EACrD,8BAA8B,EAAE,OAAO,2BACxC;CACD,GAAI,EAAE,QAAQ,UAAU,sBAAsB,EAC5C,oBAAoB,EAAE,OAAO,kBAC9B;CACF,EAAE;AAGP,MAAa,iDAA4D,EACtE,OAAO;CACN,iBAAiB,EAAE,QAAQ,CAAC,UAAU;CACtC,WAAW,EACR,MAAM,EAAE,WAAW,oDAAoD,CAAC,CACxE,UAAU;CACb,YAAY,EACT,MAAM,EAAE,WAAW,oDAAoD,CAAC,CACxE,UAAU;CACd,CAAC,CACD,WAAU,OAAM;CACf,kBAAkB,EAAE;CACpB,YAAY,EAAE;CACd,aAAa,EAAE;CAChB,EAAE;AAGL,MAAa,sDAAiE,EAC3E,OAAO;CACN,QAAQ,EACL,WAAW,sDAAsD,CACjE,UAAU;CACb,aAAa,EACV,WAAW,qDAAqD,CAChE,UAAU;CACb,gBAAgB,EACb,WAAW,iDAAiD,CAC5D,UAAU;CACb,OAAO,EAAE,QAAQ,CAAC,UAAU;CAC7B,CAAC,CACD,WAAU,OAAM;CACf,QAAQ,EAAE;CACV,aAAa,EAAE;CACf,gBAAgB,EAAE;CAClB,OAAO,EAAE;CACV,EAAE;AAGL,MAAa,wDACX,EACG,OAAO,EACN,QAAQ,EACL,mBAAmB,SAAS;CAC3B,EAAE,OAAO;EAAC,OAAO,EAAE,QAAQ,cAAc;EAAE,aAAa,EAAE,SAAS;EAAC,CAAC;CACrE,EAAE,OAAO;EACP,OAAO,EAAE,QAAQ,mBAAmB;EACpC,kBAAkB,EAAE,WACZ,2CACP;EACF,CAAC;CACF,EAAE,OAAO;EACP,OAAO,EAAE,QAAQ,mBAAmB;EACpC,kBAAkB,EAAE,WACZ,2CACP;EACF,CAAC;CACH,CAAC,CACD,UAAU,EACd,CAAC,CACD,WAAU,OAAM;CACf,GAAI,EAAE,QAAQ,UAAU,iBAAiB,EACvC,eAAe,EAAE,OAAO,aACzB;CACD,GAAI,EAAE,QAAQ,UAAU,sBAAsB,EAC5C,oBAAoB,EAAE,OAAO,kBAC9B;CACD,GAAI,EAAE,QAAQ,UAAU,sBAAsB,EAC5C,oBAAoB,EAAE,OAAO,kBAC9B;CACF,EAAE;AAGP,MAAa,uDAAkE,EAC5E,OAAO;CACN,iBAAiB,EAAE,SAAS,CAAC,UAAU;CACvC,aAAa,EACV,WAAW,yDAAyD,CACpE,UAAU;CACb,cAAc,EACX,WAAW,0DAA0D,CACrE,UAAU;CACb,aAAa,EACV,WAAW,yDAAyD,CACpE,UAAU;CACb,iBAAiB,EACd,WAAW,6DAA6D,CACxE,UAAU;CACb,WAAW,EACR,WAAW,uDAAuD,CAClE,UAAU;CACb,YAAY,EACT,WAAW,wDAAwD,CACnE,UAAU;CACb,sBAAsB,EACnB,WACO,kEACP,CACA,UAAU;CACd,CAAC,CACD,WAAU,OAAM;CACf,kBAAkB,EAAE;CACpB,cAAc,EAAE;CAChB,eAAe,EAAE;CACjB,cAAc,EAAE;CAChB,kBAAkB,EAAE;CACpB,YAAY,EAAE;CACd,aAAa,EAAE;CACf,wBAAwB,EAAE;CAC3B,EAAE;AAGL,MAAa,4DACX,EACG,OAAO;CACN,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CACtC,gBAAgB,EAAE,QAAQ,CAAC,UAAU;CACtC,CAAC,CACD,WAAU,OAAM;CACf,QAAQ,EAAE;CACV,iBAAiB,EAAE;CACpB,EAAE;AAGP,MAAa,oDAA+D,EACzE,OAAO,EACN,cAAc,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU,EAC7C,CAAC,CACD,WAAU,OAAM,EACf,eAAe,EAAE,cAClB,EAAE;AAGL,MAAa,2DACX,EACG,OAAO,EACN,iBAAiB,EAAE,SAAS,CAAC,UAAU,EACxC,CAAC,CACD,WAAU,OAAM,EACf,kBAAkB,EAAE,iBACrB,EAAE;AAEP,MAAa,+DACX,EACG,OAAO;CACN,QAAQ,EAAE,QAAQ,CAAC,UAAU;CAC7B,6BAA6B,EAAE,QAAQ,CAAC,UAAU;CAClD,WAAW,EAAE,QAAQ,CAAC,UAAU;CAChC,iBAAiB,EAAE,QAAQ,CAAC,UAAU;CACtC,aAAa,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CAC3C,eAAe,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CAC7C,eAAe,EAAE,QAAQ,CAAC,UAAU;CACpC,iBAAiB,EAAE,QAAQ,CAAC,UAAU;CACtC,cAAc,EAAE,QAAQ,CAAC,UAAU;CACnC,aAAa,EAAE,QAAQ,CAAC,UAAU;CAClC,aAAa,EAAE,SAAS,CAAC,UAAU;CACnC,eAAe,EAAE,QAAQ,CAAC,UAAU;CACpC,SAAS,EAAE,SAAS,CAAC,UAAU;CAC/B,cAAc,EAAE,QAAQ,CAAC,UAAU;CACpC,CAAC,CACD,WAAU,OAAM;CACf,SAAS,EAAE;CACX,gCAAgC,EAAE;CAClC,YAAY,EAAE;CACd,kBAAkB,EAAE;CACpB,cAAc,EAAE;CAChB,gBAAgB,EAAE;CAClB,iBAAiB,EAAE;CACnB,kBAAkB,EAAE;CACpB,eAAe,EAAE;CACjB,cAAc,EAAE;CAChB,aAAa,EAAE;CACf,gBAAgB,EAAE;CAClB,SAAS,EAAE;CACX,eAAe,EAAE;CAClB,EAAE;AAEP,MAAa,iEACX,EACG,OAAO;CACN,QAAQ,EAAE,QAAQ,CAAC,UAAU;CAC7B,6BAA6B,EAAE,QAAQ,CAAC,UAAU;CAClD,YAAY,EAAE,QAAQ,CAAC,UAAU;CACjC,SAAS,EAAE,QAAQ,CAAC,UAAU;CAC9B,cAAc,EAAE,QAAQ,CAAC,UAAU;CACnC,iBAAiB,EAAE,QAAQ,CAAC,UAAU;CACtC,cAAc,EAAE,QAAQ,CAAC,UAAU;CACnC,aAAa,EAAE,QAAQ,CAAC,UAAU;CAClC,aAAa,EAAE,SAAS,CAAC,UAAU;CACnC,eAAe,EAAE,QAAQ,CAAC,UAAU;CACpC,aAAa,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CAC3C,cAAc,EAAE,QAAQ,CAAC,UAAU;CACpC,CAAC,CACD,WAAU,OAAM;CACf,SAAS,EAAE;CACX,gCAAgC,EAAE;CAClC,aAAa,EAAE;CACf,UAAU,EAAE;CACZ,eAAe,EAAE;CACjB,kBAAkB,EAAE;CACpB,eAAe,EAAE;CACjB,cAAc,EAAE;CAChB,aAAa,EAAE;CACf,gBAAgB,EAAE;CAClB,cAAc,EAAE;CAChB,eAAe,EAAE;CAClB,EAAE;AAGP,MAAa,iEACX,EACG,OAAO;CACN,0BAA0B,EACvB,WAEG,wFACH,CACA,UAAU;CACb,iBAAiB,EACd,WAEG,+EACH,CACA,UAAU;CACd,CAAC,CACD,WAAU,OAAM;CACf,6BAA6B,EAAE;CAC/B,oBAAoB,EAAE;CACvB,EAAE;AAGP,MAAa,iFACX,EACG,OAAO,EACN,YAAY,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU,EAC3C,CAAC,CACD,WAAU,OAAM,EACf,aAAa,EAAE,YAChB,EAAE;AAGP,MAAa,0FACX,EACG,OAAO;CACN,cAAc,EAAE,QAAQ,CAAC,UAAU;CACnC,gBAAgB,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CAC9C,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CACxC,CAAC,CACD,WAAU,OAAM;CACf,eAAe,EAAE;CACjB,iBAAiB,EAAE;CACnB,SAAS,EAAE;CACZ,EAAE;AAEP,MAAa,mCAA8C,EACxD,OAAO;CACN,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CACvC,gBAAgB,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CAC/C,CAAC,CACD,WAAU,OAAM;CACf,UAAU,EAAE;CACZ,iBAAiB,EAAE;CACpB,EAAE;AAEL,MAAa,qCAAgD,EAC1D,OAAO;CACN,yBAAyB,EAAE,QAAQ,CAAC,UAAU;CAC9C,WAAW,EAAE,QAAQ,CAAC,UAAU;CAChC,2BAA2B,EAAE,QAAQ,CAAC,UAAU;CAChD,QAAQ,EAAE,QAAQ,CAAC,UAAU;CAC7B,qBAAqB,EAAE,SAAS,CAAC,UAAU;CAC3C,oBAAoB,EAAE,QAAQ,CAAC,UAAU;CACzC,uBAAuB,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CACtD,CAAC,CACD,WAAU,OAAM;CACf,4BAA4B,EAAE;CAC9B,YAAY,EAAE;CACd,8BAA8B,EAAE;CAChC,QAAQ,EAAE;CACV,uBAAuB,EAAE;CACzB,sBAAsB,EAAE;CACxB,0BAA0B,EAAE;CAC7B,EAAE;AAEL,MAAa,iDAA4D,EACtE,OAAO;CACN,WAAW,EAAE,QAAQ,CAAC,UAAU;CAChC,QAAQ,EAAE,QAAQ,CAAC,UAAU;CAC7B,OAAO,EAAE,QAAQ,CAAC,UAAU;CAC5B,UAAU,EAAE,QAAQ,CAAC,UAAU;CAC/B,aAAa,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CAC3C,SAAS,EAAE,SAAS,CAAC,UAAU;CAChC,CAAC,CACD,WAAU,OAAM;CACf,YAAY,EAAE;CACd,SAAS,EAAE;CACX,OAAO,EAAE;CACT,WAAW,EAAE;CACb,cAAc,EAAE;CAChB,SAAS,EAAE;CACZ,EAAE;AAEL,MAAa,0CAAqD,EAC/D,OAAO;CACN,QAAQ,EAAE,QAAQ,CAAC,UAAU;CAC7B,OAAO,EAAE,QAAQ,CAAC,UAAU;CAC5B,UAAU,EAAE,QAAQ,CAAC,UAAU;CAC/B,aAAa,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CAC3C,SAAS,EAAE,SAAS,CAAC,UAAU;CAChC,CAAC,CACD,WAAU,OAAM;CACf,SAAS,EAAE;CACX,OAAO,EAAE;CACT,WAAW,EAAE;CACb,cAAc,EAAE;CAChB,SAAS,EAAE;CACZ,EAAE;AAEL,MAAa,gDAA2D,EACrE,OAAO;CACN,WAAW,EAAE,QAAQ,CAAC,UAAU;CAChC,QAAQ,EAAE,QAAQ,CAAC,UAAU;CAC7B,OAAO,EAAE,QAAQ,CAAC,UAAU;CAC5B,UAAU,EAAE,QAAQ,CAAC,UAAU;CAC/B,aAAa,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CAC3C,SAAS,EAAE,SAAS,CAAC,UAAU;CAChC,CAAC,CACD,WAAU,OAAM;CACf,YAAY,EAAE;CACd,SAAS,EAAE;CACX,OAAO,EAAE;CACT,WAAW,EAAE;CACb,cAAc,EAAE;CAChB,SAAS,EAAE;CACZ,EAAE;AAEL,MAAa,yCAAoD,EAC9D,OAAO;CACN,QAAQ,EAAE,QAAQ,CAAC,UAAU;CAC7B,OAAO,EAAE,QAAQ,CAAC,UAAU;CAC5B,UAAU,EAAE,QAAQ,CAAC,UAAU;CAC/B,aAAa,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CAC3C,SAAS,EAAE,SAAS,CAAC,UAAU;CAChC,CAAC,CACD,WAAU,OAAM;CACf,SAAS,EAAE;CACX,OAAO,EAAE;CACT,WAAW,EAAE;CACb,cAAc,EAAE;CAChB,SAAS,EAAE;CACZ,EAAE;AAEL,MAAa,yCAAoD,EAC9D,OAAO;CACN,QAAQ,EAAE,QAAQ,CAAC,UAAU;CAC7B,6BAA6B,EAAE,QAAQ,CAAC,UAAU;CAClD,iBAAiB,EAAE,QAAQ,CAAC,UAAU;CACtC,aAAa,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CAC3C,cAAc,EAAE,QAAQ,CAAC,UAAU;CACnC,aAAa,EAAE,QAAQ,CAAC,UAAU;CAClC,aAAa,EAAE,SAAS,CAAC,UAAU;CACnC,eAAe,EAAE,QAAQ,CAAC,UAAU;CACpC,cAAc,EAAE,QAAQ,CAAC,UAAU;CACnC,YAAY,EAAE,QAAQ,CAAC,UAAU;CACjC,SAAS,EAAE,QAAQ,CAAC,UAAU;CAC9B,cAAc,EAAE,QAAQ,CAAC,UAAU;CACnC,WAAW,EAAE,QAAQ,CAAC,UAAU;CAChC,iBAAiB,EAAE,QAAQ,CAAC,UAAU;CACtC,eAAe,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CAC7C,eAAe,EAAE,QAAQ,CAAC,UAAU;CACpC,SAAS,EAAE,SAAS,CAAC,UAAU;CAC/B,UAAU,EACP,mBAAmB,SAAS,CAC3B,EAAE,OAAO;EACP,OAAO,EAAE,QAAQ,cAAc;EAC/B,aAAa,EAAE,WAAW,yBAAyB;EACpD,CAAC,CACH,CAAC,CACD,UAAU;CACd,CAAC,CACD,WAAU,OAAM;CACf,SAAS,EAAE;CACX,gCAAgC,EAAE;CAClC,kBAAkB,EAAE;CACpB,cAAc,EAAE;CAChB,eAAe,EAAE;CACjB,cAAc,EAAE;CAChB,aAAa,EAAE;CACf,gBAAgB,EAAE;CAClB,eAAe,EAAE;CACjB,aAAa,EAAE;CACf,UAAU,EAAE;CACZ,eAAe,EAAE;CACjB,YAAY,EAAE;CACd,kBAAkB,EAAE;CACpB,gBAAgB,EAAE;CAClB,iBAAiB,EAAE;CACnB,SAAS,EAAE;CACX,GAAI,EAAE,UAAU,UAAU,iBAAiB,EACzC,cAAc,EAAE,SAAS,aAC1B;CACF,EAAE;AAEL,MAAa,sCAAiD,EAC3D,OAAO;CACN,iBAAiB,EAAE,QAAQ,CAAC,UAAU;CACtC,aAAa,EAAE,QAAQ,CAAC,UAAU;CACnC,CAAC,CACD,WAAU,OAAM;CACf,mBAAmB,EAAE;CACrB,cAAc,EAAE;CACjB,EAAE;AAEL,MAAM,6BAA8C;CAClD,kBAAkB,EAAC,MAAM,uBAAsB;CAC/C,oBAAoB;EAClB,MAAM;EACN,gBAAgB;EACjB;CACD,gBAAgB,EAAC,MAAM,oBAAmB;CAC1C,mBAAmB,EAAC,MAAM,sBAAqB;CAChD;AAED,MAAM,oCAAqD,EACzD,WAAW,EAAC,MAAM,aAAY,EAC/B;AAED,MAAM,2CAA4D;CAChE,WAAW,EAAC,MAAM,cAAa;CAC/B,iBAAiB,EAAC,MAAM,oBAAmB;CAC3C,cAAc,EAAC,MAAM,iBAAgB;CACrC,aAAa,EAAC,MAAM,eAAc;CAClC,eAAe,EAAC,MAAM,kBAAiB;CACvC,aAAa,EAAC,MAAM,gBAAe;CACnC,SAAS,EAAC,MAAM,WAAU;CAC1B,cAAc,EAAC,MAAM,iBAAgB;CACrC,iBAAiB,EAAC,MAAM,oBAAmB;CAC3C,cAAc,EAAC,MAAM,iBAAgB;CACrC,aAAa;EACX,MAAM;EACN,gBAAgB;EACjB;CACD,SAAS,EAAC,MAAM,YAAW;CAC3B,6BAA6B,EAAC,MAAM,kCAAiC;CACrE,YAAY,EAAC,MAAM,eAAc;CACjC,eAAe,EAAC,MAAM,kBAAiB;CACvC,QAAQ,EAAC,MAAM,WAAU;CACzB,aAAa,EAAC,MAAM,gBAAe;CACnC,eAAe,EAAC,MAAM,mBAAkB;CACzC;AAED,SAAgB,mCACd,GAAG,OACmC;AACtC,QAAO,UAAU,MACf,OACA,yCACD"}
+{"version":3,"file":"model.js","names":[],"sources":["../../src/v1/model.ts"],"sourcesContent":["// Code generated from API definition by Databricks SDK Generator. DO NOT EDIT.\n\nimport {Temporal} from '@js-temporal/polyfill';\nimport {FieldMask} from '@databricks/sdk-core/wkt';\nimport type {FieldMaskSchema} from '@databricks/sdk-core/wkt';\nimport {z} from 'zod';\n\n/**\n * The target resources that are supported by Network Connectivity Config.\n * Note: some egress types can support general types that are not defined in EgressResourceType.\n * E.g.: Azure private endpoint supports private link enabled Azure services.\n */\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Enum-style const object.\nexport const EgressResourceType = {\n  EGRESS_RESOURCE_TYPE_UNSPECIFIED: 'EGRESS_RESOURCE_TYPE_UNSPECIFIED',\n  AZURE_BLOB_STORAGE: 'AZURE_BLOB_STORAGE',\n} as const;\nexport type EgressResourceType =\n  | (typeof EgressResourceType)[keyof typeof EgressResourceType]\n  | (string & {});\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Enum-style const object.\nexport const EndpointState = {\n  /** The endpoint is pending approval. */\n  PENDING: 'PENDING',\n  /** The endpoint has been approved and is ready for use. */\n  APPROVED: 'APPROVED',\n  /** The endpoint encountered some issues during setup. */\n  FAILED: 'FAILED',\n  /** The endpoint was once established but later disconnected. This endpoint doesn't provide connectivity. */\n  DISCONNECTED: 'DISCONNECTED',\n} as const;\nexport type EndpointState =\n  | (typeof EndpointState)[keyof typeof EndpointState]\n  | (string & {});\n\n/**\n * Type of IP access list. Valid values are as follows and are case-sensitive:\n *\n * * `ALLOW`: An allow list. Include this IP or range.\n * * `BLOCK`: A block list. Exclude this IP or range. IP addresses in the block list are excluded even if they are included in an allow list.\n */\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Enum-style const object.\nexport const IpAccessListType = {\n  ALLOW: 'ALLOW',\n  /** Blocks the associated CIDRs. */\n  BLOCK: 'BLOCK',\n} as const;\nexport type IpAccessListType =\n  | (typeof IpAccessListType)[keyof typeof IpAccessListType]\n  | (string & {});\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Enum-style const object.\nexport const PrivateAccessLevel = {\n  /** Only specifically listed endpoints can access my workspace */\n  ENDPOINT: 'ENDPOINT',\n  /** Only endpoints in the same account can access my workspace */\n  ACCOUNT: 'ACCOUNT',\n} as const;\nexport type PrivateAccessLevel =\n  | (typeof PrivateAccessLevel)[keyof typeof PrivateAccessLevel]\n  | (string & {});\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Enum-style const object.\nexport const VpcEndpointUseCase = {\n  WORKSPACE_ACCESS: 'WORKSPACE_ACCESS',\n  DATAPLANE_RELAY_ACCESS: 'DATAPLANE_RELAY_ACCESS',\n  /** General access, replaces WORKSPACE_ACCESS in customer-facing API. */\n  GENERAL_ACCESS: 'GENERAL_ACCESS',\n} as const;\nexport type VpcEndpointUseCase =\n  | (typeof VpcEndpointUseCase)[keyof typeof VpcEndpointUseCase]\n  | (string & {});\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Enum-style const object.\nexport const VpcStatus = {\n  VALID: 'VALID',\n  BROKEN: 'BROKEN',\n  UNATTACHED: 'UNATTACHED',\n  /** Some optional tests are failing for this Vpc, see NetworkWarning for more information */\n  WARNED: 'WARNED',\n} as const;\nexport type VpcStatus =\n  | (typeof VpcStatus)[keyof typeof VpcStatus]\n  | (string & {});\n\n/**\n * Type of IP access list. Valid values are as follows and are case-sensitive:\n *\n * * `ALLOW`: An allow list. Include this IP or range.\n * * `BLOCK`: A block list. Exclude this IP or range. IP addresses in the block list are excluded even if they are included in an allow list.\n */\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Enum-style const object.\nexport const AccountIpAccessListType_IpAccessListType = {\n  /** Allows the associated CIDRs. */\n  ALLOW: 'ALLOW',\n  /** Blocks the associated CIDRs. */\n  BLOCK: 'BLOCK',\n} as const;\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested enum name.\nexport type AccountIpAccessListType_IpAccessListType =\n  | (typeof AccountIpAccessListType_IpAccessListType)[keyof typeof AccountIpAccessListType_IpAccessListType]\n  | (string & {});\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Enum-style const object.\nexport const EgressNetworkPolicy_NetworkAccessPolicy_InternetDestination_InternetDestinationType =\n  {\n    INTERNET_DESTINATION_TYPE_UNSPECIFIED:\n      'INTERNET_DESTINATION_TYPE_UNSPECIFIED',\n    /** This is defined as `FQDN` in settings-policy/api/proto/messages.proto. Translation is done in accounts-lake-net-manager/src/util/NetworkPolicySettingUtil.scala. */\n    DNS_NAME: 'DNS_NAME',\n  } as const;\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested enum name.\nexport type EgressNetworkPolicy_NetworkAccessPolicy_InternetDestination_InternetDestinationType =\n\n    | (typeof EgressNetworkPolicy_NetworkAccessPolicy_InternetDestination_InternetDestinationType)[keyof typeof EgressNetworkPolicy_NetworkAccessPolicy_InternetDestination_InternetDestinationType]\n    | (string & {});\n\n/** The values should match the list of workloads used in networkconfig.proto */\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Enum-style const object.\nexport const EgressNetworkPolicy_NetworkAccessPolicy_PolicyEnforcement_DryRunModeProductFilter =\n  {\n    DRY_RUN_MODE_PRODUCT_FILTER_UNSPECIFIED:\n      'DRY_RUN_MODE_PRODUCT_FILTER_UNSPECIFIED',\n    /** SQL Warehouse product */\n    DBSQL: 'DBSQL',\n    /** Machine Learning serving product */\n    ML_SERVING: 'ML_SERVING',\n  } as const;\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested enum name.\nexport type EgressNetworkPolicy_NetworkAccessPolicy_PolicyEnforcement_DryRunModeProductFilter =\n\n    | (typeof EgressNetworkPolicy_NetworkAccessPolicy_PolicyEnforcement_DryRunModeProductFilter)[keyof typeof EgressNetworkPolicy_NetworkAccessPolicy_PolicyEnforcement_DryRunModeProductFilter]\n    | (string & {});\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Enum-style const object.\nexport const EgressNetworkPolicy_NetworkAccessPolicy_PolicyEnforcement_EnforcementMode =\n  {\n    ENFORCEMENT_MODE_UNSPECIFIED: 'ENFORCEMENT_MODE_UNSPECIFIED',\n    /** Blocks traffic that violates network policy. This is the default mode. */\n    ENFORCED: 'ENFORCED',\n    /** Logs violations without blocking traffic. Useful for testing policies before enforcement. */\n    DRY_RUN: 'DRY_RUN',\n  } as const;\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested enum name.\nexport type EgressNetworkPolicy_NetworkAccessPolicy_PolicyEnforcement_EnforcementMode =\n\n    | (typeof EgressNetworkPolicy_NetworkAccessPolicy_PolicyEnforcement_EnforcementMode)[keyof typeof EgressNetworkPolicy_NetworkAccessPolicy_PolicyEnforcement_EnforcementMode]\n    | (string & {});\n\n/**\n * At which level can <Databricks> and <Databricks> managed compute access Internet.\n * FULL_ACCESS: <Databricks> can access Internet. No blocking rules will apply.\n * RESTRICTED_ACCESS: <Databricks> can only access explicitly allowed internet and storage destinations,\n * as well as UC connections and external locations.\n */\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Enum-style const object.\nexport const EgressNetworkPolicy_NetworkAccessPolicy_RestrictionMode = {\n  RESTRICTION_MODE_UNSPECIFIED: 'RESTRICTION_MODE_UNSPECIFIED',\n  FULL_ACCESS: 'FULL_ACCESS',\n  RESTRICTED_ACCESS: 'RESTRICTED_ACCESS',\n} as const;\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested enum name.\nexport type EgressNetworkPolicy_NetworkAccessPolicy_RestrictionMode =\n  | (typeof EgressNetworkPolicy_NetworkAccessPolicy_RestrictionMode)[keyof typeof EgressNetworkPolicy_NetworkAccessPolicy_RestrictionMode]\n  | (string & {});\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Enum-style const object.\nexport const EgressNetworkPolicy_NetworkAccessPolicy_StorageDestination_StorageDestinationType =\n  {\n    STORAGE_DESTINATION_TYPE_UNSPECIFIED:\n      'STORAGE_DESTINATION_TYPE_UNSPECIFIED',\n    /**\n     * AWS_S3 can be used both for direct AWS S3 access and for cross-cloud access from Azure and GCP\n     * When used in an Azure/GCP context, this indicates cross-cloud access from Azure/GCP to the specified S3 bucket\n     */\n    AWS_S3: 'AWS_S3',\n    AZURE_STORAGE: 'AZURE_STORAGE',\n    GOOGLE_CLOUD_STORAGE: 'GOOGLE_CLOUD_STORAGE',\n  } as const;\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested enum name.\nexport type EgressNetworkPolicy_NetworkAccessPolicy_StorageDestination_StorageDestinationType =\n\n    | (typeof EgressNetworkPolicy_NetworkAccessPolicy_StorageDestination_StorageDestinationType)[keyof typeof EgressNetworkPolicy_NetworkAccessPolicy_StorageDestination_StorageDestinationType]\n    | (string & {});\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Enum-style const object.\nexport const EndpointUseCase_EndpointUseCase = {\n  /** service-direct frontend private link connectivity. */\n  SERVICE_DIRECT: 'SERVICE_DIRECT',\n} as const;\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested enum name.\nexport type EndpointUseCase_EndpointUseCase =\n  | (typeof EndpointUseCase_EndpointUseCase)[keyof typeof EndpointUseCase_EndpointUseCase]\n  | (string & {});\n\n/**\n * Qualifies the breadth of API access permitted by an ingress network policy rule.\n * API_SCOPE_QUALIFIER_READ narrows matching to read-only variants of the listed scopes;\n * API_SCOPE_QUALIFIER_ALL matches any scope. When unset, scopes match exactly as listed.\n */\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Enum-style const object.\nexport const IngressNetworkPolicy_ApiScopeQualifier = {\n  /** Narrows matching to read-only variants of the listed scopes (e.g. GET/HEAD requests). */\n  API_SCOPE_QUALIFIER_READ: 'API_SCOPE_QUALIFIER_READ',\n  /** Matches any scope regardless of access level. */\n  API_SCOPE_QUALIFIER_ALL: 'API_SCOPE_QUALIFIER_ALL',\n} as const;\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested enum name.\nexport type IngressNetworkPolicy_ApiScopeQualifier =\n  | (typeof IngressNetworkPolicy_ApiScopeQualifier)[keyof typeof IngressNetworkPolicy_ApiScopeQualifier]\n  | (string & {});\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Enum-style const object.\nexport const IngressNetworkPolicy_Authentication_IdentityType = {\n  IDENTITY_TYPE_UNSPECIFIED: 'IDENTITY_TYPE_UNSPECIFIED',\n  IDENTITY_TYPE_ALL_USERS: 'IDENTITY_TYPE_ALL_USERS',\n  IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS: 'IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS',\n  IDENTITY_TYPE_SELECTED_IDENTITIES: 'IDENTITY_TYPE_SELECTED_IDENTITIES',\n} as const;\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested enum name.\nexport type IngressNetworkPolicy_Authentication_IdentityType =\n  | (typeof IngressNetworkPolicy_Authentication_IdentityType)[keyof typeof IngressNetworkPolicy_Authentication_IdentityType]\n  | (string & {});\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Enum-style const object.\nexport const IngressNetworkPolicy_AuthenticationIdentity_PrincipalType = {\n  PRINCIPAL_TYPE_UNSPECIFIED: 'PRINCIPAL_TYPE_UNSPECIFIED',\n  PRINCIPAL_TYPE_USER: 'PRINCIPAL_TYPE_USER',\n  PRINCIPAL_TYPE_SERVICE_PRINCIPAL: 'PRINCIPAL_TYPE_SERVICE_PRINCIPAL',\n} as const;\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested enum name.\nexport type IngressNetworkPolicy_AuthenticationIdentity_PrincipalType =\n  | (typeof IngressNetworkPolicy_AuthenticationIdentity_PrincipalType)[keyof typeof IngressNetworkPolicy_AuthenticationIdentity_PrincipalType]\n  | (string & {});\n\n/**\n * The restriction mode for cross-workspace access. In FULL_ACCESS mode, requests from any\n * source workspace (in any account) are allowed, and deny rules and allow rules cannot be set.\n * In RESTRICTED_ACCESS mode, access is restricted based on deny rules and allow rules;\n * requests that do not match any allow rule are denied. In LEGACY_MODE, cross-workspace\n * ingress is not governed by this policy.\n */\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Enum-style const object.\nexport const IngressNetworkPolicy_CrossWorkspaceAccess_RestrictionMode = {\n  /**\n   * Allows requests from any source workspace, regardless of account. Deny rules and allow\n   * rules cannot be set in this mode.\n   */\n  FULL_ACCESS: 'FULL_ACCESS',\n  /**\n   * Restricts access based on deny rules and allow rules. Requests that do not match any\n   * allow rule are denied.\n   */\n  RESTRICTED_ACCESS: 'RESTRICTED_ACCESS',\n  /**\n   * Cross-workspace ingress is not governed by this policy. Traffic from other workspaces is\n   * subject only to the workspace's pre-existing network controls, not to the allow and deny\n   * rules configured here.\n   */\n  LEGACY_MODE: 'LEGACY_MODE',\n} as const;\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested enum name.\nexport type IngressNetworkPolicy_CrossWorkspaceAccess_RestrictionMode =\n  | (typeof IngressNetworkPolicy_CrossWorkspaceAccess_RestrictionMode)[keyof typeof IngressNetworkPolicy_CrossWorkspaceAccess_RestrictionMode]\n  | (string & {});\n\n/**\n * The restriction mode for private access. In ALLOW_ALL_REGISTERED_ENDPOINTS mode,\n * requests arriving through any endpoint registered to the account are allowed, and\n * deny rules and allow rules cannot be set. In RESTRICTED_ACCESS mode, access is\n * restricted based on deny rules and allow rules; requests that do not match any\n * allow rule are denied.\n */\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Enum-style const object.\nexport const IngressNetworkPolicy_PrivateAccess_RestrictionMode = {\n  /**\n   * Allows requests arriving through any endpoint registered to the account.\n   * Deny rules and allow rules cannot be set in this mode.\n   */\n  ALLOW_ALL_REGISTERED_ENDPOINTS: 'ALLOW_ALL_REGISTERED_ENDPOINTS',\n  /**\n   * Restricts access based on deny rules and allow rules. Requests that do not\n   * match any allow rule are denied.\n   */\n  RESTRICTED_ACCESS: 'RESTRICTED_ACCESS',\n} as const;\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested enum name.\nexport type IngressNetworkPolicy_PrivateAccess_RestrictionMode =\n  | (typeof IngressNetworkPolicy_PrivateAccess_RestrictionMode)[keyof typeof IngressNetworkPolicy_PrivateAccess_RestrictionMode]\n  | (string & {});\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Enum-style const object.\nexport const IngressNetworkPolicy_PublicAccess_RestrictionMode = {\n  FULL_ACCESS: 'FULL_ACCESS',\n  RESTRICTED_ACCESS: 'RESTRICTED_ACCESS',\n} as const;\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested enum name.\nexport type IngressNetworkPolicy_PublicAccess_RestrictionMode =\n  | (typeof IngressNetworkPolicy_PublicAccess_RestrictionMode)[keyof typeof IngressNetworkPolicy_PublicAccess_RestrictionMode]\n  | (string & {});\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Enum-style const object.\nexport const NccPrivateEndpointRule_PrivateLinkConnectionState = {\n  PRIVATE_LINK_CONNECTION_STATE_UNSPECIFIED:\n    'PRIVATE_LINK_CONNECTION_STATE_UNSPECIFIED',\n  /** The endpoint has been approved and is ready to use in your serverless compute resources. */\n  ESTABLISHED: 'ESTABLISHED',\n  /** Connection was rejected by the private link resource owner. */\n  REJECTED: 'REJECTED',\n  /**\n   * Connection was removed by the private link resource owner, the private endpoint becomes informative and should\n   * be deleted for clean-up.\n   */\n  DISCONNECTED: 'DISCONNECTED',\n  /** If the endpoint was created but not approved in 14 days, it will be EXPIRED. */\n  EXPIRED: 'EXPIRED',\n  /** The endpoint has been created and pending approval. */\n  PENDING: 'PENDING',\n  /** The endpoint creation is in progress. */\n  CREATING: 'CREATING',\n  /** The endpoint creation failed. */\n  CREATE_FAILED: 'CREATE_FAILED',\n} as const;\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested enum name.\nexport type NccPrivateEndpointRule_PrivateLinkConnectionState =\n  | (typeof NccPrivateEndpointRule_PrivateLinkConnectionState)[keyof typeof NccPrivateEndpointRule_PrivateLinkConnectionState]\n  | (string & {});\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Enum-style const object.\nexport const NetworkConnectivityConfigAwsPrivateEndpointRule_PrivateLinkConnectionState =\n  {\n    PRIVATE_LINK_CONNECTION_STATE_UNSPECIFIED:\n      'PRIVATE_LINK_CONNECTION_STATE_UNSPECIFIED',\n    /** The endpoint has been approved and is ready to use in your serverless compute resources. */\n    ESTABLISHED: 'ESTABLISHED',\n    /** Connection was rejected by the private link resource owner. */\n    REJECTED: 'REJECTED',\n    /**\n     * Connection was removed by the private link resource owner, the private endpoint becomes informative and should\n     * be deleted for clean-up.\n     */\n    DISCONNECTED: 'DISCONNECTED',\n    /** If the endpoint is created but not approved in 14 days, it is EXPIRED. */\n    EXPIRED: 'EXPIRED',\n    /** The endpoint has been created and pending approval. */\n    PENDING: 'PENDING',\n    /** The endpoint creation is in progress. */\n    CREATING: 'CREATING',\n    /** The endpoint creation failed. */\n    CREATE_FAILED: 'CREATE_FAILED',\n  } as const;\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested enum name.\nexport type NetworkConnectivityConfigAwsPrivateEndpointRule_PrivateLinkConnectionState =\n\n    | (typeof NetworkConnectivityConfigAwsPrivateEndpointRule_PrivateLinkConnectionState)[keyof typeof NetworkConnectivityConfigAwsPrivateEndpointRule_PrivateLinkConnectionState]\n    | (string & {});\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Enum-style const object.\nexport const NetworkConnectivityConfigAzurePrivateEndpointRule_PrivateLinkConnectionState =\n  {\n    PRIVATE_LINK_CONNECTION_STATE_UNSPECIFIED:\n      'PRIVATE_LINK_CONNECTION_STATE_UNSPECIFIED',\n    /** The endpoint has been created and pending approval. */\n    INIT: 'INIT',\n    /** The endpoint has been approved and is ready to use in your serverless compute resources. */\n    ESTABLISHED: 'ESTABLISHED',\n    /** Connection was rejected by the private link resource owner. */\n    REJECTED: 'REJECTED',\n    /**\n     * Connection was removed by the private link resource owner, the private endpoint becomes informative and should\n     * be deleted for clean-up.\n     */\n    DISCONNECTED: 'DISCONNECTED',\n    /** If the endpoint was created but not approved in 14 days, it will be EXPIRED. */\n    EXPIRED: 'EXPIRED',\n    /** The endpoint has been created and pending approval. */\n    PENDING: 'PENDING',\n    /** The endpoint creation is in progress. */\n    CREATING: 'CREATING',\n    /** The endpoint creation failed. */\n    CREATE_FAILED: 'CREATE_FAILED',\n  } as const;\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested enum name.\nexport type NetworkConnectivityConfigAzurePrivateEndpointRule_PrivateLinkConnectionState =\n\n    | (typeof NetworkConnectivityConfigAzurePrivateEndpointRule_PrivateLinkConnectionState)[keyof typeof NetworkConnectivityConfigAzurePrivateEndpointRule_PrivateLinkConnectionState]\n    | (string & {});\n\n/** Definition of an IP Access list */\nexport interface AccountIpAccessList {\n  /** Universally unique identifier (UUID) of the IP access list. */\n  listId?: string | undefined;\n  /** Label for the IP access list. This **cannot** be empty. */\n  label?: string | undefined;\n  ipAddresses?: string[] | undefined;\n  /** Total number of IP or CIDR values. */\n  addressCount?: number | undefined;\n  listType?: AccountIpAccessListType_IpAccessListType | undefined;\n  /** Creation timestamp in milliseconds. */\n  createdAt?: bigint | undefined;\n  /** The ID of the user that created this list. */\n  createdBy?: bigint | undefined;\n  /** Update timestamp in milliseconds. */\n  updatedAt?: bigint | undefined;\n  /** The ID of the user that last updated this list. */\n  updatedBy?: bigint | undefined;\n  /** Specifies whether this IP access list is enabled. */\n  enabled?: boolean | undefined;\n}\n\n// eslint-disable-next-line @typescript-eslint/no-empty-object-type\nexport interface AccountIpAccessListType {}\n\nexport interface AccountNetworkPolicy {\n  /** The unique identifier for the network policy. */\n  networkPolicyId?: string | undefined;\n  /** The associated account ID for this Network Policy object. */\n  accountId?: string | undefined;\n  /** The network policies applying for egress traffic. */\n  egress?: EgressNetworkPolicy | undefined;\n  /** The network policies applying for ingress traffic. */\n  ingress?: IngressNetworkPolicy | undefined;\n  /**\n   * The ingress policy for dry run mode. Dry run will always run even if the request\n   * is allowed by the ingress policy. When this field is set, the policy will be evaluated\n   * and emit logs only without blocking requests.\n   */\n  ingressDryRun?: IngressNetworkPolicy | undefined;\n}\n\nexport interface AwsVpcEndpointInfo {\n  /**\n   * The ID of the underlying VPC endpoint in AWS. Provided by the customer when\n   * registering an existing AWS VPC endpoint.\n   */\n  awsVpcEndpointId?: string | undefined;\n  /** The ID of the Databricks VPC endpoint service that this endpoint connects to. */\n  awsEndpointServiceId?: string | undefined;\n  /** The AWS account ID in which this VPC endpoint lives. */\n  awsAccountId?: string | undefined;\n}\n\nexport interface AzurePrivateEndpointInfo {\n  /** The name of the Private Endpoint in the Azure subscription. */\n  privateEndpointName?: string | undefined;\n  /**\n   * The GUID of the Private Endpoint resource in the Azure subscription.\n   * This is assigned by Azure when the user sets up the Private Endpoint.\n   */\n  privateEndpointResourceGuid?: string | undefined;\n  /** The full resource ID of the Private Endpoint. */\n  privateEndpointResourceId?: string | undefined;\n  /** The resource ID of the Databricks Private Link Service that this Private Endpoint connects to. */\n  privateLinkServiceId?: string | undefined;\n}\n\n/** Details required to configure a block list or allow list. */\nexport interface CreateAccountIpAccessListRequest {\n  accountId?: string | undefined;\n  label?: string | undefined;\n  listType?: AccountIpAccessListType_IpAccessListType | undefined;\n  ipAddresses?: string[] | undefined;\n}\n\n/** An IP access list was successfully created. */\nexport interface CreateAccountIpAccessListResponse {\n  ipAccessList?: AccountIpAccessList | undefined;\n}\n\nexport interface CreateEndpointRequest {\n  /**\n   * The parent resource name of the account under which the endpoint is created.\n   * Format: `accounts/{account_id}`.\n   */\n  parent?: string | undefined;\n  endpoint?: Endpoint | undefined;\n}\n\n/** Details required to configure a block list or allow list. */\nexport interface CreateIpAccessListRequest {\n  /** Label for the IP access list. This **cannot** be empty. */\n  label?: string | undefined;\n  listType?: IpAccessListType | undefined;\n  ipAddresses?: string[] | undefined;\n}\n\n/** An IP access list was successfully created. */\nexport interface CreateIpAccessListResponse {\n  ipAccessList?: IpAccessList | undefined;\n}\n\n/** Properties of the new private endpoint rule. */\nexport interface CreateNccPrivateEndpointRuleRequest {\n  /** Your Network Connectivity Configuration ID. */\n  networkConnectivityConfigId?: string | undefined;\n  /** Your <Databricks> account ID. You can find your account ID in your <Databricks> accounts console. */\n  accountId?: string | undefined;\n  privateEndpointRule?: CreatePrivateEndpointRule | undefined;\n}\n\n/** Properties of the new network connectivity configuration. */\nexport interface CreateNetworkConnectivityConfigRequest {\n  /** Your <Databricks> account ID. You can find your account ID in your <Databricks> accounts console. */\n  accountId?: string | undefined;\n  networkConnectivityConfig?:\n    | CreateNetworkConnectivityConfiguration\n    | undefined;\n}\n\n/** Properties of the new network connectivity configuration. */\nexport interface CreateNetworkConnectivityConfiguration {\n  /** <Databricks> network connectivity configuration ID. */\n  networkConnectivityConfigId?: string | undefined;\n  /** Your <Databricks> account ID. You can find your account ID in your <Databricks> accounts console. */\n  accountId?: string | undefined;\n  /**\n   * The name of the network connectivity configuration. The name can contain alphanumeric characters, hyphens,\n   * and underscores. The length must be between 3 and 30 characters. The name must match the regular\n   * expression ^[0-9a-zA-Z-_]{3,30}$\n   */\n  name?: string | undefined;\n  /**\n   * The region for the network connectivity configuration.\n   * Only workspaces in the same region can be attached to the network connectivity configuration.\n   */\n  region?: string | undefined;\n  /** The network connectivity rules that apply to network traffic from your serverless compute resources. */\n  egressConfig?:\n    | CustomerFacingNetworkConnectivityConfigEgressConfig\n    | undefined;\n  /** Time in epoch milliseconds when this object was updated. */\n  updatedTime?: bigint | undefined;\n  /** Time in epoch milliseconds when this object was created. */\n  creationTime?: bigint | undefined;\n}\n\nexport interface CreateNetworkPolicyRequest {\n  /** Your <Databricks> account ID. You can find your account ID in your <Databricks> accounts console. */\n  accountId?: string | undefined;\n  /** Network policy configuration details. */\n  networkPolicy?: AccountNetworkPolicy | undefined;\n}\n\nexport interface CreateNetworkRequest {\n  accountId?: string | undefined;\n  /** The human-readable name of the network configuration. */\n  networkName?: string | undefined;\n  /** The ID of the VPC associated with this network configuration. VPC IDs can be used in multiple networks. */\n  vpcId?: string | undefined;\n  /** IDs of at least two subnets associated with this network. Subnet IDs **cannot** be used in multiple network configurations. */\n  subnetIds?: string[] | undefined;\n  /** IDs of one to five security groups associated with this network. Security group IDs **cannot** be used in multiple network configurations. */\n  securityGroupIds?: string[] | undefined;\n  vpcEndpoints?: NetworkVpcEndpoints | undefined;\n  gcpNetworkInfo?: GcpNetworkInfo | undefined;\n}\n\nexport interface CreatePrivateAccessSettingsRequest {\n  accountId?: string | undefined;\n  /** The human-readable name of the private access settings object. */\n  privateAccessSettingsName?: string | undefined;\n  /** The AWS region for workspaces attached to this private access settings object. */\n  region?: string | undefined;\n  /** Determines if the workspace can be accessed over public internet. For fully private workspaces, you can optionally specify false, but only if you implement both the front-end and the back-end PrivateLink connections. Otherwise, specify true, which means that public access is enabled. */\n  publicAccessEnabled?: boolean | undefined;\n  /**\n   * The private access level controls which VPC endpoints can connect to the UI or API of any workspace that attaches this private access settings object.\n   * `ACCOUNT` level access (the default) allows only VPC endpoints that are registered in your <Databricks> account connect to your workspace.\n   * `ENDPOINT` level access allows only specified VPC endpoints connect to your workspace. For details, see allowed_vpc_endpoint_ids.\n   */\n  privateAccessLevel?: PrivateAccessLevel | undefined;\n  /**\n   * An array of Databricks VPC endpoint IDs. This is the <Databricks> ID returned when registering the VPC endpoint configuration in your <Databricks> account. This is not the ID of the VPC endpoint in AWS.\n   * Only used when private_access_level is set to ENDPOINT. This is an allow list of VPC endpoints registered in your <Databricks> account that can connect to your workspace over AWS PrivateLink.\n   * Note: If hybrid access to your workspace is enabled by setting public_access_enabled to true, this control only works for PrivateLink connections. To control how your workspace is accessed via public internet, see IP access lists.\n   */\n  allowedVpcEndpointIds?: string[] | undefined;\n}\n\n/**\n * Properties of the new private endpoint rule.\n * Note that you must approve the endpoint in Azure portal after initialization.\n */\nexport interface CreatePrivateEndpointRule {\n  /** The ID of a private endpoint rule. */\n  ruleId?: string | undefined;\n  /** The ID of a network connectivity configuration, which is the parent resource of this private endpoint rule object. */\n  networkConnectivityConfigId?: string | undefined;\n  /**\n   * The current status of this private endpoint. The private endpoint rules are effective only if the connection state\n   * is ESTABLISHED. Remember that you must approve new endpoints on your resources in the Cloud console\n   * before they take effect.\n   * The possible values are:\n   * - PENDING: The endpoint has been created and pending approval.\n   * - ESTABLISHED: The endpoint has been approved and is ready to use in your serverless compute resources.\n   * - REJECTED: Connection was rejected by the private link resource owner.\n   * - DISCONNECTED: Connection was removed by the private link resource owner, the private endpoint becomes informative and should be deleted for clean-up.\n   * - EXPIRED: If the endpoint was created but not approved in 14 days, it will be EXPIRED.\n   * - CREATING: The endpoint creation is in progress. Once successfully created, the state will transition to PENDING.\n   * - CREATE_FAILED: The endpoint creation failed. You can check the error_message field for more details.\n   */\n  connectionState?:\n    | NccPrivateEndpointRule_PrivateLinkConnectionState\n    | undefined;\n  /**\n   * Only used by private endpoints to customer-managed private endpoint services.\n   *\n   * Domain names of target private link service.\n   * When updating this field, the full list of target domain_names must be specified.\n   */\n  domainNames?: string[] | undefined;\n  /** Time in epoch milliseconds when this object was created. */\n  creationTime?: bigint | undefined;\n  /** Time in epoch milliseconds when this object was updated. */\n  updatedTime?: bigint | undefined;\n  /** Whether this private endpoint is deactivated. */\n  deactivated?: boolean | undefined;\n  /** Time in epoch milliseconds when this object was deactivated. */\n  deactivatedAt?: bigint | undefined;\n  errorMessage?: string | undefined;\n  /** The Azure resource ID of the target resource. */\n  resourceId?: string | undefined;\n  /**\n   * Not used by customer-managed private endpoint services.\n   *\n   * The sub-resource type (group ID) of the target resource.\n   * Note that to connect to workspace root storage (root DBFS), you need two endpoints, one for blob and one for dfs.\n   */\n  groupId?: string | undefined;\n  /** The name of the Azure private endpoint resource. */\n  endpointName?: string | undefined;\n  /** <Databricks> account ID. You can find your account ID from the Accounts Console. */\n  accountId?: string | undefined;\n  /** The full target AWS endpoint service name that connects to the destination resources of the private endpoint. */\n  endpointService?: string | undefined;\n  /**\n   * Only used by private endpoints towards AWS S3 service.\n   *\n   * The globally unique S3 bucket names that will be accessed via the VPC endpoint.\n   * The bucket names must be in the same region as the NCC/endpoint service.\n   * When updating this field, we perform full update on this field. Please ensure a full list of desired\n   * resource_names is provided.\n   */\n  resourceNames?: string[] | undefined;\n  /** The AWS VPC endpoint ID. You can use this ID to identify the VPC endpoint created by <Databricks>. */\n  vpcEndpointId?: string | undefined;\n  /**\n   * Update this field to activate/deactivate this private endpoint to allow egress access from\n   * serverless compute resources. Only honored for first-party services on each cloud (e.g. AWS S3).\n   */\n  enabled?: boolean | undefined;\n  endpoint?: {$case: 'gcpEndpoint'; gcpEndpoint: GcpEndpoint} | undefined;\n}\n\nexport interface CreateVpcEndpointRequest {\n  accountId?: string | undefined;\n  /** The human-readable name of the storage configuration. */\n  vpcEndpointName?: string | undefined;\n  /** The region in which this VPC endpoint object exists. */\n  region?: string | undefined;\n  /** The ID of the VPC endpoint object in AWS. */\n  awsVpcEndpointId?: string | undefined;\n  vpcEndpointInfo?:\n    | {\n        $case: 'gcpVpcEndpointInfo';\n        /** The cloud info of this vpc endpoint. */\n        gcpVpcEndpointInfo: GcpVpcEndpointInfo;\n      }\n    | undefined;\n}\n\nexport interface CustomerFacingNetworkConnectivityConfigEgressConfig {\n  /**\n   * The network connectivity rules that are applied by default without resource specific configurations.\n   * You can find the stable network information of your serverless compute resources here.\n   */\n  defaultRules?: NetworkConnectivityConfigEgressConfig_DefaultRule | undefined;\n  /** The network connectivity rules that configured for each destinations. These rules override default rules. */\n  targetRules?:\n    | CustomerFacingNetworkConnectivityConfigEgressConfig_CustomerFacingTargetRule\n    | undefined;\n}\n\n/** Target rule controls the egress rules that are dedicated to specific resources. */\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport interface CustomerFacingNetworkConnectivityConfigEgressConfig_CustomerFacingTargetRule {\n  azurePrivateEndpointRules?:\n    | NetworkConnectivityConfigAzurePrivateEndpointRule[]\n    | undefined;\n  /** AWS private endpoint rule controls the AWS private endpoint based egress rules. */\n  awsPrivateEndpointRules?:\n    | NetworkConnectivityConfigAwsPrivateEndpointRule[]\n    | undefined;\n}\n\nexport interface DeleteAccountIpAccessListRequest {\n  accountId?: string | undefined;\n  /** The ID for the corresponding IP access list */\n  listId?: string | undefined;\n}\n\n/** The IP access list was successfully deleted. */\n// eslint-disable-next-line @typescript-eslint/no-empty-object-type\nexport interface DeleteAccountIpAccessListResponse {}\n\nexport interface DeleteEndpointRequest {\n  name?: string | undefined;\n}\n\nexport interface DeleteIpAccessListRequest {\n  /** The ID for the corresponding IP access list */\n  listId?: string | undefined;\n}\n\n/** The IP access list was successfully deleted. */\n// eslint-disable-next-line @typescript-eslint/no-empty-object-type\nexport interface DeleteIpAccessListResponse {}\n\n/**\n * Initiates deleting a private endpoint rule. If the connection state is PENDING or EXPIRED, the private endpoint is\n * immediately deleted. Otherwise, the private endpoint is deactivated and will be deleted after one day of\n * deactivation. When a private endpoint is deactivated, the deactivated field is set to true and the private endpoint\n * is not available to your serverless compute resources.\n */\nexport interface DeleteNccPrivateEndpointRuleRequest {\n  /** Your <Databricks> account ID. You can find your account ID in your <Databricks> accounts console. */\n  accountId?: string | undefined;\n  /** Your Network Connectvity Configuration ID. */\n  networkConnectivityConfigId?: string | undefined;\n  /** Your private endpoint rule ID. */\n  privateEndpointRuleId?: string | undefined;\n}\n\nexport interface DeleteNetworkConnectivityConfigRequest {\n  /** Your <Databricks> account ID. You can find your account ID in your <Databricks> accounts console. */\n  accountId?: string | undefined;\n  /** Your Network Connectivity Configuration ID. */\n  networkConnectivityConfigId?: string | undefined;\n}\n\nexport interface DeleteNetworkPolicyRequest {\n  /** The unique identifier of the network policy to delete. */\n  networkPolicyId?: string | undefined;\n  /** Your <Databricks> account ID. You can find your account ID in your <Databricks> accounts console. */\n  accountId?: string | undefined;\n}\n\nexport interface DeleteNetworkRequest {\n  /** Databricks Account API network configuration ID. */\n  networkId?: string | undefined;\n  accountId?: string | undefined;\n}\n\nexport interface DeletePrivateAccessSettingsRequest {\n  privateAccessSettingsId?: string | undefined;\n  accountId?: string | undefined;\n}\n\nexport interface DeleteVpcEndpointRequest {\n  vpcEndpointId?: string | undefined;\n  accountId?: string | undefined;\n}\n\n/** The network policies applying for egress traffic. */\nexport interface EgressNetworkPolicy {\n  /** The access policy enforced for egress traffic to the internet. */\n  networkAccess?: EgressNetworkPolicy_NetworkAccessPolicy | undefined;\n}\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport interface EgressNetworkPolicy_NetworkAccessPolicy {\n  /** The restriction mode that controls how serverless workloads can access the internet. */\n  restrictionMode?:\n    | EgressNetworkPolicy_NetworkAccessPolicy_RestrictionMode\n    | undefined;\n  /** List of internet destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode. */\n  allowedInternetDestinations?:\n    | EgressNetworkPolicy_NetworkAccessPolicy_InternetDestination[]\n    | undefined;\n  /** List of storage destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode. */\n  allowedStorageDestinations?:\n    | EgressNetworkPolicy_NetworkAccessPolicy_StorageDestination[]\n    | undefined;\n  /** Optional. When policy_enforcement is not provided, we default to ENFORCE_MODE_ALL_SERVICES */\n  policyEnforcement?:\n    | EgressNetworkPolicy_NetworkAccessPolicy_PolicyEnforcement\n    | undefined;\n  /**\n   * List of internet destinations that serverless workloads are blocked from accessing.\n   * These destinations are enforced when restriction mode is RESTRICTED_ACCESS or DRY_RUN.\n   * Currently supports DNS_NAME type only; IP_RANGE support is planned.\n   */\n  blockedInternetDestinations?:\n    | EgressNetworkPolicy_NetworkAccessPolicy_InternetDestination[]\n    | undefined;\n  /**\n   * List of <Databricks> workspace destinations that serverless workloads are\n   * allowed to access when in RESTRICTED_ACCESS mode.\n   */\n  allowedDatabricksDestinations?:\n    | EgressNetworkPolicy_NetworkAccessPolicy_DatabricksDestination[]\n    | undefined;\n}\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport interface EgressNetworkPolicy_NetworkAccessPolicy_DatabricksDestination {\n  /** The workspace IDs to allow egress traffic to. */\n  workspaceIds?: bigint[] | undefined;\n}\n\n/**\n * Users can specify accessible internet destinations when outbound access is restricted.\n * We only support DNS_NAME (FQDN format) destinations for the time being.\n * Going forward we may extend support to host names and IP addresses.\n */\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport interface EgressNetworkPolicy_NetworkAccessPolicy_InternetDestination {\n  /** The internet destination to which access will be allowed. Format dependent on the destination type. */\n  destination?: string | undefined;\n  /** The type of internet destination. Currently only DNS_NAME is supported. */\n  internetDestinationType?:\n    | EgressNetworkPolicy_NetworkAccessPolicy_InternetDestination_InternetDestinationType\n    | undefined;\n}\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport interface EgressNetworkPolicy_NetworkAccessPolicy_PolicyEnforcement {\n  /**\n   * The mode of policy enforcement. ENFORCED blocks traffic that violates policy,\n   * while DRY_RUN only logs violations without blocking. When not specified,\n   * defaults to ENFORCED.\n   */\n  enforcementMode?:\n    | EgressNetworkPolicy_NetworkAccessPolicy_PolicyEnforcement_EnforcementMode\n    | undefined;\n  /**\n   * When empty, it means dry run for all products.\n   * When non-empty, it means dry run for specific products and for the other products, they will run in enforced mode.\n   */\n  dryRunModeProductFilter?:\n    | EgressNetworkPolicy_NetworkAccessPolicy_PolicyEnforcement_DryRunModeProductFilter[]\n    | undefined;\n}\n\n/** Users can specify accessible storage destinations. */\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport interface EgressNetworkPolicy_NetworkAccessPolicy_StorageDestination {\n  bucketName?: string | undefined;\n  region?: string | undefined;\n  /** The type of storage destination. */\n  storageDestinationType?:\n    | EgressNetworkPolicy_NetworkAccessPolicy_StorageDestination_StorageDestinationType\n    | undefined;\n  /** The Azure storage account name. */\n  azureStorageAccount?: string | undefined;\n  /** The Azure storage service type (blob, dfs, etc.). */\n  azureStorageService?: string | undefined;\n}\n\n/** Endpoint represents a cloud networking resource in a user's cloud account and binds it to the <Databricks> account. */\nexport interface Endpoint {\n  /** The resource name of the endpoint, which uniquely identifies the endpoint. */\n  name?: string | undefined;\n  /** The unique identifier for this endpoint under the account. This field is a UUID generated by <Databricks>. */\n  endpointId?: string | undefined;\n  /** The Databricks Account in which the endpoint object exists. */\n  accountId?: string | undefined;\n  /**\n   * The human-readable display name of this endpoint.\n   * The input should conform to RFC-1034, which restricts to letters, numbers, and hyphens,\n   * with the first character a letter, the last a letter or a number, and a 63 character maximum.\n   */\n  displayName?: string | undefined;\n  /**\n   * The use case that determines the type of network connectivity this endpoint provides.\n   * This field is automatically determined based on the endpoint configuration and cloud-specific settings.\n   */\n  useCase?: EndpointUseCase_EndpointUseCase | undefined;\n  /** The cloud provider region where this endpoint is located. */\n  region?: string | undefined;\n  /** The state of the endpoint. The endpoint can only be used if the state is `APPROVED`. */\n  state?: EndpointState | undefined;\n  /**\n   * The cloud info of this endpoint.\n   * (-- Azure is GA; AWS and GCP added for PLAT-165656 (Private Preview). --)\n   */\n  endpointInfo?:\n    | {\n        $case: 'azurePrivateEndpointInfo';\n        /** Info for an Azure private endpoint. */\n        azurePrivateEndpointInfo: AzurePrivateEndpointInfo;\n      }\n    | {\n        $case: 'awsVpcEndpointInfo';\n        /** Info for an AWS VPC endpoint. */\n        awsVpcEndpointInfo: AwsVpcEndpointInfo;\n      }\n    | {\n        $case: 'gcpPscEndpointInfo';\n        /** Info for a GCP Private Service Connect endpoint. */\n        gcpPscEndpointInfo: GcpPscEndpointInfo;\n      }\n    | undefined;\n  /** The timestamp when the endpoint was created. The timestamp is in RFC 3339 format in UTC timezone. */\n  createTime?: Temporal.Instant | undefined;\n}\n\n// eslint-disable-next-line @typescript-eslint/no-empty-object-type\nexport interface EndpointUseCase {}\n\nexport interface GcpEndpoint {\n  /** Output only. The URI of the created PSC endpoint. */\n  pscEndpointUri?: string | undefined;\n  /** Selects which target services this private endpoint reaches. */\n  targetServices?:\n    | {\n        $case: 'serviceAttachment';\n        /**\n         * The full url of the target service attachment.\n         * Example:\n         * projects/my-gcp-project/regions/us-east4/serviceAttachments/my-service-attachment\n         */\n        serviceAttachment: string;\n      }\n    | {\n        $case: 'googleApiEndpoints';\n        /** Selected Google API hostnames, e.g. \"storage.googleapis.com\", \"bigquery.googleapis.com\". */\n        googleApiEndpoints: GoogleApiEndpoints;\n      }\n    | {\n        $case: 'allVpcScServices';\n        /** All Google APIs that support VPC Service Controls (a subset of all Google APIs). */\n        allVpcScServices: boolean;\n      }\n    | undefined;\n}\n\nexport interface GcpNetworkInfo {\n  /** The GCP project ID for network resources. This project is where the VPC and subnet resides. */\n  networkProjectId?: string | undefined;\n  /** The customer-provided VPC ID. */\n  vpcId?: string | undefined;\n  /**\n   * The customer-provided Subnet ID that will be available to Clusters in Workspaces using this\n   * Network.\n   */\n  subnetId?: string | undefined;\n  subnetRegion?: string | undefined;\n  /**\n   * Name of the secondary range within the subnet that will be used by GKE as Pod IP range.\n   * This is BYO VPC specific. DB VPC uses network.getGcpManagedNetworkConfig.getGkeClusterPodIpRange\n   */\n  podIpRangeName?: string | undefined;\n  /** Name of the secondary range within the subnet that will be used by GKE as Service IP range. */\n  serviceIpRangeName?: string | undefined;\n}\n\nexport interface GcpPscEndpointInfo {\n  /**\n   * The ID of the underlying Private Service Connect connection in the GCP consumer project,\n   * assigned by GCP when the PSC connection is created.\n   */\n  pscConnectionId?: string | undefined;\n  /**\n   * The GCP consumer project ID in which this PSC endpoint is created. Provided by the customer\n   * when registering an existing PSC endpoint.\n   */\n  projectId?: string | undefined;\n  /**\n   * The name of this PSC connection in the GCP consumer project. Provided by the customer when\n   * registering an existing PSC endpoint.\n   */\n  pscEndpoint?: string | undefined;\n  /**\n   * The GCP region of the PSC connection endpoint. Provided by the customer when registering an\n   * existing PSC endpoint. GCP supports only same-region PSC, so this must match the workspace\n   * region.\n   */\n  endpointRegion?: string | undefined;\n  /** The ID of the <Databricks> service attachment this PSC endpoint connects to. */\n  serviceAttachmentId?: string | undefined;\n}\n\nexport interface GcpVpcEndpointInfo {\n  pscConnectionId?: string | undefined;\n  projectId?: string | undefined;\n  pscEndpointName?: string | undefined;\n  endpointRegion?: string | undefined;\n  serviceAttachmentId?: string | undefined;\n}\n\nexport interface GetAccountIpAccessListRequest {\n  accountId?: string | undefined;\n  /** The ID for the corresponding IP access list */\n  listId?: string | undefined;\n}\n\nexport interface GetAccountIpAccessListResponse {\n  ipAccessList?: AccountIpAccessList | undefined;\n}\n\nexport interface GetEndpointRequest {\n  name?: string | undefined;\n}\n\nexport interface GetIpAccessListRequest {\n  /** The ID for the corresponding IP access list */\n  listId?: string | undefined;\n}\n\n/** An IP access list was successfully returned. */\nexport interface GetIpAccessListResponse {\n  ipAccessList?: IpAccessList | undefined;\n}\n\nexport interface GetNccPrivateEndpointRuleRequest {\n  /** Your <Databricks> account ID. You can find your account ID in your <Databricks> accounts console. */\n  accountId?: string | undefined;\n  /** Your Network Connectvity Configuration ID. */\n  networkConnectivityConfigId?: string | undefined;\n  /** Your private endpoint rule ID. */\n  privateEndpointRuleId?: string | undefined;\n}\n\n/** ***************************** Public facing RPC requests and responses *****************************\\// */\nexport interface GetNetworkConnectivityConfigRequest {\n  /** Your <Databricks> account ID. You can find your account ID in your <Databricks> accounts console. */\n  accountId?: string | undefined;\n  /** Your Network Connectivity Configuration ID. */\n  networkConnectivityConfigId?: string | undefined;\n}\n\nexport interface GetNetworkPolicyRequest {\n  /** The unique identifier of the network policy to retrieve. */\n  networkPolicyId?: string | undefined;\n  /** Your <Databricks> account ID. You can find your account ID in your <Databricks> accounts console. */\n  accountId?: string | undefined;\n}\n\nexport interface GetNetworkRequest {\n  /** Databricks Account API network configuration ID. */\n  networkId?: string | undefined;\n  accountId?: string | undefined;\n}\n\nexport interface GetPrivateAccessSettingsRequest {\n  privateAccessSettingsId?: string | undefined;\n  accountId?: string | undefined;\n}\n\nexport interface GetVpcEndpointRequest {\n  /** Databricks VPC endpoint ID. */\n  vpcEndpointId?: string | undefined;\n  accountId?: string | undefined;\n}\n\nexport interface GetWorkspaceNetworkOptionRequest {\n  /** Your <Databricks> account ID. You can find your account ID in your <Databricks> accounts console. */\n  accountId?: string | undefined;\n  /** The workspace ID. */\n  workspaceId?: bigint | undefined;\n}\n\n/**\n * Wrapper for a list of Google API hostnames. Wrapped in a message because\n * proto3 oneof does not support repeated fields directly.\n */\nexport interface GoogleApiEndpoints {\n  /**\n   * Google API hostnames, e.g. \"storage.googleapis.com\",\n   * \"bigquery.googleapis.com\". Use \"googleapis.com\" to cover all Google APIs.\n   */\n  endpoints?: string[] | undefined;\n}\n\n/** The network policies applying for ingress traffic. */\nexport interface IngressNetworkPolicy {\n  /**\n   * The network policy restrictions for public access to the workspace.\n   * Configures how public internet traffic is allowed or denied access.\n   */\n  publicAccess?: IngressNetworkPolicy_PublicAccess | undefined;\n  /**\n   * The network policy restrictions for private access.\n   * Configures how requests arriving over private connectivity are governed.\n   */\n  privateAccess?: IngressNetworkPolicy_PrivateAccess | undefined;\n  crossWorkspaceAccess?: IngressNetworkPolicy_CrossWorkspaceAccess | undefined;\n}\n\n/** Matches account-level Databricks API endpoints for an ingress network policy rule. */\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport interface IngressNetworkPolicy_AccountApiDestination {\n  /** The API scopes to match. Use \"all-apis\" to match any account-level API. */\n  scopes?: string[] | undefined;\n  /** Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. */\n  scopeQualifier?: IngressNetworkPolicy_ApiScopeQualifier | undefined;\n}\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport interface IngressNetworkPolicy_AccountDatabricksOneDestination {\n  /** Must be set to true. */\n  allDestinations?: boolean | undefined;\n}\n\n/** The account console UI destination. */\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport interface IngressNetworkPolicy_AccountUiDestination {\n  /** Must be set to true. */\n  allDestinations?: boolean | undefined;\n}\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport interface IngressNetworkPolicy_AppsRuntimeDestination {\n  /** Must be set to true. */\n  allDestinations?: boolean | undefined;\n}\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport interface IngressNetworkPolicy_Authentication {\n  identityType?: IngressNetworkPolicy_Authentication_IdentityType | undefined;\n  /** Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES. */\n  identities?: IngressNetworkPolicy_AuthenticationIdentity[] | undefined;\n}\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport interface IngressNetworkPolicy_AuthenticationIdentity {\n  principalType?:\n    | IngressNetworkPolicy_AuthenticationIdentity_PrincipalType\n    | undefined;\n  principalId?: bigint | undefined;\n}\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport interface IngressNetworkPolicy_CrossWorkspaceAccess {\n  /** The restriction mode for cross-workspace access. */\n  restrictionMode?:\n    | IngressNetworkPolicy_CrossWorkspaceAccess_RestrictionMode\n    | undefined;\n  /**\n   * Deny rules are evaluated first. A request matching any deny rule is denied,\n   * regardless of allow rules. Only applies when restriction_mode is RESTRICTED_ACCESS.\n   */\n  denyRules?: IngressNetworkPolicy_CrossWorkspaceIngressRule[] | undefined;\n  /**\n   * Allow rules are evaluated after deny rules. A request matching any allow rule is\n   * allowed; a request matching no rule is denied by default. Only applies when\n   * restriction_mode is RESTRICTED_ACCESS.\n   */\n  allowRules?: IngressNetworkPolicy_CrossWorkspaceIngressRule[] | undefined;\n}\n\n/**\n * An ingress rule is enforced when a request satisfies all\n * specified attributes — including request origin, destination, and authentication.\n */\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport interface IngressNetworkPolicy_CrossWorkspaceIngressRule {\n  /**\n   * The origin the request must match — the source workspace the request comes from,\n   * either specific source workspaces or any source workspace in any account. See\n   * CrossWorkspaceRequestOrigin.\n   */\n  origin?: IngressNetworkPolicy_CrossWorkspaceRequestOrigin | undefined;\n  /**\n   * The destination the request must match — the resource being accessed, for example\n   * the workspace UI or workspace APIs. See RequestDestination.\n   */\n  destination?: IngressNetworkPolicy_RequestDestination | undefined;\n  /**\n   * The authenticated identity the request must match. When unset, the rule matches\n   * all users and service principals.\n   */\n  authentication?: IngressNetworkPolicy_Authentication | undefined;\n  /** The label for this ingress rule. */\n  label?: string | undefined;\n}\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport interface IngressNetworkPolicy_CrossWorkspaceRequestOrigin {\n  source?:\n    | {\n        $case: 'allSourceWorkspaces';\n        /** Matches all source workspaces. */\n        allSourceWorkspaces: boolean;\n      }\n    | {\n        $case: 'selectedWorkspaces';\n        /** Specific source workspace IDs to match. */\n        selectedWorkspaces: IngressNetworkPolicy_WorkspaceIdList;\n      }\n    | undefined;\n}\n\n/** A set of registered endpoints, identified by their endpoint IDs. */\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport interface IngressNetworkPolicy_Endpoints {\n  /** The IDs of the registered endpoints. Must contain at least one endpoint ID. */\n  endpointIds?: string[] | undefined;\n}\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport interface IngressNetworkPolicy_IpRanges {\n  /** We only support IPv4 and IPv4 CIDR notation for now. */\n  ipRanges?: string[] | undefined;\n}\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport interface IngressNetworkPolicy_LakebaseRuntimeDestination {\n  /** Must be set to true. */\n  allDestinations?: boolean | undefined;\n}\n\n/**\n * Configures how requests arriving over private connectivity, such as\n * registered endpoints, are allowed or denied access.\n */\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport interface IngressNetworkPolicy_PrivateAccess {\n  /** The restriction mode for private access. */\n  restrictionMode?:\n    | IngressNetworkPolicy_PrivateAccess_RestrictionMode\n    | undefined;\n  /**\n   * Deny rules are evaluated first. A request matching any deny rule is denied,\n   * regardless of allow rules. Only applies when restriction_mode is RESTRICTED_ACCESS.\n   */\n  denyRules?: IngressNetworkPolicy_PrivateIngressRule[] | undefined;\n  /**\n   * Allow rules are evaluated after deny rules. A request matching any allow rule is\n   * allowed; a request matching no rule is denied by default. Only applies when\n   * restriction_mode is RESTRICTED_ACCESS.\n   */\n  allowRules?: IngressNetworkPolicy_PrivateIngressRule[] | undefined;\n}\n\n/**\n * An ingress rule is enforced when a request satisfies all\n * specified attributes — including request origin, destination, and authentication.\n */\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport interface IngressNetworkPolicy_PrivateIngressRule {\n  /**\n   * The origin the request must match — the private connectivity the request arrives\n   * through, for example a specific set of registered endpoints or any endpoint\n   * registered to the account. See PrivateRequestOrigin.\n   */\n  origin?: IngressNetworkPolicy_PrivateRequestOrigin | undefined;\n  /**\n   * The destination the request must match — the resource being accessed, for example\n   * the workspace UI, workspace APIs, or account-level APIs. See RequestDestination.\n   */\n  destination?: IngressNetworkPolicy_RequestDestination | undefined;\n  /**\n   * The authenticated identity the request must match. When unset, the rule matches\n   * all users and service principals.\n   * On the account-level network policy, scoping to specific identities is not\n   * currently supported, so this field must be unset (the rule matches all users\n   * and service principals).\n   */\n  authentication?: IngressNetworkPolicy_Authentication | undefined;\n  /** The label for this ingress rule. */\n  label?: string | undefined;\n}\n\n/**\n * The origin of a private access request, identified by the endpoint\n * through which the request arrives.\n */\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport interface IngressNetworkPolicy_PrivateRequestOrigin {\n  source?:\n    | {\n        $case: 'endpoints';\n        /** Matches requests arriving through any of the specified registered endpoints. */\n        endpoints: IngressNetworkPolicy_Endpoints;\n      }\n    | {\n        $case: 'allRegisteredEndpoints';\n        /**\n         * Matches requests arriving through any endpoint registered to the account.\n         * Must be set to true when specified.\n         */\n        allRegisteredEndpoints: boolean;\n      }\n    | {\n        $case: 'azureWorkspacePrivateLink';\n        /**\n         * Matches requests arriving through the workspace's Azure Private Link (ui-api)\n         * endpoints. Can only be used in deny rules of workspace-level network policies.\n         * Must be set to true when specified.\n         */\n        azureWorkspacePrivateLink: boolean;\n      }\n    | {\n        $case: 'allPrivateAccess';\n        /**\n         * Matches requests arriving over any private connectivity, including registered\n         * endpoints and the workspace's Azure Private Link (ui-api) endpoints.\n         * Can only be used in deny rules of workspace-level network policies.\n         * Must be set to true when specified.\n         */\n        allPrivateAccess: boolean;\n      }\n    | undefined;\n}\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport interface IngressNetworkPolicy_PublicAccess {\n  restrictionMode?:\n    | IngressNetworkPolicy_PublicAccess_RestrictionMode\n    | undefined;\n  denyRules?: IngressNetworkPolicy_PublicIngressRule[] | undefined;\n  allowRules?: IngressNetworkPolicy_PublicIngressRule[] | undefined;\n}\n\n/**\n * An ingress rule is enforced when a request satisfies all\n * specified attributes — including request origin, destination, and authentication.\n */\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport interface IngressNetworkPolicy_PublicIngressRule {\n  origin?: IngressNetworkPolicy_PublicRequestOrigin | undefined;\n  destination?: IngressNetworkPolicy_RequestDestination | undefined;\n  authentication?: IngressNetworkPolicy_Authentication | undefined;\n  /** The label for this ingress rule. */\n  label?: string | undefined;\n}\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport interface IngressNetworkPolicy_PublicRequestOrigin {\n  source?:\n    | {\n        $case: 'allIpRanges';\n        /** Matches all IPv4 and IPv6 ranges (both public and private). */\n        allIpRanges: boolean;\n      }\n    | {\n        $case: 'includedIpRanges';\n        /** Will not allow IP ranges with private IPs. */\n        includedIpRanges: IngressNetworkPolicy_IpRanges;\n      }\n    | {\n        $case: 'excludedIpRanges';\n        /** Excluded means: all public IP ranges except this one. */\n        excludedIpRanges: IngressNetworkPolicy_IpRanges;\n      }\n    | undefined;\n}\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport interface IngressNetworkPolicy_RequestDestination {\n  /**\n   * When true, match all destinations, no other destination fields can be set.\n   * When not set or false, at least one specific destination must be provided.\n   */\n  allDestinations?: boolean | undefined;\n  workspaceUi?: IngressNetworkPolicy_WorkspaceUiDestination | undefined;\n  workspaceApi?: IngressNetworkPolicy_WorkspaceApiDestination | undefined;\n  appsRuntime?: IngressNetworkPolicy_AppsRuntimeDestination | undefined;\n  lakebaseRuntime?: IngressNetworkPolicy_LakebaseRuntimeDestination | undefined;\n  /**\n   * Matches requests to the account console UI.\n   * Can only be used in the account-level network policy.\n   */\n  accountUi?: IngressNetworkPolicy_AccountUiDestination | undefined;\n  /**\n   * Matches requests to account-level APIs.\n   * Can only be used in the account-level network policy.\n   */\n  accountApi?: IngressNetworkPolicy_AccountApiDestination | undefined;\n  /** Account DatabricksOne destination is not supported. */\n  accountDatabricksOne?:\n    | IngressNetworkPolicy_AccountDatabricksOneDestination\n    | undefined;\n}\n\n/** Matches workspace-level Databricks API endpoints for an ingress network policy rule. */\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport interface IngressNetworkPolicy_WorkspaceApiDestination {\n  scopes?: string[] | undefined;\n  /** Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. */\n  scopeQualifier?: IngressNetworkPolicy_ApiScopeQualifier | undefined;\n  /**\n   * Inverse of `scopes`: matches every API scope EXCEPT those listed here\n   * (\"allow all except\"). Mutually exclusive with `scopes` — a single\n   * destination may set at most one of the two.\n   */\n  excludedScopes?: string[] | undefined;\n}\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport interface IngressNetworkPolicy_WorkspaceIdList {\n  workspaceIds?: bigint[] | undefined;\n}\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport interface IngressNetworkPolicy_WorkspaceUiDestination {\n  /** Must be set to true. */\n  allDestinations?: boolean | undefined;\n}\n\n/** Definition of an IP Access list */\nexport interface IpAccessList {\n  /** Universally unique identifier (UUID) of the IP access list. */\n  listId?: string | undefined;\n  /** Label for the IP access list. This **cannot** be empty. */\n  label?: string | undefined;\n  ipAddresses?: string[] | undefined;\n  /** Total number of IP or CIDR values. */\n  addressCount?: number | undefined;\n  listType?: IpAccessListType | undefined;\n  /** Creation timestamp in milliseconds. */\n  createdAt?: bigint | undefined;\n  /** User ID of the user who created this list. */\n  createdBy?: bigint | undefined;\n  /** Update timestamp in milliseconds. */\n  updatedAt?: bigint | undefined;\n  /** User ID of the user who updated this list. */\n  updatedBy?: bigint | undefined;\n  /** Specifies whether this IP access list is enabled. */\n  enabled?: boolean | undefined;\n}\n\nexport interface ListAccountIpAccessListsRequest {\n  accountId?: string | undefined;\n}\n\n/** IP access lists were successfully returned. */\nexport interface ListAccountIpAccessListsResponse {\n  ipAccessLists?: AccountIpAccessList[] | undefined;\n}\n\nexport interface ListEndpointsRequest {\n  /**\n   * The parent resource name of the account to list endpoints for.\n   * Format: `accounts/{account_id}`.\n   */\n  parent?: string | undefined;\n  pageToken?: string | undefined;\n  pageSize?: number | undefined;\n}\n\nexport interface ListEndpointsResponse {\n  items?: Endpoint[] | undefined;\n  nextPageToken?: string | undefined;\n}\n\n// eslint-disable-next-line @typescript-eslint/no-empty-object-type\nexport interface ListIpAccessLists {}\n\n/** IP access lists were successfully returned. */\nexport interface ListIpAccessListsResponse {\n  ipAccessLists?: IpAccessList[] | undefined;\n}\n\n/** Gets an array of private endpoint rules. */\nexport interface ListNccPrivateEndpointRulesRequest {\n  /** Your <Databricks> account ID. You can find your account ID in your <Databricks> accounts console. */\n  accountId?: string | undefined;\n  /** Your Network Connectvity Configuration ID. */\n  networkConnectivityConfigId?: string | undefined;\n  /** Pagination token to go to next page based on previous query. */\n  pageToken?: string | undefined;\n}\n\n/** The private endpoint rule list was successfully retrieved. */\nexport interface ListNccPrivateEndpointRulesResponse {\n  items?: NccPrivateEndpointRule[] | undefined;\n  /** A token that can be used to get the next page of results. If null, there are no more results to show. */\n  nextPageToken?: string | undefined;\n}\n\nexport interface ListNetworkConnectivityConfigsRequest {\n  /** Your <Databricks> account ID. You can find your account ID in your <Databricks> accounts console. */\n  accountId?: string | undefined;\n  /** Pagination token to go to next page based on previous query. */\n  pageToken?: string | undefined;\n}\n\n/** The network connectivity configuration list was successfully retrieved. */\nexport interface ListNetworkConnectivityConfigsResponse {\n  items?: NetworkConnectivityConfig[] | undefined;\n  /** A token that can be used to get the next page of results. If null, there are no more results to show. */\n  nextPageToken?: string | undefined;\n}\n\nexport interface ListNetworkPoliciesRequest {\n  /** Your <Databricks> account ID. You can find your account ID in your <Databricks> accounts console. */\n  accountId?: string | undefined;\n  /** Pagination token to go to next page based on previous query. */\n  pageToken?: string | undefined;\n}\n\nexport interface ListNetworkPoliciesResponse {\n  /** List of network policies. */\n  items?: AccountNetworkPolicy[] | undefined;\n  /** A token that can be used to get the next page of results. If null, there are no more results to show. */\n  nextPageToken?: string | undefined;\n}\n\nexport interface ListNetworkRequest {\n  accountId?: string | undefined;\n}\n\nexport interface ListNetworkResponse {\n  networks?: Network[] | undefined;\n}\n\nexport interface ListPrivateAccessSettingsRequest {\n  accountId?: string | undefined;\n}\n\nexport interface ListPrivateAccessSettingsResponse {\n  privateAccessSettings?: PrivateAccessSettings[] | undefined;\n}\n\nexport interface ListVpcEndpointRequest {\n  accountId?: string | undefined;\n}\n\nexport interface ListVpcEndpointResponse {\n  vpcEndpoints?: VpcEndpoint[] | undefined;\n}\n\n/**\n * Properties of the new private endpoint rule.\n * Note that you must approve the endpoint in Azure portal after initialization.\n */\nexport interface NccPrivateEndpointRule {\n  /** The ID of a private endpoint rule. */\n  ruleId?: string | undefined;\n  /** The ID of a network connectivity configuration, which is the parent resource of this private endpoint rule object. */\n  networkConnectivityConfigId?: string | undefined;\n  /**\n   * The current status of this private endpoint. The private endpoint rules are effective only if the connection state\n   * is ESTABLISHED. Remember that you must approve new endpoints on your resources in the Cloud console\n   * before they take effect.\n   * The possible values are:\n   * - PENDING: The endpoint has been created and pending approval.\n   * - ESTABLISHED: The endpoint has been approved and is ready to use in your serverless compute resources.\n   * - REJECTED: Connection was rejected by the private link resource owner.\n   * - DISCONNECTED: Connection was removed by the private link resource owner, the private endpoint becomes informative and should be deleted for clean-up.\n   * - EXPIRED: If the endpoint was created but not approved in 14 days, it will be EXPIRED.\n   * - CREATING: The endpoint creation is in progress. Once successfully created, the state will transition to PENDING.\n   * - CREATE_FAILED: The endpoint creation failed. You can check the error_message field for more details.\n   */\n  connectionState?:\n    | NccPrivateEndpointRule_PrivateLinkConnectionState\n    | undefined;\n  /**\n   * Only used by private endpoints to customer-managed private endpoint services.\n   *\n   * Domain names of target private link service.\n   * When updating this field, the full list of target domain_names must be specified.\n   */\n  domainNames?: string[] | undefined;\n  /** Time in epoch milliseconds when this object was created. */\n  creationTime?: bigint | undefined;\n  /** Time in epoch milliseconds when this object was updated. */\n  updatedTime?: bigint | undefined;\n  /** Whether this private endpoint is deactivated. */\n  deactivated?: boolean | undefined;\n  /** Time in epoch milliseconds when this object was deactivated. */\n  deactivatedAt?: bigint | undefined;\n  errorMessage?: string | undefined;\n  /** The Azure resource ID of the target resource. */\n  resourceId?: string | undefined;\n  /**\n   * Not used by customer-managed private endpoint services.\n   *\n   * The sub-resource type (group ID) of the target resource.\n   * Note that to connect to workspace root storage (root DBFS), you need two endpoints, one for blob and one for dfs.\n   */\n  groupId?: string | undefined;\n  /** The name of the Azure private endpoint resource. */\n  endpointName?: string | undefined;\n  /** <Databricks> account ID. You can find your account ID from the Accounts Console. */\n  accountId?: string | undefined;\n  /** The full target AWS endpoint service name that connects to the destination resources of the private endpoint. */\n  endpointService?: string | undefined;\n  /**\n   * Only used by private endpoints towards AWS S3 service.\n   *\n   * The globally unique S3 bucket names that will be accessed via the VPC endpoint.\n   * The bucket names must be in the same region as the NCC/endpoint service.\n   * When updating this field, we perform full update on this field. Please ensure a full list of desired\n   * resource_names is provided.\n   */\n  resourceNames?: string[] | undefined;\n  /** The AWS VPC endpoint ID. You can use this ID to identify the VPC endpoint created by <Databricks>. */\n  vpcEndpointId?: string | undefined;\n  /**\n   * Update this field to activate/deactivate this private endpoint to allow egress access from\n   * serverless compute resources. Only honored for first-party services on each cloud (e.g. AWS S3).\n   */\n  enabled?: boolean | undefined;\n  endpoint?: {$case: 'gcpEndpoint'; gcpEndpoint: GcpEndpoint} | undefined;\n}\n\nexport interface Network {\n  /** The <Databricks> network configuration ID. */\n  networkId?: string | undefined;\n  /** The <Databricks> account ID associated with this network configuration. */\n  accountId?: string | undefined;\n  /** Workspace ID associated with this network configuration. */\n  workspaceId?: bigint | undefined;\n  /** The ID of the VPC associated with this network configuration. VPC IDs can be used in multiple networks. */\n  vpcId?: string | undefined;\n  /** IDs of at least two subnets associated with this network. Subnet IDs **cannot** be used in multiple network configurations. */\n  subnetIds?: string[] | undefined;\n  /** IDs of one to five security groups associated with this network. Security group IDs **cannot** be used in multiple network configurations. */\n  securityGroupIds?: string[] | undefined;\n  vpcStatus?: VpcStatus | undefined;\n  /** Array of error messages about the network configuration. */\n  errorMessages?: NetworkHealth[] | undefined;\n  /** The human-readable name of the network configuration. */\n  networkName?: string | undefined;\n  /** Time in epoch milliseconds when the network was created. */\n  creationTime?: bigint | undefined;\n  /** Array of warning messages about the network configuration. */\n  warningMessages?: NetworkWarning[] | undefined;\n  vpcEndpoints?: NetworkVpcEndpoints | undefined;\n  networkInfo?:\n    | {$case: 'gcpNetworkInfo'; gcpNetworkInfo: GcpNetworkInfo}\n    | undefined;\n}\n\n/** Properties of the new network connectivity configuration. */\nexport interface NetworkConnectivityConfig {\n  /** <Databricks> network connectivity configuration ID. */\n  networkConnectivityConfigId?: string | undefined;\n  /** Your <Databricks> account ID. You can find your account ID in your <Databricks> accounts console. */\n  accountId?: string | undefined;\n  /**\n   * The name of the network connectivity configuration. The name can contain alphanumeric characters, hyphens,\n   * and underscores. The length must be between 3 and 30 characters. The name must match the regular\n   * expression ^[0-9a-zA-Z-_]{3,30}$\n   */\n  name?: string | undefined;\n  /**\n   * The region for the network connectivity configuration.\n   * Only workspaces in the same region can be attached to the network connectivity configuration.\n   */\n  region?: string | undefined;\n  /** The network connectivity rules that apply to network traffic from your serverless compute resources. */\n  egressConfig?:\n    | CustomerFacingNetworkConnectivityConfigEgressConfig\n    | undefined;\n  /** Time in epoch milliseconds when this object was updated. */\n  updatedTime?: bigint | undefined;\n  /** Time in epoch milliseconds when this object was created. */\n  creationTime?: bigint | undefined;\n}\n\n/**\n * Properties of the new private endpoint rule.\n * Note that for private endpoints towards a VPC endpoint service behind a customer-managed NLB,\n * you must approve the endpoint in AWS console after initialization.\n */\nexport interface NetworkConnectivityConfigAwsPrivateEndpointRule {\n  /** The ID of a private endpoint rule. */\n  ruleId?: string | undefined;\n  /** The ID of a network connectivity configuration, which is the parent resource of this private endpoint rule object. */\n  networkConnectivityConfigId?: string | undefined;\n  /** <Databricks> account ID. You can find your account ID from the Accounts Console. */\n  accountId?: string | undefined;\n  /** The full target AWS endpoint service name that connects to the destination resources of the private endpoint. */\n  endpointService?: string | undefined;\n  /**\n   * Only used by private endpoints towards a VPC endpoint service for customer-managed VPC endpoint service.\n   *\n   * The target AWS resource FQDNs accessible via the VPC endpoint service.\n   * When updating this field, we perform full update on this field. Please ensure a full list of desired domain_names is provided.\n   */\n  domainNames?: string[] | undefined;\n  /**\n   * Only used by private endpoints towards AWS S3 service.\n   *\n   * The globally unique S3 bucket names that will be accessed via the VPC endpoint.\n   * The bucket names must be in the same region as the NCC/endpoint service.\n   * When updating this field, we perform full update on this field.\n   * Please ensure a full list of desired resource_names is provided.\n   */\n  resourceNames?: string[] | undefined;\n  /** The AWS VPC endpoint ID. You can use this ID to identify VPC endpoint created by <Databricks>. */\n  vpcEndpointId?: string | undefined;\n  /**\n   * The current status of this private endpoint. The private endpoint rules are effective only if the connection state\n   * is ESTABLISHED. Remember that you must approve new endpoints on your resources in the AWS console\n   * before they take effect.\n   * The possible values are:\n   * - PENDING: The endpoint has been created and pending approval.\n   * - ESTABLISHED: The endpoint has been approved and is ready to use in your serverless compute resources.\n   * - REJECTED: Connection was rejected by the private link resource owner.\n   * - DISCONNECTED: Connection was removed by the private link resource owner, the private endpoint becomes informative and should be deleted for clean-up.\n   * - EXPIRED: If the endpoint is created but not approved in 14 days, it is EXPIRED.\n   */\n  connectionState?:\n    | NetworkConnectivityConfigAwsPrivateEndpointRule_PrivateLinkConnectionState\n    | undefined;\n  /** Time in epoch milliseconds when this object was created. */\n  creationTime?: bigint | undefined;\n  /** Time in epoch milliseconds when this object was updated. */\n  updatedTime?: bigint | undefined;\n  /** Whether this private endpoint is deactivated. */\n  deactivated?: boolean | undefined;\n  /** Time in epoch milliseconds when this object was deactivated. */\n  deactivatedAt?: bigint | undefined;\n  /**\n   * Only used by private endpoints towards an AWS S3 service.\n   *\n   * Update this field to activate/deactivate this private endpoint to allow egress access from serverless compute resources.\n   */\n  enabled?: boolean | undefined;\n  errorMessage?: string | undefined;\n}\n\n/**\n * Properties of the new private endpoint rule.\n * Note that you must approve the endpoint in Azure portal after initialization.\n */\nexport interface NetworkConnectivityConfigAzurePrivateEndpointRule {\n  /** The ID of a private endpoint rule. */\n  ruleId?: string | undefined;\n  /** The ID of a network connectivity configuration, which is the parent resource of this private endpoint rule object. */\n  networkConnectivityConfigId?: string | undefined;\n  /** The Azure resource ID of the target resource. */\n  resourceId?: string | undefined;\n  /**\n   * Only used by private endpoints to Azure first-party services.\n   *\n   * The sub-resource type (group ID) of the target resource.\n   * Note that to connect to workspace root storage (root DBFS), you need two endpoints, one for blob and one for dfs.\n   */\n  groupId?: string | undefined;\n  /** The name of the Azure private endpoint resource. */\n  endpointName?: string | undefined;\n  /**\n   * The current status of this private endpoint. The private endpoint rules are effective only if the connection state\n   * is ESTABLISHED. Remember that you must approve new endpoints on your resources in the Azure portal\n   * before they take effect.\n   * The possible values are:\n   * - INIT: (deprecated) The endpoint has been created and pending approval.\n   * - PENDING: The endpoint has been created and pending approval.\n   * - ESTABLISHED: The endpoint has been approved and is ready to use in your serverless compute resources.\n   * - REJECTED: Connection was rejected by the private link resource owner.\n   * - DISCONNECTED: Connection was removed by the private link resource owner, the private endpoint becomes informative and should be deleted for clean-up.\n   * - EXPIRED: If the endpoint was created but not approved in 14 days, it will be EXPIRED.\n   */\n  connectionState?:\n    | NetworkConnectivityConfigAzurePrivateEndpointRule_PrivateLinkConnectionState\n    | undefined;\n  /** Time in epoch milliseconds when this object was created. */\n  creationTime?: bigint | undefined;\n  /** Time in epoch milliseconds when this object was updated. */\n  updatedTime?: bigint | undefined;\n  /** Whether this private endpoint is deactivated. */\n  deactivated?: boolean | undefined;\n  /** Time in epoch milliseconds when this object was deactivated. */\n  deactivatedAt?: bigint | undefined;\n  /**\n   * Not used by customer-managed private endpoint services.\n   *\n   * Domain names of target private link service.\n   * When updating this field, the full list of target domain_names must be specified.\n   */\n  domainNames?: string[] | undefined;\n  errorMessage?: string | undefined;\n}\n\n/**\n * Egress network configurations. Provides network configurations for Databricks -> Customer\n * traffic.\n */\n// eslint-disable-next-line @typescript-eslint/no-empty-object-type\nexport interface NetworkConnectivityConfigEgressConfig {}\n\n/** Default rules don't have specific targets. */\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport interface NetworkConnectivityConfigEgressConfig_DefaultRule {\n  azureServiceEndpointRule?:\n    | NetworkConnectivityConfigEgressConfig_DefaultRule_AzureServiceEndpointRule\n    | undefined;\n  awsStableIpRule?:\n    | NetworkConnectivityConfigEgressConfig_DefaultRule_AwsStableIpRule\n    | undefined;\n}\n\n/** The stable AWS IP CIDR blocks. You can use these to configure the firewall of your resources to allow traffic from your <Databricks> workspace. */\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport interface NetworkConnectivityConfigEgressConfig_DefaultRule_AwsStableIpRule {\n  /** The list of stable IP CIDR blocks from which <Databricks> network traffic originates when accessing your resources. */\n  cidrBlocks?: string[] | undefined;\n}\n\n/**\n * The stable Azure service endpoints. You can configure the firewall of your Azure resources\n * to allow traffic from your <Databricks> serverless compute resources.\n */\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport interface NetworkConnectivityConfigEgressConfig_DefaultRule_AzureServiceEndpointRule {\n  /** The Azure region in which this service endpoint rule applies.. */\n  targetRegion?: string | undefined;\n  /** The Azure services to which this service endpoint rule applies to. */\n  targetServices?: EgressResourceType[] | undefined;\n  /** The list of subnets from which <Databricks> network traffic originates when accessing your Azure resources. */\n  subnets?: string[] | undefined;\n}\n\nexport interface NetworkHealth {\n  errorType?: string | undefined;\n  /** Details of the error. */\n  errorMessage?: string | undefined;\n}\n\nexport interface NetworkVpcEndpoints {\n  /** The VPC endpoint ID used by this network to access the Databricks REST API. */\n  restApi?: string[] | undefined;\n  /** The VPC endpoint ID used by this network to access the <Databricks> secure cluster connectivity relay. */\n  dataplaneRelay?: string[] | undefined;\n}\n\nexport interface NetworkWarning {\n  warningType?: string | undefined;\n  /** Details of the warning. */\n  warningMessage?: string | undefined;\n}\n\n/** * */\nexport interface PrivateAccessSettings {\n  /** <Databricks> private access settings ID. */\n  privateAccessSettingsId?: string | undefined;\n  /** The <Databricks> account ID that hosts the private access settings. */\n  accountId?: string | undefined;\n  /** The human-readable name of the private access settings object. */\n  privateAccessSettingsName?: string | undefined;\n  /** The AWS region for workspaces attached to this private access settings object. */\n  region?: string | undefined;\n  /** Determines if the workspace can be accessed over public internet. For fully private workspaces, you can optionally specify false, but only if you implement both the front-end and the back-end PrivateLink connections. Otherwise, specify true, which means that public access is enabled. */\n  publicAccessEnabled?: boolean | undefined;\n  /**\n   * The private access level controls which VPC endpoints can connect to the UI or API of any workspace that attaches this private access settings object.\n   * `ACCOUNT` level access (the default) allows only VPC endpoints that are registered in your <Databricks> account connect to your workspace.\n   * `ENDPOINT` level access allows only specified VPC endpoints connect to your workspace. For details, see allowed_vpc_endpoint_ids.\n   */\n  privateAccessLevel?: PrivateAccessLevel | undefined;\n  /**\n   * An array of Databricks VPC endpoint IDs. This is the <Databricks> ID that is returned when registering the VPC endpoint configuration in your <Databricks> account. This is not the ID of the VPC endpoint in AWS.\n   * Only used when private_access_level is set to ENDPOINT. This is an allow list of VPC endpoints that in your account that can connect to your workspace over AWS PrivateLink.\n   * If hybrid access to your workspace is enabled by setting public_access_enabled to true, this control only works for PrivateLink connections. To control how your workspace is accessed via public internet, see IP access lists.\n   */\n  allowedVpcEndpointIds?: string[] | undefined;\n}\n\n/** Details required to replace an IP access list. */\nexport interface ReplaceAccountIpAccessListRequest {\n  accountId?: string | undefined;\n  /** The ID for the corresponding IP access list */\n  listId?: string | undefined;\n  /** Label for the IP access list. This **cannot** be empty. */\n  label?: string | undefined;\n  listType?: AccountIpAccessListType_IpAccessListType | undefined;\n  ipAddresses?: string[] | undefined;\n  /** Specifies whether this IP access list is enabled. */\n  enabled?: boolean | undefined;\n}\n\n/** The IP access list was successfully replaced. */\nexport interface ReplaceAccountIpAccessListResponse {\n  ipAccessList?: AccountIpAccessList | undefined;\n}\n\n/** Details required to replace an IP access list. */\nexport interface ReplaceIpAccessListRequest {\n  /** The ID for the corresponding IP access list */\n  listId?: string | undefined;\n  /** Label for the IP access list. This **cannot** be empty. */\n  label?: string | undefined;\n  listType?: IpAccessListType | undefined;\n  ipAddresses?: string[] | undefined;\n  /** Specifies whether this IP access list is enabled. */\n  enabled?: boolean | undefined;\n}\n\n/** The IP access list was successfully replaced. */\nexport interface ReplaceIpAccessListResponse {\n  ipAccessList?: IpAccessList | undefined;\n}\n\n/** Details required to update an IP access list. */\nexport interface UpdateAccountIpAccessListRequest {\n  accountId?: string | undefined;\n  /** The ID for the corresponding IP access list */\n  listId?: string | undefined;\n  /** Label for the IP access list. This **cannot** be empty. */\n  label?: string | undefined;\n  listType?: AccountIpAccessListType_IpAccessListType | undefined;\n  ipAddresses?: string[] | undefined;\n  /** Specifies whether this IP access list is enabled. */\n  enabled?: boolean | undefined;\n}\n\n/** The IP access list was successfully updated. */\nexport interface UpdateAccountIpAccessListResponse {\n  ipAccessList?: AccountIpAccessList | undefined;\n}\n\n/** Details required to update an IP access list. */\nexport interface UpdateIpAccessListRequest {\n  /** The ID for the corresponding IP access list */\n  listId?: string | undefined;\n  /** Label for the IP access list. This **cannot** be empty. */\n  label?: string | undefined;\n  listType?: IpAccessListType | undefined;\n  ipAddresses?: string[] | undefined;\n  /** Specifies whether this IP access list is enabled. */\n  enabled?: boolean | undefined;\n}\n\n/** The IP access list was successfully updated. */\nexport interface UpdateIpAccessListResponse {\n  ipAccessList?: IpAccessList | undefined;\n}\n\n/** Your Network Connectivity Configuration ID. */\nexport interface UpdateNccPrivateEndpointRuleRequest {\n  /** The ID of a network connectivity configuration, which is the parent resource of this private endpoint rule object. */\n  networkConnectivityConfigId?: string | undefined;\n  /** Your <Databricks> account ID. You can find your account ID in your <Databricks> accounts console. */\n  accountId?: string | undefined;\n  /** Your private endpoint rule ID. */\n  privateEndpointRuleId?: string | undefined;\n  privateEndpointRule?: UpdatePrivateEndpointRule | undefined;\n  updateMask?: FieldMask<UpdatePrivateEndpointRule> | undefined;\n}\n\nexport interface UpdateNetworkPolicyRequest {\n  /** The unique identifier for the network policy. */\n  networkPolicyId?: string | undefined;\n  /** Your <Databricks> account ID. You can find your account ID in your <Databricks> accounts console. */\n  accountId?: string | undefined;\n  /** Updated network policy configuration details. */\n  networkPolicy?: AccountNetworkPolicy | undefined;\n}\n\nexport interface UpdatePrivateAccessSettingsRequest {\n  /** Properties of the new private access settings object. */\n  customerFacingPrivateAccessSettings?: PrivateAccessSettings | undefined;\n}\n\n/**\n * Properties of the new private endpoint rule.\n * Note that you must approve the endpoint in Azure portal after initialization.\n */\nexport interface UpdatePrivateEndpointRule {\n  /** The ID of a private endpoint rule. */\n  ruleId?: string | undefined;\n  /** The ID of a network connectivity configuration, which is the parent resource of this private endpoint rule object. */\n  networkConnectivityConfigId?: string | undefined;\n  /**\n   * The current status of this private endpoint. The private endpoint rules are effective only if the connection state\n   * is ESTABLISHED. Remember that you must approve new endpoints on your resources in the Cloud console\n   * before they take effect.\n   * The possible values are:\n   * - PENDING: The endpoint has been created and pending approval.\n   * - ESTABLISHED: The endpoint has been approved and is ready to use in your serverless compute resources.\n   * - REJECTED: Connection was rejected by the private link resource owner.\n   * - DISCONNECTED: Connection was removed by the private link resource owner, the private endpoint becomes informative and should be deleted for clean-up.\n   * - EXPIRED: If the endpoint was created but not approved in 14 days, it will be EXPIRED.\n   * - CREATING: The endpoint creation is in progress. Once successfully created, the state will transition to PENDING.\n   * - CREATE_FAILED: The endpoint creation failed. You can check the error_message field for more details.\n   */\n  connectionState?:\n    | NccPrivateEndpointRule_PrivateLinkConnectionState\n    | undefined;\n  /**\n   * Only used by private endpoints to customer-managed private endpoint services.\n   *\n   * Domain names of target private link service.\n   * When updating this field, the full list of target domain_names must be specified.\n   */\n  domainNames?: string[] | undefined;\n  /** Time in epoch milliseconds when this object was created. */\n  creationTime?: bigint | undefined;\n  /** Time in epoch milliseconds when this object was updated. */\n  updatedTime?: bigint | undefined;\n  /** Whether this private endpoint is deactivated. */\n  deactivated?: boolean | undefined;\n  /** Time in epoch milliseconds when this object was deactivated. */\n  deactivatedAt?: bigint | undefined;\n  errorMessage?: string | undefined;\n  /** The Azure resource ID of the target resource. */\n  resourceId?: string | undefined;\n  /**\n   * Not used by customer-managed private endpoint services.\n   *\n   * The sub-resource type (group ID) of the target resource.\n   * Note that to connect to workspace root storage (root DBFS), you need two endpoints, one for blob and one for dfs.\n   */\n  groupId?: string | undefined;\n  /** The name of the Azure private endpoint resource. */\n  endpointName?: string | undefined;\n  /** <Databricks> account ID. You can find your account ID from the Accounts Console. */\n  accountId?: string | undefined;\n  /** The full target AWS endpoint service name that connects to the destination resources of the private endpoint. */\n  endpointService?: string | undefined;\n  /**\n   * Only used by private endpoints towards AWS S3 service.\n   *\n   * The globally unique S3 bucket names that will be accessed via the VPC endpoint.\n   * The bucket names must be in the same region as the NCC/endpoint service.\n   * When updating this field, we perform full update on this field. Please ensure a full list of desired\n   * resource_names is provided.\n   */\n  resourceNames?: string[] | undefined;\n  /** The AWS VPC endpoint ID. You can use this ID to identify the VPC endpoint created by <Databricks>. */\n  vpcEndpointId?: string | undefined;\n  /**\n   * Update this field to activate/deactivate this private endpoint to allow egress access from\n   * serverless compute resources. Only honored for first-party services on each cloud (e.g. AWS S3).\n   */\n  enabled?: boolean | undefined;\n  endpoint?: {$case: 'gcpEndpoint'; gcpEndpoint: GcpEndpoint} | undefined;\n}\n\nexport interface UpdateWorkspaceNetworkOptionRequest {\n  /** Your <Databricks> account ID. You can find your account ID in your <Databricks> accounts console. */\n  accountId?: string | undefined;\n  /** The workspace ID. */\n  workspaceId?: bigint | undefined;\n  /** The network option details for the workspace. */\n  workspaceNetworkOption?: WorkspaceNetworkOption | undefined;\n}\n\n/** * */\nexport interface VpcEndpoint {\n  /** Databricks VPC endpoint ID. This is the <Databricks>-specific name of the VPC endpoint. Do not confuse this with the `aws_vpc_endpoint_id`, which is the ID within AWS of the VPC endpoint. */\n  vpcEndpointId?: string | undefined;\n  /** The <Databricks> account ID that hosts the VPC endpoint configuration. */\n  accountId?: string | undefined;\n  /** The human-readable name of the storage configuration. */\n  vpcEndpointName?: string | undefined;\n  /** The ID of the VPC endpoint object in AWS. */\n  awsVpcEndpointId?: string | undefined;\n  /** The ID of the <Databricks> [endpoint service](https://docs.aws.amazon.com/vpc/latest/privatelink/endpoint-service.html) that this VPC endpoint is connected to. For a list of endpoint service IDs for each supported AWS region, see the [Databricks PrivateLink documentation](https://docs.databricks.com/administration-guide/cloud-configurations/aws/privatelink.html). */\n  awsEndpointServiceId?: string | undefined;\n  /**\n   * This enumeration represents the type of Databricks VPC endpoint service that was used when creating this VPC endpoint.\n   * If the VPC endpoint connects to the <Databricks> control plane for either the front-end connection or the back-end REST API connection, the value is GENERAL_ACCESS.\n   * If the VPC endpoint connects to the <Databricks> workspace for the back-end secure cluster connectivity relay, the value is DATAPLANE_RELAY_ACCESS.\n   */\n  useCase?: VpcEndpointUseCase | undefined;\n  /** The AWS region in which this VPC endpoint object exists. */\n  region?: string | undefined;\n  /** The AWS Account in which the VPC endpoint object exists. */\n  awsAccountId?: string | undefined;\n  /** The current state (such as `available` or `rejected`) of the VPC endpoint. Derived from AWS. For the full set of values, see [AWS DescribeVpcEndpoint documentation](https://docs.aws.amazon.com/cli/latest/reference/ec2/describe-vpc-endpoints.html). */\n  state?: string | undefined;\n  vpcEndpointInfo?:\n    | {\n        $case: 'gcpVpcEndpointInfo';\n        /**\n         * The cloud info of this vpc endpoint.\n         * Info for a GCP vpc endpoint.\n         */\n        gcpVpcEndpointInfo: GcpVpcEndpointInfo;\n      }\n    | undefined;\n}\n\nexport interface WorkspaceNetworkOption {\n  /**\n   * The network policy ID to apply to the workspace. This controls the network access rules\n   * for all serverless compute resources in the workspace. Each workspace can only be\n   * linked to one policy at a time. If no policy is explicitly assigned,\n   * the workspace will use 'default-policy'.\n   */\n  networkPolicyId?: string | undefined;\n  /** The workspace ID. */\n  workspaceId?: bigint | undefined;\n}\n\nexport const unmarshalAccountIpAccessListSchema: z.ZodType<AccountIpAccessList> =\n  z\n    .object({\n      list_id: z.string().optional(),\n      label: z.string().optional(),\n      ip_addresses: z.array(z.string()).optional(),\n      address_count: z.number().optional(),\n      list_type: z.string().optional(),\n      created_at: z\n        .union([z.number(), z.bigint(), z.string()])\n        .transform(v => BigInt(v))\n        .optional(),\n      created_by: z\n        .union([z.number(), z.bigint(), z.string()])\n        .transform(v => BigInt(v))\n        .optional(),\n      updated_at: z\n        .union([z.number(), z.bigint(), z.string()])\n        .transform(v => BigInt(v))\n        .optional(),\n      updated_by: z\n        .union([z.number(), z.bigint(), z.string()])\n        .transform(v => BigInt(v))\n        .optional(),\n      enabled: z.boolean().optional(),\n    })\n    .transform(d => ({\n      listId: d.list_id,\n      label: d.label,\n      ipAddresses: d.ip_addresses,\n      addressCount: d.address_count,\n      listType: d.list_type,\n      createdAt: d.created_at,\n      createdBy: d.created_by,\n      updatedAt: d.updated_at,\n      updatedBy: d.updated_by,\n      enabled: d.enabled,\n    }));\n\nexport const unmarshalAccountNetworkPolicySchema: z.ZodType<AccountNetworkPolicy> =\n  z\n    .object({\n      network_policy_id: z.string().optional(),\n      account_id: z.string().optional(),\n      egress: z.lazy(() => unmarshalEgressNetworkPolicySchema).optional(),\n      ingress: z.lazy(() => unmarshalIngressNetworkPolicySchema).optional(),\n      ingress_dry_run: z\n        .lazy(() => unmarshalIngressNetworkPolicySchema)\n        .optional(),\n    })\n    .transform(d => ({\n      networkPolicyId: d.network_policy_id,\n      accountId: d.account_id,\n      egress: d.egress,\n      ingress: d.ingress,\n      ingressDryRun: d.ingress_dry_run,\n    }));\n\nexport const unmarshalAwsVpcEndpointInfoSchema: z.ZodType<AwsVpcEndpointInfo> =\n  z\n    .object({\n      aws_vpc_endpoint_id: z.string().optional(),\n      aws_endpoint_service_id: z.string().optional(),\n      aws_account_id: z.string().optional(),\n    })\n    .transform(d => ({\n      awsVpcEndpointId: d.aws_vpc_endpoint_id,\n      awsEndpointServiceId: d.aws_endpoint_service_id,\n      awsAccountId: d.aws_account_id,\n    }));\n\nexport const unmarshalAzurePrivateEndpointInfoSchema: z.ZodType<AzurePrivateEndpointInfo> =\n  z\n    .object({\n      private_endpoint_name: z.string().optional(),\n      private_endpoint_resource_guid: z.string().optional(),\n      private_endpoint_resource_id: z.string().optional(),\n      private_link_service_id: z.string().optional(),\n    })\n    .transform(d => ({\n      privateEndpointName: d.private_endpoint_name,\n      privateEndpointResourceGuid: d.private_endpoint_resource_guid,\n      privateEndpointResourceId: d.private_endpoint_resource_id,\n      privateLinkServiceId: d.private_link_service_id,\n    }));\n\nexport const unmarshalCreateAccountIpAccessListResponseSchema: z.ZodType<CreateAccountIpAccessListResponse> =\n  z\n    .object({\n      ip_access_list: z\n        .lazy(() => unmarshalAccountIpAccessListSchema)\n        .optional(),\n    })\n    .transform(d => ({\n      ipAccessList: d.ip_access_list,\n    }));\n\nexport const unmarshalCreateIpAccessListResponseSchema: z.ZodType<CreateIpAccessListResponse> =\n  z\n    .object({\n      ip_access_list: z.lazy(() => unmarshalIpAccessListSchema).optional(),\n    })\n    .transform(d => ({\n      ipAccessList: d.ip_access_list,\n    }));\n\nexport const unmarshalCustomerFacingNetworkConnectivityConfigEgressConfigSchema: z.ZodType<CustomerFacingNetworkConnectivityConfigEgressConfig> =\n  z\n    .object({\n      default_rules: z\n        .lazy(\n          () => unmarshalNetworkConnectivityConfigEgressConfig_DefaultRuleSchema\n        )\n        .optional(),\n      target_rules: z\n        .lazy(\n          () =>\n            unmarshalCustomerFacingNetworkConnectivityConfigEgressConfig_CustomerFacingTargetRuleSchema\n        )\n        .optional(),\n    })\n    .transform(d => ({\n      defaultRules: d.default_rules,\n      targetRules: d.target_rules,\n    }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const unmarshalCustomerFacingNetworkConnectivityConfigEgressConfig_CustomerFacingTargetRuleSchema: z.ZodType<CustomerFacingNetworkConnectivityConfigEgressConfig_CustomerFacingTargetRule> =\n  z\n    .object({\n      azure_private_endpoint_rules: z\n        .array(\n          z.lazy(\n            () =>\n              unmarshalNetworkConnectivityConfigAzurePrivateEndpointRuleSchema\n          )\n        )\n        .optional(),\n      aws_private_endpoint_rules: z\n        .array(\n          z.lazy(\n            () => unmarshalNetworkConnectivityConfigAwsPrivateEndpointRuleSchema\n          )\n        )\n        .optional(),\n    })\n    .transform(d => ({\n      azurePrivateEndpointRules: d.azure_private_endpoint_rules,\n      awsPrivateEndpointRules: d.aws_private_endpoint_rules,\n    }));\n\nexport const unmarshalDeleteAccountIpAccessListResponseSchema: z.ZodType<DeleteAccountIpAccessListResponse> =\n  z.object({});\n\nexport const unmarshalDeleteIpAccessListResponseSchema: z.ZodType<DeleteIpAccessListResponse> =\n  z.object({});\n\nexport const unmarshalEgressNetworkPolicySchema: z.ZodType<EgressNetworkPolicy> =\n  z\n    .object({\n      network_access: z\n        .lazy(() => unmarshalEgressNetworkPolicy_NetworkAccessPolicySchema)\n        .optional(),\n    })\n    .transform(d => ({\n      networkAccess: d.network_access,\n    }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const unmarshalEgressNetworkPolicy_NetworkAccessPolicySchema: z.ZodType<EgressNetworkPolicy_NetworkAccessPolicy> =\n  z\n    .object({\n      restriction_mode: z.string().optional(),\n      allowed_internet_destinations: z\n        .array(\n          z.lazy(\n            () =>\n              unmarshalEgressNetworkPolicy_NetworkAccessPolicy_InternetDestinationSchema\n          )\n        )\n        .optional(),\n      allowed_storage_destinations: z\n        .array(\n          z.lazy(\n            () =>\n              unmarshalEgressNetworkPolicy_NetworkAccessPolicy_StorageDestinationSchema\n          )\n        )\n        .optional(),\n      policy_enforcement: z\n        .lazy(\n          () =>\n            unmarshalEgressNetworkPolicy_NetworkAccessPolicy_PolicyEnforcementSchema\n        )\n        .optional(),\n      blocked_internet_destinations: z\n        .array(\n          z.lazy(\n            () =>\n              unmarshalEgressNetworkPolicy_NetworkAccessPolicy_InternetDestinationSchema\n          )\n        )\n        .optional(),\n      allowed_databricks_destinations: z\n        .array(\n          z.lazy(\n            () =>\n              unmarshalEgressNetworkPolicy_NetworkAccessPolicy_DatabricksDestinationSchema\n          )\n        )\n        .optional(),\n    })\n    .transform(d => ({\n      restrictionMode: d.restriction_mode,\n      allowedInternetDestinations: d.allowed_internet_destinations,\n      allowedStorageDestinations: d.allowed_storage_destinations,\n      policyEnforcement: d.policy_enforcement,\n      blockedInternetDestinations: d.blocked_internet_destinations,\n      allowedDatabricksDestinations: d.allowed_databricks_destinations,\n    }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const unmarshalEgressNetworkPolicy_NetworkAccessPolicy_DatabricksDestinationSchema: z.ZodType<EgressNetworkPolicy_NetworkAccessPolicy_DatabricksDestination> =\n  z\n    .object({\n      workspace_ids: z\n        .array(\n          z\n            .union([z.number(), z.bigint(), z.string()])\n            .transform(v => BigInt(v))\n        )\n        .optional(),\n    })\n    .transform(d => ({\n      workspaceIds: d.workspace_ids,\n    }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const unmarshalEgressNetworkPolicy_NetworkAccessPolicy_InternetDestinationSchema: z.ZodType<EgressNetworkPolicy_NetworkAccessPolicy_InternetDestination> =\n  z\n    .object({\n      destination: z.string().optional(),\n      internet_destination_type: z.string().optional(),\n    })\n    .transform(d => ({\n      destination: d.destination,\n      internetDestinationType: d.internet_destination_type,\n    }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const unmarshalEgressNetworkPolicy_NetworkAccessPolicy_PolicyEnforcementSchema: z.ZodType<EgressNetworkPolicy_NetworkAccessPolicy_PolicyEnforcement> =\n  z\n    .object({\n      enforcement_mode: z.string().optional(),\n      dry_run_mode_product_filter: z.array(z.string()).optional(),\n    })\n    .transform(d => ({\n      enforcementMode: d.enforcement_mode,\n      dryRunModeProductFilter: d.dry_run_mode_product_filter,\n    }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const unmarshalEgressNetworkPolicy_NetworkAccessPolicy_StorageDestinationSchema: z.ZodType<EgressNetworkPolicy_NetworkAccessPolicy_StorageDestination> =\n  z\n    .object({\n      bucket_name: z.string().optional(),\n      region: z.string().optional(),\n      storage_destination_type: z.string().optional(),\n      azure_storage_account: z.string().optional(),\n      azure_storage_service: z.string().optional(),\n    })\n    .transform(d => ({\n      bucketName: d.bucket_name,\n      region: d.region,\n      storageDestinationType: d.storage_destination_type,\n      azureStorageAccount: d.azure_storage_account,\n      azureStorageService: d.azure_storage_service,\n    }));\n\nexport const unmarshalEndpointSchema: z.ZodType<Endpoint> = z\n  .object({\n    name: z.string().optional(),\n    endpoint_id: z.string().optional(),\n    account_id: z.string().optional(),\n    display_name: z.string().optional(),\n    use_case: z.string().optional(),\n    region: z.string().optional(),\n    state: z.string().optional(),\n    azure_private_endpoint_info: z\n      .lazy(() => unmarshalAzurePrivateEndpointInfoSchema)\n      .optional(),\n    aws_vpc_endpoint_info: z\n      .lazy(() => unmarshalAwsVpcEndpointInfoSchema)\n      .optional(),\n    gcp_psc_endpoint_info: z\n      .lazy(() => unmarshalGcpPscEndpointInfoSchema)\n      .optional(),\n    create_time: z\n      .string()\n      .transform(s => Temporal.Instant.from(s))\n      .optional(),\n  })\n  .transform(d => ({\n    name: d.name,\n    endpointId: d.endpoint_id,\n    accountId: d.account_id,\n    displayName: d.display_name,\n    useCase: d.use_case,\n    region: d.region,\n    state: d.state,\n    endpointInfo:\n      d.azure_private_endpoint_info !== undefined\n        ? {\n            $case: 'azurePrivateEndpointInfo' as const,\n            azurePrivateEndpointInfo: d.azure_private_endpoint_info,\n          }\n        : d.aws_vpc_endpoint_info !== undefined\n          ? {\n              $case: 'awsVpcEndpointInfo' as const,\n              awsVpcEndpointInfo: d.aws_vpc_endpoint_info,\n            }\n          : d.gcp_psc_endpoint_info !== undefined\n            ? {\n                $case: 'gcpPscEndpointInfo' as const,\n                gcpPscEndpointInfo: d.gcp_psc_endpoint_info,\n              }\n            : undefined,\n    createTime: d.create_time,\n  }));\n\nexport const unmarshalGcpEndpointSchema: z.ZodType<GcpEndpoint> = z\n  .object({\n    psc_endpoint_uri: z.string().optional(),\n    service_attachment: z.string().optional(),\n    google_api_endpoints: z\n      .lazy(() => unmarshalGoogleApiEndpointsSchema)\n      .optional(),\n    all_vpc_sc_services: z.boolean().optional(),\n  })\n  .transform(d => ({\n    pscEndpointUri: d.psc_endpoint_uri,\n    targetServices:\n      d.service_attachment !== undefined\n        ? {\n            $case: 'serviceAttachment' as const,\n            serviceAttachment: d.service_attachment,\n          }\n        : d.google_api_endpoints !== undefined\n          ? {\n              $case: 'googleApiEndpoints' as const,\n              googleApiEndpoints: d.google_api_endpoints,\n            }\n          : d.all_vpc_sc_services !== undefined\n            ? {\n                $case: 'allVpcScServices' as const,\n                allVpcScServices: d.all_vpc_sc_services,\n              }\n            : undefined,\n  }));\n\nexport const unmarshalGcpNetworkInfoSchema: z.ZodType<GcpNetworkInfo> = z\n  .object({\n    network_project_id: z.string().optional(),\n    vpc_id: z.string().optional(),\n    subnet_id: z.string().optional(),\n    subnet_region: z.string().optional(),\n    pod_ip_range_name: z.string().optional(),\n    service_ip_range_name: z.string().optional(),\n  })\n  .transform(d => ({\n    networkProjectId: d.network_project_id,\n    vpcId: d.vpc_id,\n    subnetId: d.subnet_id,\n    subnetRegion: d.subnet_region,\n    podIpRangeName: d.pod_ip_range_name,\n    serviceIpRangeName: d.service_ip_range_name,\n  }));\n\nexport const unmarshalGcpPscEndpointInfoSchema: z.ZodType<GcpPscEndpointInfo> =\n  z\n    .object({\n      psc_connection_id: z.string().optional(),\n      project_id: z.string().optional(),\n      psc_endpoint: z.string().optional(),\n      endpoint_region: z.string().optional(),\n      service_attachment_id: z.string().optional(),\n    })\n    .transform(d => ({\n      pscConnectionId: d.psc_connection_id,\n      projectId: d.project_id,\n      pscEndpoint: d.psc_endpoint,\n      endpointRegion: d.endpoint_region,\n      serviceAttachmentId: d.service_attachment_id,\n    }));\n\nexport const unmarshalGcpVpcEndpointInfoSchema: z.ZodType<GcpVpcEndpointInfo> =\n  z\n    .object({\n      psc_connection_id: z.string().optional(),\n      project_id: z.string().optional(),\n      psc_endpoint_name: z.string().optional(),\n      endpoint_region: z.string().optional(),\n      service_attachment_id: z.string().optional(),\n    })\n    .transform(d => ({\n      pscConnectionId: d.psc_connection_id,\n      projectId: d.project_id,\n      pscEndpointName: d.psc_endpoint_name,\n      endpointRegion: d.endpoint_region,\n      serviceAttachmentId: d.service_attachment_id,\n    }));\n\nexport const unmarshalGetAccountIpAccessListResponseSchema: z.ZodType<GetAccountIpAccessListResponse> =\n  z\n    .object({\n      ip_access_list: z\n        .lazy(() => unmarshalAccountIpAccessListSchema)\n        .optional(),\n    })\n    .transform(d => ({\n      ipAccessList: d.ip_access_list,\n    }));\n\nexport const unmarshalGetIpAccessListResponseSchema: z.ZodType<GetIpAccessListResponse> =\n  z\n    .object({\n      ip_access_list: z.lazy(() => unmarshalIpAccessListSchema).optional(),\n    })\n    .transform(d => ({\n      ipAccessList: d.ip_access_list,\n    }));\n\nexport const unmarshalGoogleApiEndpointsSchema: z.ZodType<GoogleApiEndpoints> =\n  z\n    .object({\n      endpoints: z.array(z.string()).optional(),\n    })\n    .transform(d => ({\n      endpoints: d.endpoints,\n    }));\n\nexport const unmarshalIngressNetworkPolicySchema: z.ZodType<IngressNetworkPolicy> =\n  z\n    .object({\n      public_access: z\n        .lazy(() => unmarshalIngressNetworkPolicy_PublicAccessSchema)\n        .optional(),\n      private_access: z\n        .lazy(() => unmarshalIngressNetworkPolicy_PrivateAccessSchema)\n        .optional(),\n      cross_workspace_access: z\n        .lazy(() => unmarshalIngressNetworkPolicy_CrossWorkspaceAccessSchema)\n        .optional(),\n    })\n    .transform(d => ({\n      publicAccess: d.public_access,\n      privateAccess: d.private_access,\n      crossWorkspaceAccess: d.cross_workspace_access,\n    }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const unmarshalIngressNetworkPolicy_AccountApiDestinationSchema: z.ZodType<IngressNetworkPolicy_AccountApiDestination> =\n  z\n    .object({\n      scopes: z.array(z.string()).optional(),\n      scope_qualifier: z.string().optional(),\n    })\n    .transform(d => ({\n      scopes: d.scopes,\n      scopeQualifier: d.scope_qualifier,\n    }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const unmarshalIngressNetworkPolicy_AccountDatabricksOneDestinationSchema: z.ZodType<IngressNetworkPolicy_AccountDatabricksOneDestination> =\n  z\n    .object({\n      all_destinations: z.boolean().optional(),\n    })\n    .transform(d => ({\n      allDestinations: d.all_destinations,\n    }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const unmarshalIngressNetworkPolicy_AccountUiDestinationSchema: z.ZodType<IngressNetworkPolicy_AccountUiDestination> =\n  z\n    .object({\n      all_destinations: z.boolean().optional(),\n    })\n    .transform(d => ({\n      allDestinations: d.all_destinations,\n    }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const unmarshalIngressNetworkPolicy_AppsRuntimeDestinationSchema: z.ZodType<IngressNetworkPolicy_AppsRuntimeDestination> =\n  z\n    .object({\n      all_destinations: z.boolean().optional(),\n    })\n    .transform(d => ({\n      allDestinations: d.all_destinations,\n    }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const unmarshalIngressNetworkPolicy_AuthenticationSchema: z.ZodType<IngressNetworkPolicy_Authentication> =\n  z\n    .object({\n      identity_type: z.string().optional(),\n      identities: z\n        .array(\n          z.lazy(\n            () => unmarshalIngressNetworkPolicy_AuthenticationIdentitySchema\n          )\n        )\n        .optional(),\n    })\n    .transform(d => ({\n      identityType: d.identity_type,\n      identities: d.identities,\n    }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const unmarshalIngressNetworkPolicy_AuthenticationIdentitySchema: z.ZodType<IngressNetworkPolicy_AuthenticationIdentity> =\n  z\n    .object({\n      principal_type: z.string().optional(),\n      principal_id: z\n        .union([z.number(), z.bigint(), z.string()])\n        .transform(v => BigInt(v))\n        .optional(),\n    })\n    .transform(d => ({\n      principalType: d.principal_type,\n      principalId: d.principal_id,\n    }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const unmarshalIngressNetworkPolicy_CrossWorkspaceAccessSchema: z.ZodType<IngressNetworkPolicy_CrossWorkspaceAccess> =\n  z\n    .object({\n      restriction_mode: z.string().optional(),\n      deny_rules: z\n        .array(\n          z.lazy(\n            () => unmarshalIngressNetworkPolicy_CrossWorkspaceIngressRuleSchema\n          )\n        )\n        .optional(),\n      allow_rules: z\n        .array(\n          z.lazy(\n            () => unmarshalIngressNetworkPolicy_CrossWorkspaceIngressRuleSchema\n          )\n        )\n        .optional(),\n    })\n    .transform(d => ({\n      restrictionMode: d.restriction_mode,\n      denyRules: d.deny_rules,\n      allowRules: d.allow_rules,\n    }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const unmarshalIngressNetworkPolicy_CrossWorkspaceIngressRuleSchema: z.ZodType<IngressNetworkPolicy_CrossWorkspaceIngressRule> =\n  z\n    .object({\n      origin: z\n        .lazy(\n          () => unmarshalIngressNetworkPolicy_CrossWorkspaceRequestOriginSchema\n        )\n        .optional(),\n      destination: z\n        .lazy(() => unmarshalIngressNetworkPolicy_RequestDestinationSchema)\n        .optional(),\n      authentication: z\n        .lazy(() => unmarshalIngressNetworkPolicy_AuthenticationSchema)\n        .optional(),\n      label: z.string().optional(),\n    })\n    .transform(d => ({\n      origin: d.origin,\n      destination: d.destination,\n      authentication: d.authentication,\n      label: d.label,\n    }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const unmarshalIngressNetworkPolicy_CrossWorkspaceRequestOriginSchema: z.ZodType<IngressNetworkPolicy_CrossWorkspaceRequestOrigin> =\n  z\n    .object({\n      all_source_workspaces: z.boolean().optional(),\n      selected_workspaces: z\n        .lazy(() => unmarshalIngressNetworkPolicy_WorkspaceIdListSchema)\n        .optional(),\n    })\n    .transform(d => ({\n      source:\n        d.all_source_workspaces !== undefined\n          ? {\n              $case: 'allSourceWorkspaces' as const,\n              allSourceWorkspaces: d.all_source_workspaces,\n            }\n          : d.selected_workspaces !== undefined\n            ? {\n                $case: 'selectedWorkspaces' as const,\n                selectedWorkspaces: d.selected_workspaces,\n              }\n            : undefined,\n    }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const unmarshalIngressNetworkPolicy_EndpointsSchema: z.ZodType<IngressNetworkPolicy_Endpoints> =\n  z\n    .object({\n      endpoint_ids: z.array(z.string()).optional(),\n    })\n    .transform(d => ({\n      endpointIds: d.endpoint_ids,\n    }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const unmarshalIngressNetworkPolicy_IpRangesSchema: z.ZodType<IngressNetworkPolicy_IpRanges> =\n  z\n    .object({\n      ip_ranges: z.array(z.string()).optional(),\n    })\n    .transform(d => ({\n      ipRanges: d.ip_ranges,\n    }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const unmarshalIngressNetworkPolicy_LakebaseRuntimeDestinationSchema: z.ZodType<IngressNetworkPolicy_LakebaseRuntimeDestination> =\n  z\n    .object({\n      all_destinations: z.boolean().optional(),\n    })\n    .transform(d => ({\n      allDestinations: d.all_destinations,\n    }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const unmarshalIngressNetworkPolicy_PrivateAccessSchema: z.ZodType<IngressNetworkPolicy_PrivateAccess> =\n  z\n    .object({\n      restriction_mode: z.string().optional(),\n      deny_rules: z\n        .array(\n          z.lazy(() => unmarshalIngressNetworkPolicy_PrivateIngressRuleSchema)\n        )\n        .optional(),\n      allow_rules: z\n        .array(\n          z.lazy(() => unmarshalIngressNetworkPolicy_PrivateIngressRuleSchema)\n        )\n        .optional(),\n    })\n    .transform(d => ({\n      restrictionMode: d.restriction_mode,\n      denyRules: d.deny_rules,\n      allowRules: d.allow_rules,\n    }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const unmarshalIngressNetworkPolicy_PrivateIngressRuleSchema: z.ZodType<IngressNetworkPolicy_PrivateIngressRule> =\n  z\n    .object({\n      origin: z\n        .lazy(() => unmarshalIngressNetworkPolicy_PrivateRequestOriginSchema)\n        .optional(),\n      destination: z\n        .lazy(() => unmarshalIngressNetworkPolicy_RequestDestinationSchema)\n        .optional(),\n      authentication: z\n        .lazy(() => unmarshalIngressNetworkPolicy_AuthenticationSchema)\n        .optional(),\n      label: z.string().optional(),\n    })\n    .transform(d => ({\n      origin: d.origin,\n      destination: d.destination,\n      authentication: d.authentication,\n      label: d.label,\n    }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const unmarshalIngressNetworkPolicy_PrivateRequestOriginSchema: z.ZodType<IngressNetworkPolicy_PrivateRequestOrigin> =\n  z\n    .object({\n      endpoints: z\n        .lazy(() => unmarshalIngressNetworkPolicy_EndpointsSchema)\n        .optional(),\n      all_registered_endpoints: z.boolean().optional(),\n      azure_workspace_private_link: z.boolean().optional(),\n      all_private_access: z.boolean().optional(),\n    })\n    .transform(d => ({\n      source:\n        d.endpoints !== undefined\n          ? {$case: 'endpoints' as const, endpoints: d.endpoints}\n          : d.all_registered_endpoints !== undefined\n            ? {\n                $case: 'allRegisteredEndpoints' as const,\n                allRegisteredEndpoints: d.all_registered_endpoints,\n              }\n            : d.azure_workspace_private_link !== undefined\n              ? {\n                  $case: 'azureWorkspacePrivateLink' as const,\n                  azureWorkspacePrivateLink: d.azure_workspace_private_link,\n                }\n              : d.all_private_access !== undefined\n                ? {\n                    $case: 'allPrivateAccess' as const,\n                    allPrivateAccess: d.all_private_access,\n                  }\n                : undefined,\n    }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const unmarshalIngressNetworkPolicy_PublicAccessSchema: z.ZodType<IngressNetworkPolicy_PublicAccess> =\n  z\n    .object({\n      restriction_mode: z.string().optional(),\n      deny_rules: z\n        .array(\n          z.lazy(() => unmarshalIngressNetworkPolicy_PublicIngressRuleSchema)\n        )\n        .optional(),\n      allow_rules: z\n        .array(\n          z.lazy(() => unmarshalIngressNetworkPolicy_PublicIngressRuleSchema)\n        )\n        .optional(),\n    })\n    .transform(d => ({\n      restrictionMode: d.restriction_mode,\n      denyRules: d.deny_rules,\n      allowRules: d.allow_rules,\n    }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const unmarshalIngressNetworkPolicy_PublicIngressRuleSchema: z.ZodType<IngressNetworkPolicy_PublicIngressRule> =\n  z\n    .object({\n      origin: z\n        .lazy(() => unmarshalIngressNetworkPolicy_PublicRequestOriginSchema)\n        .optional(),\n      destination: z\n        .lazy(() => unmarshalIngressNetworkPolicy_RequestDestinationSchema)\n        .optional(),\n      authentication: z\n        .lazy(() => unmarshalIngressNetworkPolicy_AuthenticationSchema)\n        .optional(),\n      label: z.string().optional(),\n    })\n    .transform(d => ({\n      origin: d.origin,\n      destination: d.destination,\n      authentication: d.authentication,\n      label: d.label,\n    }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const unmarshalIngressNetworkPolicy_PublicRequestOriginSchema: z.ZodType<IngressNetworkPolicy_PublicRequestOrigin> =\n  z\n    .object({\n      all_ip_ranges: z.boolean().optional(),\n      included_ip_ranges: z\n        .lazy(() => unmarshalIngressNetworkPolicy_IpRangesSchema)\n        .optional(),\n      excluded_ip_ranges: z\n        .lazy(() => unmarshalIngressNetworkPolicy_IpRangesSchema)\n        .optional(),\n    })\n    .transform(d => ({\n      source:\n        d.all_ip_ranges !== undefined\n          ? {$case: 'allIpRanges' as const, allIpRanges: d.all_ip_ranges}\n          : d.included_ip_ranges !== undefined\n            ? {\n                $case: 'includedIpRanges' as const,\n                includedIpRanges: d.included_ip_ranges,\n              }\n            : d.excluded_ip_ranges !== undefined\n              ? {\n                  $case: 'excludedIpRanges' as const,\n                  excludedIpRanges: d.excluded_ip_ranges,\n                }\n              : undefined,\n    }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const unmarshalIngressNetworkPolicy_RequestDestinationSchema: z.ZodType<IngressNetworkPolicy_RequestDestination> =\n  z\n    .object({\n      all_destinations: z.boolean().optional(),\n      workspace_ui: z\n        .lazy(() => unmarshalIngressNetworkPolicy_WorkspaceUiDestinationSchema)\n        .optional(),\n      workspace_api: z\n        .lazy(() => unmarshalIngressNetworkPolicy_WorkspaceApiDestinationSchema)\n        .optional(),\n      apps_runtime: z\n        .lazy(() => unmarshalIngressNetworkPolicy_AppsRuntimeDestinationSchema)\n        .optional(),\n      lakebase_runtime: z\n        .lazy(\n          () => unmarshalIngressNetworkPolicy_LakebaseRuntimeDestinationSchema\n        )\n        .optional(),\n      account_ui: z\n        .lazy(() => unmarshalIngressNetworkPolicy_AccountUiDestinationSchema)\n        .optional(),\n      account_api: z\n        .lazy(() => unmarshalIngressNetworkPolicy_AccountApiDestinationSchema)\n        .optional(),\n      account_databricks_one: z\n        .lazy(\n          () =>\n            unmarshalIngressNetworkPolicy_AccountDatabricksOneDestinationSchema\n        )\n        .optional(),\n    })\n    .transform(d => ({\n      allDestinations: d.all_destinations,\n      workspaceUi: d.workspace_ui,\n      workspaceApi: d.workspace_api,\n      appsRuntime: d.apps_runtime,\n      lakebaseRuntime: d.lakebase_runtime,\n      accountUi: d.account_ui,\n      accountApi: d.account_api,\n      accountDatabricksOne: d.account_databricks_one,\n    }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const unmarshalIngressNetworkPolicy_WorkspaceApiDestinationSchema: z.ZodType<IngressNetworkPolicy_WorkspaceApiDestination> =\n  z\n    .object({\n      scopes: z.array(z.string()).optional(),\n      scope_qualifier: z.string().optional(),\n      excluded_scopes: z.array(z.string()).optional(),\n    })\n    .transform(d => ({\n      scopes: d.scopes,\n      scopeQualifier: d.scope_qualifier,\n      excludedScopes: d.excluded_scopes,\n    }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const unmarshalIngressNetworkPolicy_WorkspaceIdListSchema: z.ZodType<IngressNetworkPolicy_WorkspaceIdList> =\n  z\n    .object({\n      workspace_ids: z\n        .array(\n          z\n            .union([z.number(), z.bigint(), z.string()])\n            .transform(v => BigInt(v))\n        )\n        .optional(),\n    })\n    .transform(d => ({\n      workspaceIds: d.workspace_ids,\n    }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const unmarshalIngressNetworkPolicy_WorkspaceUiDestinationSchema: z.ZodType<IngressNetworkPolicy_WorkspaceUiDestination> =\n  z\n    .object({\n      all_destinations: z.boolean().optional(),\n    })\n    .transform(d => ({\n      allDestinations: d.all_destinations,\n    }));\n\nexport const unmarshalIpAccessListSchema: z.ZodType<IpAccessList> = z\n  .object({\n    list_id: z.string().optional(),\n    label: z.string().optional(),\n    ip_addresses: z.array(z.string()).optional(),\n    address_count: z.number().optional(),\n    list_type: z.string().optional(),\n    created_at: z\n      .union([z.number(), z.bigint(), z.string()])\n      .transform(v => BigInt(v))\n      .optional(),\n    created_by: z\n      .union([z.number(), z.bigint(), z.string()])\n      .transform(v => BigInt(v))\n      .optional(),\n    updated_at: z\n      .union([z.number(), z.bigint(), z.string()])\n      .transform(v => BigInt(v))\n      .optional(),\n    updated_by: z\n      .union([z.number(), z.bigint(), z.string()])\n      .transform(v => BigInt(v))\n      .optional(),\n    enabled: z.boolean().optional(),\n  })\n  .transform(d => ({\n    listId: d.list_id,\n    label: d.label,\n    ipAddresses: d.ip_addresses,\n    addressCount: d.address_count,\n    listType: d.list_type,\n    createdAt: d.created_at,\n    createdBy: d.created_by,\n    updatedAt: d.updated_at,\n    updatedBy: d.updated_by,\n    enabled: d.enabled,\n  }));\n\nexport const unmarshalListAccountIpAccessListsResponseSchema: z.ZodType<ListAccountIpAccessListsResponse> =\n  z\n    .object({\n      ip_access_lists: z\n        .array(z.lazy(() => unmarshalAccountIpAccessListSchema))\n        .optional(),\n    })\n    .transform(d => ({\n      ipAccessLists: d.ip_access_lists,\n    }));\n\nexport const unmarshalListEndpointsResponseSchema: z.ZodType<ListEndpointsResponse> =\n  z\n    .object({\n      items: z.array(z.lazy(() => unmarshalEndpointSchema)).optional(),\n      next_page_token: z.string().optional(),\n    })\n    .transform(d => ({\n      items: d.items,\n      nextPageToken: d.next_page_token,\n    }));\n\nexport const unmarshalListIpAccessListsResponseSchema: z.ZodType<ListIpAccessListsResponse> =\n  z\n    .object({\n      ip_access_lists: z\n        .array(z.lazy(() => unmarshalIpAccessListSchema))\n        .optional(),\n    })\n    .transform(d => ({\n      ipAccessLists: d.ip_access_lists,\n    }));\n\nexport const unmarshalListNccPrivateEndpointRulesResponseSchema: z.ZodType<ListNccPrivateEndpointRulesResponse> =\n  z\n    .object({\n      items: z\n        .array(z.lazy(() => unmarshalNccPrivateEndpointRuleSchema))\n        .optional(),\n      next_page_token: z.string().optional(),\n    })\n    .transform(d => ({\n      items: d.items,\n      nextPageToken: d.next_page_token,\n    }));\n\nexport const unmarshalListNetworkConnectivityConfigsResponseSchema: z.ZodType<ListNetworkConnectivityConfigsResponse> =\n  z\n    .object({\n      items: z\n        .array(z.lazy(() => unmarshalNetworkConnectivityConfigSchema))\n        .optional(),\n      next_page_token: z.string().optional(),\n    })\n    .transform(d => ({\n      items: d.items,\n      nextPageToken: d.next_page_token,\n    }));\n\nexport const unmarshalListNetworkPoliciesResponseSchema: z.ZodType<ListNetworkPoliciesResponse> =\n  z\n    .object({\n      items: z\n        .array(z.lazy(() => unmarshalAccountNetworkPolicySchema))\n        .optional(),\n      next_page_token: z.string().optional(),\n    })\n    .transform(d => ({\n      items: d.items,\n      nextPageToken: d.next_page_token,\n    }));\n\nexport const unmarshalNccPrivateEndpointRuleSchema: z.ZodType<NccPrivateEndpointRule> =\n  z\n    .object({\n      rule_id: z.string().optional(),\n      network_connectivity_config_id: z.string().optional(),\n      connection_state: z.string().optional(),\n      domain_names: z.array(z.string()).optional(),\n      creation_time: z\n        .union([z.number(), z.bigint(), z.string()])\n        .transform(v => BigInt(v))\n        .optional(),\n      updated_time: z\n        .union([z.number(), z.bigint(), z.string()])\n        .transform(v => BigInt(v))\n        .optional(),\n      deactivated: z.boolean().optional(),\n      deactivated_at: z\n        .union([z.number(), z.bigint(), z.string()])\n        .transform(v => BigInt(v))\n        .optional(),\n      error_message: z.string().optional(),\n      resource_id: z.string().optional(),\n      group_id: z.string().optional(),\n      endpoint_name: z.string().optional(),\n      account_id: z.string().optional(),\n      endpoint_service: z.string().optional(),\n      resource_names: z.array(z.string()).optional(),\n      vpc_endpoint_id: z.string().optional(),\n      enabled: z.boolean().optional(),\n      gcp_endpoint: z.lazy(() => unmarshalGcpEndpointSchema).optional(),\n    })\n    .transform(d => ({\n      ruleId: d.rule_id,\n      networkConnectivityConfigId: d.network_connectivity_config_id,\n      connectionState: d.connection_state,\n      domainNames: d.domain_names,\n      creationTime: d.creation_time,\n      updatedTime: d.updated_time,\n      deactivated: d.deactivated,\n      deactivatedAt: d.deactivated_at,\n      errorMessage: d.error_message,\n      resourceId: d.resource_id,\n      groupId: d.group_id,\n      endpointName: d.endpoint_name,\n      accountId: d.account_id,\n      endpointService: d.endpoint_service,\n      resourceNames: d.resource_names,\n      vpcEndpointId: d.vpc_endpoint_id,\n      enabled: d.enabled,\n      endpoint:\n        d.gcp_endpoint !== undefined\n          ? {$case: 'gcpEndpoint' as const, gcpEndpoint: d.gcp_endpoint}\n          : undefined,\n    }));\n\nexport const unmarshalNetworkSchema: z.ZodType<Network> = z\n  .object({\n    network_id: z.string().optional(),\n    account_id: z.string().optional(),\n    workspace_id: z\n      .union([z.number(), z.bigint(), z.string()])\n      .transform(v => BigInt(v))\n      .optional(),\n    vpc_id: z.string().optional(),\n    subnet_ids: z.array(z.string()).optional(),\n    security_group_ids: z.array(z.string()).optional(),\n    vpc_status: z.string().optional(),\n    error_messages: z\n      .array(z.lazy(() => unmarshalNetworkHealthSchema))\n      .optional(),\n    network_name: z.string().optional(),\n    creation_time: z\n      .union([z.number(), z.bigint(), z.string()])\n      .transform(v => BigInt(v))\n      .optional(),\n    warning_messages: z\n      .array(z.lazy(() => unmarshalNetworkWarningSchema))\n      .optional(),\n    vpc_endpoints: z.lazy(() => unmarshalNetworkVpcEndpointsSchema).optional(),\n    gcp_network_info: z.lazy(() => unmarshalGcpNetworkInfoSchema).optional(),\n  })\n  .transform(d => ({\n    networkId: d.network_id,\n    accountId: d.account_id,\n    workspaceId: d.workspace_id,\n    vpcId: d.vpc_id,\n    subnetIds: d.subnet_ids,\n    securityGroupIds: d.security_group_ids,\n    vpcStatus: d.vpc_status,\n    errorMessages: d.error_messages,\n    networkName: d.network_name,\n    creationTime: d.creation_time,\n    warningMessages: d.warning_messages,\n    vpcEndpoints: d.vpc_endpoints,\n    networkInfo:\n      d.gcp_network_info !== undefined\n        ? {$case: 'gcpNetworkInfo' as const, gcpNetworkInfo: d.gcp_network_info}\n        : undefined,\n  }));\n\nexport const unmarshalNetworkConnectivityConfigSchema: z.ZodType<NetworkConnectivityConfig> =\n  z\n    .object({\n      network_connectivity_config_id: z.string().optional(),\n      account_id: z.string().optional(),\n      name: z.string().optional(),\n      region: z.string().optional(),\n      egress_config: z\n        .lazy(\n          () =>\n            unmarshalCustomerFacingNetworkConnectivityConfigEgressConfigSchema\n        )\n        .optional(),\n      updated_time: z\n        .union([z.number(), z.bigint(), z.string()])\n        .transform(v => BigInt(v))\n        .optional(),\n      creation_time: z\n        .union([z.number(), z.bigint(), z.string()])\n        .transform(v => BigInt(v))\n        .optional(),\n    })\n    .transform(d => ({\n      networkConnectivityConfigId: d.network_connectivity_config_id,\n      accountId: d.account_id,\n      name: d.name,\n      region: d.region,\n      egressConfig: d.egress_config,\n      updatedTime: d.updated_time,\n      creationTime: d.creation_time,\n    }));\n\nexport const unmarshalNetworkConnectivityConfigAwsPrivateEndpointRuleSchema: z.ZodType<NetworkConnectivityConfigAwsPrivateEndpointRule> =\n  z\n    .object({\n      rule_id: z.string().optional(),\n      network_connectivity_config_id: z.string().optional(),\n      account_id: z.string().optional(),\n      endpoint_service: z.string().optional(),\n      domain_names: z.array(z.string()).optional(),\n      resource_names: z.array(z.string()).optional(),\n      vpc_endpoint_id: z.string().optional(),\n      connection_state: z.string().optional(),\n      creation_time: z\n        .union([z.number(), z.bigint(), z.string()])\n        .transform(v => BigInt(v))\n        .optional(),\n      updated_time: z\n        .union([z.number(), z.bigint(), z.string()])\n        .transform(v => BigInt(v))\n        .optional(),\n      deactivated: z.boolean().optional(),\n      deactivated_at: z\n        .union([z.number(), z.bigint(), z.string()])\n        .transform(v => BigInt(v))\n        .optional(),\n      enabled: z.boolean().optional(),\n      error_message: z.string().optional(),\n    })\n    .transform(d => ({\n      ruleId: d.rule_id,\n      networkConnectivityConfigId: d.network_connectivity_config_id,\n      accountId: d.account_id,\n      endpointService: d.endpoint_service,\n      domainNames: d.domain_names,\n      resourceNames: d.resource_names,\n      vpcEndpointId: d.vpc_endpoint_id,\n      connectionState: d.connection_state,\n      creationTime: d.creation_time,\n      updatedTime: d.updated_time,\n      deactivated: d.deactivated,\n      deactivatedAt: d.deactivated_at,\n      enabled: d.enabled,\n      errorMessage: d.error_message,\n    }));\n\nexport const unmarshalNetworkConnectivityConfigAzurePrivateEndpointRuleSchema: z.ZodType<NetworkConnectivityConfigAzurePrivateEndpointRule> =\n  z\n    .object({\n      rule_id: z.string().optional(),\n      network_connectivity_config_id: z.string().optional(),\n      resource_id: z.string().optional(),\n      group_id: z.string().optional(),\n      endpoint_name: z.string().optional(),\n      connection_state: z.string().optional(),\n      creation_time: z\n        .union([z.number(), z.bigint(), z.string()])\n        .transform(v => BigInt(v))\n        .optional(),\n      updated_time: z\n        .union([z.number(), z.bigint(), z.string()])\n        .transform(v => BigInt(v))\n        .optional(),\n      deactivated: z.boolean().optional(),\n      deactivated_at: z\n        .union([z.number(), z.bigint(), z.string()])\n        .transform(v => BigInt(v))\n        .optional(),\n      domain_names: z.array(z.string()).optional(),\n      error_message: z.string().optional(),\n    })\n    .transform(d => ({\n      ruleId: d.rule_id,\n      networkConnectivityConfigId: d.network_connectivity_config_id,\n      resourceId: d.resource_id,\n      groupId: d.group_id,\n      endpointName: d.endpoint_name,\n      connectionState: d.connection_state,\n      creationTime: d.creation_time,\n      updatedTime: d.updated_time,\n      deactivated: d.deactivated,\n      deactivatedAt: d.deactivated_at,\n      domainNames: d.domain_names,\n      errorMessage: d.error_message,\n    }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const unmarshalNetworkConnectivityConfigEgressConfig_DefaultRuleSchema: z.ZodType<NetworkConnectivityConfigEgressConfig_DefaultRule> =\n  z\n    .object({\n      azure_service_endpoint_rule: z\n        .lazy(\n          () =>\n            unmarshalNetworkConnectivityConfigEgressConfig_DefaultRule_AzureServiceEndpointRuleSchema\n        )\n        .optional(),\n      aws_stable_ip_rule: z\n        .lazy(\n          () =>\n            unmarshalNetworkConnectivityConfigEgressConfig_DefaultRule_AwsStableIpRuleSchema\n        )\n        .optional(),\n    })\n    .transform(d => ({\n      azureServiceEndpointRule: d.azure_service_endpoint_rule,\n      awsStableIpRule: d.aws_stable_ip_rule,\n    }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const unmarshalNetworkConnectivityConfigEgressConfig_DefaultRule_AwsStableIpRuleSchema: z.ZodType<NetworkConnectivityConfigEgressConfig_DefaultRule_AwsStableIpRule> =\n  z\n    .object({\n      cidr_blocks: z.array(z.string()).optional(),\n    })\n    .transform(d => ({\n      cidrBlocks: d.cidr_blocks,\n    }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const unmarshalNetworkConnectivityConfigEgressConfig_DefaultRule_AzureServiceEndpointRuleSchema: z.ZodType<NetworkConnectivityConfigEgressConfig_DefaultRule_AzureServiceEndpointRule> =\n  z\n    .object({\n      target_region: z.string().optional(),\n      target_services: z.array(z.string()).optional(),\n      subnets: z.array(z.string()).optional(),\n    })\n    .transform(d => ({\n      targetRegion: d.target_region,\n      targetServices: d.target_services,\n      subnets: d.subnets,\n    }));\n\nexport const unmarshalNetworkHealthSchema: z.ZodType<NetworkHealth> = z\n  .object({\n    error_type: z.string().optional(),\n    error_message: z.string().optional(),\n  })\n  .transform(d => ({\n    errorType: d.error_type,\n    errorMessage: d.error_message,\n  }));\n\nexport const unmarshalNetworkVpcEndpointsSchema: z.ZodType<NetworkVpcEndpoints> =\n  z\n    .object({\n      rest_api: z.array(z.string()).optional(),\n      dataplane_relay: z.array(z.string()).optional(),\n    })\n    .transform(d => ({\n      restApi: d.rest_api,\n      dataplaneRelay: d.dataplane_relay,\n    }));\n\nexport const unmarshalNetworkWarningSchema: z.ZodType<NetworkWarning> = z\n  .object({\n    warning_type: z.string().optional(),\n    warning_message: z.string().optional(),\n  })\n  .transform(d => ({\n    warningType: d.warning_type,\n    warningMessage: d.warning_message,\n  }));\n\nexport const unmarshalPrivateAccessSettingsSchema: z.ZodType<PrivateAccessSettings> =\n  z\n    .object({\n      private_access_settings_id: z.string().optional(),\n      account_id: z.string().optional(),\n      private_access_settings_name: z.string().optional(),\n      region: z.string().optional(),\n      public_access_enabled: z.boolean().optional(),\n      private_access_level: z.string().optional(),\n      allowed_vpc_endpoint_ids: z.array(z.string()).optional(),\n    })\n    .transform(d => ({\n      privateAccessSettingsId: d.private_access_settings_id,\n      accountId: d.account_id,\n      privateAccessSettingsName: d.private_access_settings_name,\n      region: d.region,\n      publicAccessEnabled: d.public_access_enabled,\n      privateAccessLevel: d.private_access_level,\n      allowedVpcEndpointIds: d.allowed_vpc_endpoint_ids,\n    }));\n\nexport const unmarshalReplaceAccountIpAccessListResponseSchema: z.ZodType<ReplaceAccountIpAccessListResponse> =\n  z\n    .object({\n      ip_access_list: z\n        .lazy(() => unmarshalAccountIpAccessListSchema)\n        .optional(),\n    })\n    .transform(d => ({\n      ipAccessList: d.ip_access_list,\n    }));\n\nexport const unmarshalReplaceIpAccessListResponseSchema: z.ZodType<ReplaceIpAccessListResponse> =\n  z\n    .object({\n      ip_access_list: z.lazy(() => unmarshalIpAccessListSchema).optional(),\n    })\n    .transform(d => ({\n      ipAccessList: d.ip_access_list,\n    }));\n\nexport const unmarshalUpdateAccountIpAccessListResponseSchema: z.ZodType<UpdateAccountIpAccessListResponse> =\n  z\n    .object({\n      ip_access_list: z\n        .lazy(() => unmarshalAccountIpAccessListSchema)\n        .optional(),\n    })\n    .transform(d => ({\n      ipAccessList: d.ip_access_list,\n    }));\n\nexport const unmarshalUpdateIpAccessListResponseSchema: z.ZodType<UpdateIpAccessListResponse> =\n  z\n    .object({\n      ip_access_list: z.lazy(() => unmarshalIpAccessListSchema).optional(),\n    })\n    .transform(d => ({\n      ipAccessList: d.ip_access_list,\n    }));\n\nexport const unmarshalVpcEndpointSchema: z.ZodType<VpcEndpoint> = z\n  .object({\n    vpc_endpoint_id: z.string().optional(),\n    account_id: z.string().optional(),\n    vpc_endpoint_name: z.string().optional(),\n    aws_vpc_endpoint_id: z.string().optional(),\n    aws_endpoint_service_id: z.string().optional(),\n    use_case: z.string().optional(),\n    region: z.string().optional(),\n    aws_account_id: z.string().optional(),\n    state: z.string().optional(),\n    gcp_vpc_endpoint_info: z\n      .lazy(() => unmarshalGcpVpcEndpointInfoSchema)\n      .optional(),\n  })\n  .transform(d => ({\n    vpcEndpointId: d.vpc_endpoint_id,\n    accountId: d.account_id,\n    vpcEndpointName: d.vpc_endpoint_name,\n    awsVpcEndpointId: d.aws_vpc_endpoint_id,\n    awsEndpointServiceId: d.aws_endpoint_service_id,\n    useCase: d.use_case,\n    region: d.region,\n    awsAccountId: d.aws_account_id,\n    state: d.state,\n    vpcEndpointInfo:\n      d.gcp_vpc_endpoint_info !== undefined\n        ? {\n            $case: 'gcpVpcEndpointInfo' as const,\n            gcpVpcEndpointInfo: d.gcp_vpc_endpoint_info,\n          }\n        : undefined,\n  }));\n\nexport const unmarshalWorkspaceNetworkOptionSchema: z.ZodType<WorkspaceNetworkOption> =\n  z\n    .object({\n      network_policy_id: z.string().optional(),\n      workspace_id: z\n        .union([z.number(), z.bigint(), z.string()])\n        .transform(v => BigInt(v))\n        .optional(),\n    })\n    .transform(d => ({\n      networkPolicyId: d.network_policy_id,\n      workspaceId: d.workspace_id,\n    }));\n\nexport const marshalAccountNetworkPolicySchema: z.ZodType = z\n  .object({\n    networkPolicyId: z.string().optional(),\n    accountId: z.string().optional(),\n    egress: z.lazy(() => marshalEgressNetworkPolicySchema).optional(),\n    ingress: z.lazy(() => marshalIngressNetworkPolicySchema).optional(),\n    ingressDryRun: z.lazy(() => marshalIngressNetworkPolicySchema).optional(),\n  })\n  .transform(d => ({\n    network_policy_id: d.networkPolicyId,\n    account_id: d.accountId,\n    egress: d.egress,\n    ingress: d.ingress,\n    ingress_dry_run: d.ingressDryRun,\n  }));\n\nexport const marshalAwsVpcEndpointInfoSchema: z.ZodType = z\n  .object({\n    awsVpcEndpointId: z.string().optional(),\n    awsEndpointServiceId: z.string().optional(),\n    awsAccountId: z.string().optional(),\n  })\n  .transform(d => ({\n    aws_vpc_endpoint_id: d.awsVpcEndpointId,\n    aws_endpoint_service_id: d.awsEndpointServiceId,\n    aws_account_id: d.awsAccountId,\n  }));\n\nexport const marshalAzurePrivateEndpointInfoSchema: z.ZodType = z\n  .object({\n    privateEndpointName: z.string().optional(),\n    privateEndpointResourceGuid: z.string().optional(),\n    privateEndpointResourceId: z.string().optional(),\n    privateLinkServiceId: z.string().optional(),\n  })\n  .transform(d => ({\n    private_endpoint_name: d.privateEndpointName,\n    private_endpoint_resource_guid: d.privateEndpointResourceGuid,\n    private_endpoint_resource_id: d.privateEndpointResourceId,\n    private_link_service_id: d.privateLinkServiceId,\n  }));\n\nexport const marshalCreateAccountIpAccessListRequestSchema: z.ZodType = z\n  .object({\n    accountId: z.string().optional(),\n    label: z.string().optional(),\n    listType: z.string().optional(),\n    ipAddresses: z.array(z.string()).optional(),\n  })\n  .transform(d => ({\n    account_id: d.accountId,\n    label: d.label,\n    list_type: d.listType,\n    ip_addresses: d.ipAddresses,\n  }));\n\nexport const marshalCreateIpAccessListRequestSchema: z.ZodType = z\n  .object({\n    label: z.string().optional(),\n    listType: z.string().optional(),\n    ipAddresses: z.array(z.string()).optional(),\n  })\n  .transform(d => ({\n    label: d.label,\n    list_type: d.listType,\n    ip_addresses: d.ipAddresses,\n  }));\n\nexport const marshalCreateNetworkConnectivityConfigurationSchema: z.ZodType = z\n  .object({\n    networkConnectivityConfigId: z.string().optional(),\n    accountId: z.string().optional(),\n    name: z.string().optional(),\n    region: z.string().optional(),\n    egressConfig: z\n      .lazy(\n        () => marshalCustomerFacingNetworkConnectivityConfigEgressConfigSchema\n      )\n      .optional(),\n    updatedTime: z.bigint().optional(),\n    creationTime: z.bigint().optional(),\n  })\n  .transform(d => ({\n    network_connectivity_config_id: d.networkConnectivityConfigId,\n    account_id: d.accountId,\n    name: d.name,\n    region: d.region,\n    egress_config: d.egressConfig,\n    updated_time: d.updatedTime,\n    creation_time: d.creationTime,\n  }));\n\nexport const marshalCreateNetworkRequestSchema: z.ZodType = z\n  .object({\n    accountId: z.string().optional(),\n    networkName: z.string().optional(),\n    vpcId: z.string().optional(),\n    subnetIds: z.array(z.string()).optional(),\n    securityGroupIds: z.array(z.string()).optional(),\n    vpcEndpoints: z.lazy(() => marshalNetworkVpcEndpointsSchema).optional(),\n    gcpNetworkInfo: z.lazy(() => marshalGcpNetworkInfoSchema).optional(),\n  })\n  .transform(d => ({\n    account_id: d.accountId,\n    network_name: d.networkName,\n    vpc_id: d.vpcId,\n    subnet_ids: d.subnetIds,\n    security_group_ids: d.securityGroupIds,\n    vpc_endpoints: d.vpcEndpoints,\n    gcp_network_info: d.gcpNetworkInfo,\n  }));\n\nexport const marshalCreatePrivateAccessSettingsRequestSchema: z.ZodType = z\n  .object({\n    accountId: z.string().optional(),\n    privateAccessSettingsName: z.string().optional(),\n    region: z.string().optional(),\n    publicAccessEnabled: z.boolean().optional(),\n    privateAccessLevel: z.string().optional(),\n    allowedVpcEndpointIds: z.array(z.string()).optional(),\n  })\n  .transform(d => ({\n    account_id: d.accountId,\n    private_access_settings_name: d.privateAccessSettingsName,\n    region: d.region,\n    public_access_enabled: d.publicAccessEnabled,\n    private_access_level: d.privateAccessLevel,\n    allowed_vpc_endpoint_ids: d.allowedVpcEndpointIds,\n  }));\n\nexport const marshalCreatePrivateEndpointRuleSchema: z.ZodType = z\n  .object({\n    ruleId: z.string().optional(),\n    networkConnectivityConfigId: z.string().optional(),\n    connectionState: z.string().optional(),\n    domainNames: z.array(z.string()).optional(),\n    creationTime: z.bigint().optional(),\n    updatedTime: z.bigint().optional(),\n    deactivated: z.boolean().optional(),\n    deactivatedAt: z.bigint().optional(),\n    errorMessage: z.string().optional(),\n    resourceId: z.string().optional(),\n    groupId: z.string().optional(),\n    endpointName: z.string().optional(),\n    accountId: z.string().optional(),\n    endpointService: z.string().optional(),\n    resourceNames: z.array(z.string()).optional(),\n    vpcEndpointId: z.string().optional(),\n    enabled: z.boolean().optional(),\n    endpoint: z\n      .discriminatedUnion('$case', [\n        z.object({\n          $case: z.literal('gcpEndpoint'),\n          gcpEndpoint: z.lazy(() => marshalGcpEndpointSchema),\n        }),\n      ])\n      .optional(),\n  })\n  .transform(d => ({\n    rule_id: d.ruleId,\n    network_connectivity_config_id: d.networkConnectivityConfigId,\n    connection_state: d.connectionState,\n    domain_names: d.domainNames,\n    creation_time: d.creationTime,\n    updated_time: d.updatedTime,\n    deactivated: d.deactivated,\n    deactivated_at: d.deactivatedAt,\n    error_message: d.errorMessage,\n    resource_id: d.resourceId,\n    group_id: d.groupId,\n    endpoint_name: d.endpointName,\n    account_id: d.accountId,\n    endpoint_service: d.endpointService,\n    resource_names: d.resourceNames,\n    vpc_endpoint_id: d.vpcEndpointId,\n    enabled: d.enabled,\n    ...(d.endpoint?.$case === 'gcpEndpoint' && {\n      gcp_endpoint: d.endpoint.gcpEndpoint,\n    }),\n  }));\n\nexport const marshalCreateVpcEndpointRequestSchema: z.ZodType = z\n  .object({\n    accountId: z.string().optional(),\n    vpcEndpointName: z.string().optional(),\n    region: z.string().optional(),\n    awsVpcEndpointId: z.string().optional(),\n    vpcEndpointInfo: z\n      .discriminatedUnion('$case', [\n        z.object({\n          $case: z.literal('gcpVpcEndpointInfo'),\n          gcpVpcEndpointInfo: z.lazy(() => marshalGcpVpcEndpointInfoSchema),\n        }),\n      ])\n      .optional(),\n  })\n  .transform(d => ({\n    account_id: d.accountId,\n    vpc_endpoint_name: d.vpcEndpointName,\n    region: d.region,\n    aws_vpc_endpoint_id: d.awsVpcEndpointId,\n    ...(d.vpcEndpointInfo?.$case === 'gcpVpcEndpointInfo' && {\n      gcp_vpc_endpoint_info: d.vpcEndpointInfo.gcpVpcEndpointInfo,\n    }),\n  }));\n\nexport const marshalCustomerFacingNetworkConnectivityConfigEgressConfigSchema: z.ZodType =\n  z\n    .object({\n      defaultRules: z\n        .lazy(\n          () => marshalNetworkConnectivityConfigEgressConfig_DefaultRuleSchema\n        )\n        .optional(),\n      targetRules: z\n        .lazy(\n          () =>\n            marshalCustomerFacingNetworkConnectivityConfigEgressConfig_CustomerFacingTargetRuleSchema\n        )\n        .optional(),\n    })\n    .transform(d => ({\n      default_rules: d.defaultRules,\n      target_rules: d.targetRules,\n    }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const marshalCustomerFacingNetworkConnectivityConfigEgressConfig_CustomerFacingTargetRuleSchema: z.ZodType =\n  z\n    .object({\n      azurePrivateEndpointRules: z\n        .array(\n          z.lazy(\n            () => marshalNetworkConnectivityConfigAzurePrivateEndpointRuleSchema\n          )\n        )\n        .optional(),\n      awsPrivateEndpointRules: z\n        .array(\n          z.lazy(\n            () => marshalNetworkConnectivityConfigAwsPrivateEndpointRuleSchema\n          )\n        )\n        .optional(),\n    })\n    .transform(d => ({\n      azure_private_endpoint_rules: d.azurePrivateEndpointRules,\n      aws_private_endpoint_rules: d.awsPrivateEndpointRules,\n    }));\n\nexport const marshalEgressNetworkPolicySchema: z.ZodType = z\n  .object({\n    networkAccess: z\n      .lazy(() => marshalEgressNetworkPolicy_NetworkAccessPolicySchema)\n      .optional(),\n  })\n  .transform(d => ({\n    network_access: d.networkAccess,\n  }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const marshalEgressNetworkPolicy_NetworkAccessPolicySchema: z.ZodType = z\n  .object({\n    restrictionMode: z.string().optional(),\n    allowedInternetDestinations: z\n      .array(\n        z.lazy(\n          () =>\n            marshalEgressNetworkPolicy_NetworkAccessPolicy_InternetDestinationSchema\n        )\n      )\n      .optional(),\n    allowedStorageDestinations: z\n      .array(\n        z.lazy(\n          () =>\n            marshalEgressNetworkPolicy_NetworkAccessPolicy_StorageDestinationSchema\n        )\n      )\n      .optional(),\n    policyEnforcement: z\n      .lazy(\n        () =>\n          marshalEgressNetworkPolicy_NetworkAccessPolicy_PolicyEnforcementSchema\n      )\n      .optional(),\n    blockedInternetDestinations: z\n      .array(\n        z.lazy(\n          () =>\n            marshalEgressNetworkPolicy_NetworkAccessPolicy_InternetDestinationSchema\n        )\n      )\n      .optional(),\n    allowedDatabricksDestinations: z\n      .array(\n        z.lazy(\n          () =>\n            marshalEgressNetworkPolicy_NetworkAccessPolicy_DatabricksDestinationSchema\n        )\n      )\n      .optional(),\n  })\n  .transform(d => ({\n    restriction_mode: d.restrictionMode,\n    allowed_internet_destinations: d.allowedInternetDestinations,\n    allowed_storage_destinations: d.allowedStorageDestinations,\n    policy_enforcement: d.policyEnforcement,\n    blocked_internet_destinations: d.blockedInternetDestinations,\n    allowed_databricks_destinations: d.allowedDatabricksDestinations,\n  }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const marshalEgressNetworkPolicy_NetworkAccessPolicy_DatabricksDestinationSchema: z.ZodType =\n  z\n    .object({\n      workspaceIds: z.array(z.bigint()).optional(),\n    })\n    .transform(d => ({\n      workspace_ids: d.workspaceIds,\n    }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const marshalEgressNetworkPolicy_NetworkAccessPolicy_InternetDestinationSchema: z.ZodType =\n  z\n    .object({\n      destination: z.string().optional(),\n      internetDestinationType: z.string().optional(),\n    })\n    .transform(d => ({\n      destination: d.destination,\n      internet_destination_type: d.internetDestinationType,\n    }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const marshalEgressNetworkPolicy_NetworkAccessPolicy_PolicyEnforcementSchema: z.ZodType =\n  z\n    .object({\n      enforcementMode: z.string().optional(),\n      dryRunModeProductFilter: z.array(z.string()).optional(),\n    })\n    .transform(d => ({\n      enforcement_mode: d.enforcementMode,\n      dry_run_mode_product_filter: d.dryRunModeProductFilter,\n    }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const marshalEgressNetworkPolicy_NetworkAccessPolicy_StorageDestinationSchema: z.ZodType =\n  z\n    .object({\n      bucketName: z.string().optional(),\n      region: z.string().optional(),\n      storageDestinationType: z.string().optional(),\n      azureStorageAccount: z.string().optional(),\n      azureStorageService: z.string().optional(),\n    })\n    .transform(d => ({\n      bucket_name: d.bucketName,\n      region: d.region,\n      storage_destination_type: d.storageDestinationType,\n      azure_storage_account: d.azureStorageAccount,\n      azure_storage_service: d.azureStorageService,\n    }));\n\nexport const marshalEndpointSchema: z.ZodType = z\n  .object({\n    name: z.string().optional(),\n    endpointId: z.string().optional(),\n    accountId: z.string().optional(),\n    displayName: z.string().optional(),\n    useCase: z.string().optional(),\n    region: z.string().optional(),\n    state: z.string().optional(),\n    endpointInfo: z\n      .discriminatedUnion('$case', [\n        z.object({\n          $case: z.literal('azurePrivateEndpointInfo'),\n          azurePrivateEndpointInfo: z.lazy(\n            () => marshalAzurePrivateEndpointInfoSchema\n          ),\n        }),\n        z.object({\n          $case: z.literal('awsVpcEndpointInfo'),\n          awsVpcEndpointInfo: z.lazy(() => marshalAwsVpcEndpointInfoSchema),\n        }),\n        z.object({\n          $case: z.literal('gcpPscEndpointInfo'),\n          gcpPscEndpointInfo: z.lazy(() => marshalGcpPscEndpointInfoSchema),\n        }),\n      ])\n      .optional(),\n    createTime: z\n      .any()\n      .transform((d: Temporal.Instant) => d.toString())\n      .optional(),\n  })\n  .transform(d => ({\n    name: d.name,\n    endpoint_id: d.endpointId,\n    account_id: d.accountId,\n    display_name: d.displayName,\n    use_case: d.useCase,\n    region: d.region,\n    state: d.state,\n    ...(d.endpointInfo?.$case === 'azurePrivateEndpointInfo' && {\n      azure_private_endpoint_info: d.endpointInfo.azurePrivateEndpointInfo,\n    }),\n    ...(d.endpointInfo?.$case === 'awsVpcEndpointInfo' && {\n      aws_vpc_endpoint_info: d.endpointInfo.awsVpcEndpointInfo,\n    }),\n    ...(d.endpointInfo?.$case === 'gcpPscEndpointInfo' && {\n      gcp_psc_endpoint_info: d.endpointInfo.gcpPscEndpointInfo,\n    }),\n    create_time: d.createTime,\n  }));\n\nexport const marshalGcpEndpointSchema: z.ZodType = z\n  .object({\n    pscEndpointUri: z.string().optional(),\n    targetServices: z\n      .discriminatedUnion('$case', [\n        z.object({\n          $case: z.literal('serviceAttachment'),\n          serviceAttachment: z.string(),\n        }),\n        z.object({\n          $case: z.literal('googleApiEndpoints'),\n          googleApiEndpoints: z.lazy(() => marshalGoogleApiEndpointsSchema),\n        }),\n        z.object({\n          $case: z.literal('allVpcScServices'),\n          allVpcScServices: z.boolean(),\n        }),\n      ])\n      .optional(),\n  })\n  .transform(d => ({\n    psc_endpoint_uri: d.pscEndpointUri,\n    ...(d.targetServices?.$case === 'serviceAttachment' && {\n      service_attachment: d.targetServices.serviceAttachment,\n    }),\n    ...(d.targetServices?.$case === 'googleApiEndpoints' && {\n      google_api_endpoints: d.targetServices.googleApiEndpoints,\n    }),\n    ...(d.targetServices?.$case === 'allVpcScServices' && {\n      all_vpc_sc_services: d.targetServices.allVpcScServices,\n    }),\n  }));\n\nexport const marshalGcpNetworkInfoSchema: z.ZodType = z\n  .object({\n    networkProjectId: z.string().optional(),\n    vpcId: z.string().optional(),\n    subnetId: z.string().optional(),\n    subnetRegion: z.string().optional(),\n    podIpRangeName: z.string().optional(),\n    serviceIpRangeName: z.string().optional(),\n  })\n  .transform(d => ({\n    network_project_id: d.networkProjectId,\n    vpc_id: d.vpcId,\n    subnet_id: d.subnetId,\n    subnet_region: d.subnetRegion,\n    pod_ip_range_name: d.podIpRangeName,\n    service_ip_range_name: d.serviceIpRangeName,\n  }));\n\nexport const marshalGcpPscEndpointInfoSchema: z.ZodType = z\n  .object({\n    pscConnectionId: z.string().optional(),\n    projectId: z.string().optional(),\n    pscEndpoint: z.string().optional(),\n    endpointRegion: z.string().optional(),\n    serviceAttachmentId: z.string().optional(),\n  })\n  .transform(d => ({\n    psc_connection_id: d.pscConnectionId,\n    project_id: d.projectId,\n    psc_endpoint: d.pscEndpoint,\n    endpoint_region: d.endpointRegion,\n    service_attachment_id: d.serviceAttachmentId,\n  }));\n\nexport const marshalGcpVpcEndpointInfoSchema: z.ZodType = z\n  .object({\n    pscConnectionId: z.string().optional(),\n    projectId: z.string().optional(),\n    pscEndpointName: z.string().optional(),\n    endpointRegion: z.string().optional(),\n    serviceAttachmentId: z.string().optional(),\n  })\n  .transform(d => ({\n    psc_connection_id: d.pscConnectionId,\n    project_id: d.projectId,\n    psc_endpoint_name: d.pscEndpointName,\n    endpoint_region: d.endpointRegion,\n    service_attachment_id: d.serviceAttachmentId,\n  }));\n\nexport const marshalGoogleApiEndpointsSchema: z.ZodType = z\n  .object({\n    endpoints: z.array(z.string()).optional(),\n  })\n  .transform(d => ({\n    endpoints: d.endpoints,\n  }));\n\nexport const marshalIngressNetworkPolicySchema: z.ZodType = z\n  .object({\n    publicAccess: z\n      .lazy(() => marshalIngressNetworkPolicy_PublicAccessSchema)\n      .optional(),\n    privateAccess: z\n      .lazy(() => marshalIngressNetworkPolicy_PrivateAccessSchema)\n      .optional(),\n    crossWorkspaceAccess: z\n      .lazy(() => marshalIngressNetworkPolicy_CrossWorkspaceAccessSchema)\n      .optional(),\n  })\n  .transform(d => ({\n    public_access: d.publicAccess,\n    private_access: d.privateAccess,\n    cross_workspace_access: d.crossWorkspaceAccess,\n  }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const marshalIngressNetworkPolicy_AccountApiDestinationSchema: z.ZodType =\n  z\n    .object({\n      scopes: z.array(z.string()).optional(),\n      scopeQualifier: z.string().optional(),\n    })\n    .transform(d => ({\n      scopes: d.scopes,\n      scope_qualifier: d.scopeQualifier,\n    }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const marshalIngressNetworkPolicy_AccountDatabricksOneDestinationSchema: z.ZodType =\n  z\n    .object({\n      allDestinations: z.boolean().optional(),\n    })\n    .transform(d => ({\n      all_destinations: d.allDestinations,\n    }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const marshalIngressNetworkPolicy_AccountUiDestinationSchema: z.ZodType =\n  z\n    .object({\n      allDestinations: z.boolean().optional(),\n    })\n    .transform(d => ({\n      all_destinations: d.allDestinations,\n    }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const marshalIngressNetworkPolicy_AppsRuntimeDestinationSchema: z.ZodType =\n  z\n    .object({\n      allDestinations: z.boolean().optional(),\n    })\n    .transform(d => ({\n      all_destinations: d.allDestinations,\n    }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const marshalIngressNetworkPolicy_AuthenticationSchema: z.ZodType = z\n  .object({\n    identityType: z.string().optional(),\n    identities: z\n      .array(\n        z.lazy(() => marshalIngressNetworkPolicy_AuthenticationIdentitySchema)\n      )\n      .optional(),\n  })\n  .transform(d => ({\n    identity_type: d.identityType,\n    identities: d.identities,\n  }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const marshalIngressNetworkPolicy_AuthenticationIdentitySchema: z.ZodType =\n  z\n    .object({\n      principalType: z.string().optional(),\n      principalId: z.bigint().optional(),\n    })\n    .transform(d => ({\n      principal_type: d.principalType,\n      principal_id: d.principalId,\n    }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const marshalIngressNetworkPolicy_CrossWorkspaceAccessSchema: z.ZodType =\n  z\n    .object({\n      restrictionMode: z.string().optional(),\n      denyRules: z\n        .array(\n          z.lazy(\n            () => marshalIngressNetworkPolicy_CrossWorkspaceIngressRuleSchema\n          )\n        )\n        .optional(),\n      allowRules: z\n        .array(\n          z.lazy(\n            () => marshalIngressNetworkPolicy_CrossWorkspaceIngressRuleSchema\n          )\n        )\n        .optional(),\n    })\n    .transform(d => ({\n      restriction_mode: d.restrictionMode,\n      deny_rules: d.denyRules,\n      allow_rules: d.allowRules,\n    }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const marshalIngressNetworkPolicy_CrossWorkspaceIngressRuleSchema: z.ZodType =\n  z\n    .object({\n      origin: z\n        .lazy(\n          () => marshalIngressNetworkPolicy_CrossWorkspaceRequestOriginSchema\n        )\n        .optional(),\n      destination: z\n        .lazy(() => marshalIngressNetworkPolicy_RequestDestinationSchema)\n        .optional(),\n      authentication: z\n        .lazy(() => marshalIngressNetworkPolicy_AuthenticationSchema)\n        .optional(),\n      label: z.string().optional(),\n    })\n    .transform(d => ({\n      origin: d.origin,\n      destination: d.destination,\n      authentication: d.authentication,\n      label: d.label,\n    }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const marshalIngressNetworkPolicy_CrossWorkspaceRequestOriginSchema: z.ZodType =\n  z\n    .object({\n      source: z\n        .discriminatedUnion('$case', [\n          z.object({\n            $case: z.literal('allSourceWorkspaces'),\n            allSourceWorkspaces: z.boolean(),\n          }),\n          z.object({\n            $case: z.literal('selectedWorkspaces'),\n            selectedWorkspaces: z.lazy(\n              () => marshalIngressNetworkPolicy_WorkspaceIdListSchema\n            ),\n          }),\n        ])\n        .optional(),\n    })\n    .transform(d => ({\n      ...(d.source?.$case === 'allSourceWorkspaces' && {\n        all_source_workspaces: d.source.allSourceWorkspaces,\n      }),\n      ...(d.source?.$case === 'selectedWorkspaces' && {\n        selected_workspaces: d.source.selectedWorkspaces,\n      }),\n    }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const marshalIngressNetworkPolicy_EndpointsSchema: z.ZodType = z\n  .object({\n    endpointIds: z.array(z.string()).optional(),\n  })\n  .transform(d => ({\n    endpoint_ids: d.endpointIds,\n  }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const marshalIngressNetworkPolicy_IpRangesSchema: z.ZodType = z\n  .object({\n    ipRanges: z.array(z.string()).optional(),\n  })\n  .transform(d => ({\n    ip_ranges: d.ipRanges,\n  }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const marshalIngressNetworkPolicy_LakebaseRuntimeDestinationSchema: z.ZodType =\n  z\n    .object({\n      allDestinations: z.boolean().optional(),\n    })\n    .transform(d => ({\n      all_destinations: d.allDestinations,\n    }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const marshalIngressNetworkPolicy_PrivateAccessSchema: z.ZodType = z\n  .object({\n    restrictionMode: z.string().optional(),\n    denyRules: z\n      .array(z.lazy(() => marshalIngressNetworkPolicy_PrivateIngressRuleSchema))\n      .optional(),\n    allowRules: z\n      .array(z.lazy(() => marshalIngressNetworkPolicy_PrivateIngressRuleSchema))\n      .optional(),\n  })\n  .transform(d => ({\n    restriction_mode: d.restrictionMode,\n    deny_rules: d.denyRules,\n    allow_rules: d.allowRules,\n  }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const marshalIngressNetworkPolicy_PrivateIngressRuleSchema: z.ZodType = z\n  .object({\n    origin: z\n      .lazy(() => marshalIngressNetworkPolicy_PrivateRequestOriginSchema)\n      .optional(),\n    destination: z\n      .lazy(() => marshalIngressNetworkPolicy_RequestDestinationSchema)\n      .optional(),\n    authentication: z\n      .lazy(() => marshalIngressNetworkPolicy_AuthenticationSchema)\n      .optional(),\n    label: z.string().optional(),\n  })\n  .transform(d => ({\n    origin: d.origin,\n    destination: d.destination,\n    authentication: d.authentication,\n    label: d.label,\n  }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const marshalIngressNetworkPolicy_PrivateRequestOriginSchema: z.ZodType =\n  z\n    .object({\n      source: z\n        .discriminatedUnion('$case', [\n          z.object({\n            $case: z.literal('endpoints'),\n            endpoints: z.lazy(\n              () => marshalIngressNetworkPolicy_EndpointsSchema\n            ),\n          }),\n          z.object({\n            $case: z.literal('allRegisteredEndpoints'),\n            allRegisteredEndpoints: z.boolean(),\n          }),\n          z.object({\n            $case: z.literal('azureWorkspacePrivateLink'),\n            azureWorkspacePrivateLink: z.boolean(),\n          }),\n          z.object({\n            $case: z.literal('allPrivateAccess'),\n            allPrivateAccess: z.boolean(),\n          }),\n        ])\n        .optional(),\n    })\n    .transform(d => ({\n      ...(d.source?.$case === 'endpoints' && {endpoints: d.source.endpoints}),\n      ...(d.source?.$case === 'allRegisteredEndpoints' && {\n        all_registered_endpoints: d.source.allRegisteredEndpoints,\n      }),\n      ...(d.source?.$case === 'azureWorkspacePrivateLink' && {\n        azure_workspace_private_link: d.source.azureWorkspacePrivateLink,\n      }),\n      ...(d.source?.$case === 'allPrivateAccess' && {\n        all_private_access: d.source.allPrivateAccess,\n      }),\n    }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const marshalIngressNetworkPolicy_PublicAccessSchema: z.ZodType = z\n  .object({\n    restrictionMode: z.string().optional(),\n    denyRules: z\n      .array(z.lazy(() => marshalIngressNetworkPolicy_PublicIngressRuleSchema))\n      .optional(),\n    allowRules: z\n      .array(z.lazy(() => marshalIngressNetworkPolicy_PublicIngressRuleSchema))\n      .optional(),\n  })\n  .transform(d => ({\n    restriction_mode: d.restrictionMode,\n    deny_rules: d.denyRules,\n    allow_rules: d.allowRules,\n  }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const marshalIngressNetworkPolicy_PublicIngressRuleSchema: z.ZodType = z\n  .object({\n    origin: z\n      .lazy(() => marshalIngressNetworkPolicy_PublicRequestOriginSchema)\n      .optional(),\n    destination: z\n      .lazy(() => marshalIngressNetworkPolicy_RequestDestinationSchema)\n      .optional(),\n    authentication: z\n      .lazy(() => marshalIngressNetworkPolicy_AuthenticationSchema)\n      .optional(),\n    label: z.string().optional(),\n  })\n  .transform(d => ({\n    origin: d.origin,\n    destination: d.destination,\n    authentication: d.authentication,\n    label: d.label,\n  }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const marshalIngressNetworkPolicy_PublicRequestOriginSchema: z.ZodType =\n  z\n    .object({\n      source: z\n        .discriminatedUnion('$case', [\n          z.object({$case: z.literal('allIpRanges'), allIpRanges: z.boolean()}),\n          z.object({\n            $case: z.literal('includedIpRanges'),\n            includedIpRanges: z.lazy(\n              () => marshalIngressNetworkPolicy_IpRangesSchema\n            ),\n          }),\n          z.object({\n            $case: z.literal('excludedIpRanges'),\n            excludedIpRanges: z.lazy(\n              () => marshalIngressNetworkPolicy_IpRangesSchema\n            ),\n          }),\n        ])\n        .optional(),\n    })\n    .transform(d => ({\n      ...(d.source?.$case === 'allIpRanges' && {\n        all_ip_ranges: d.source.allIpRanges,\n      }),\n      ...(d.source?.$case === 'includedIpRanges' && {\n        included_ip_ranges: d.source.includedIpRanges,\n      }),\n      ...(d.source?.$case === 'excludedIpRanges' && {\n        excluded_ip_ranges: d.source.excludedIpRanges,\n      }),\n    }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const marshalIngressNetworkPolicy_RequestDestinationSchema: z.ZodType = z\n  .object({\n    allDestinations: z.boolean().optional(),\n    workspaceUi: z\n      .lazy(() => marshalIngressNetworkPolicy_WorkspaceUiDestinationSchema)\n      .optional(),\n    workspaceApi: z\n      .lazy(() => marshalIngressNetworkPolicy_WorkspaceApiDestinationSchema)\n      .optional(),\n    appsRuntime: z\n      .lazy(() => marshalIngressNetworkPolicy_AppsRuntimeDestinationSchema)\n      .optional(),\n    lakebaseRuntime: z\n      .lazy(() => marshalIngressNetworkPolicy_LakebaseRuntimeDestinationSchema)\n      .optional(),\n    accountUi: z\n      .lazy(() => marshalIngressNetworkPolicy_AccountUiDestinationSchema)\n      .optional(),\n    accountApi: z\n      .lazy(() => marshalIngressNetworkPolicy_AccountApiDestinationSchema)\n      .optional(),\n    accountDatabricksOne: z\n      .lazy(\n        () => marshalIngressNetworkPolicy_AccountDatabricksOneDestinationSchema\n      )\n      .optional(),\n  })\n  .transform(d => ({\n    all_destinations: d.allDestinations,\n    workspace_ui: d.workspaceUi,\n    workspace_api: d.workspaceApi,\n    apps_runtime: d.appsRuntime,\n    lakebase_runtime: d.lakebaseRuntime,\n    account_ui: d.accountUi,\n    account_api: d.accountApi,\n    account_databricks_one: d.accountDatabricksOne,\n  }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const marshalIngressNetworkPolicy_WorkspaceApiDestinationSchema: z.ZodType =\n  z\n    .object({\n      scopes: z.array(z.string()).optional(),\n      scopeQualifier: z.string().optional(),\n      excludedScopes: z.array(z.string()).optional(),\n    })\n    .transform(d => ({\n      scopes: d.scopes,\n      scope_qualifier: d.scopeQualifier,\n      excluded_scopes: d.excludedScopes,\n    }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const marshalIngressNetworkPolicy_WorkspaceIdListSchema: z.ZodType = z\n  .object({\n    workspaceIds: z.array(z.bigint()).optional(),\n  })\n  .transform(d => ({\n    workspace_ids: d.workspaceIds,\n  }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const marshalIngressNetworkPolicy_WorkspaceUiDestinationSchema: z.ZodType =\n  z\n    .object({\n      allDestinations: z.boolean().optional(),\n    })\n    .transform(d => ({\n      all_destinations: d.allDestinations,\n    }));\n\nexport const marshalNetworkConnectivityConfigAwsPrivateEndpointRuleSchema: z.ZodType =\n  z\n    .object({\n      ruleId: z.string().optional(),\n      networkConnectivityConfigId: z.string().optional(),\n      accountId: z.string().optional(),\n      endpointService: z.string().optional(),\n      domainNames: z.array(z.string()).optional(),\n      resourceNames: z.array(z.string()).optional(),\n      vpcEndpointId: z.string().optional(),\n      connectionState: z.string().optional(),\n      creationTime: z.bigint().optional(),\n      updatedTime: z.bigint().optional(),\n      deactivated: z.boolean().optional(),\n      deactivatedAt: z.bigint().optional(),\n      enabled: z.boolean().optional(),\n      errorMessage: z.string().optional(),\n    })\n    .transform(d => ({\n      rule_id: d.ruleId,\n      network_connectivity_config_id: d.networkConnectivityConfigId,\n      account_id: d.accountId,\n      endpoint_service: d.endpointService,\n      domain_names: d.domainNames,\n      resource_names: d.resourceNames,\n      vpc_endpoint_id: d.vpcEndpointId,\n      connection_state: d.connectionState,\n      creation_time: d.creationTime,\n      updated_time: d.updatedTime,\n      deactivated: d.deactivated,\n      deactivated_at: d.deactivatedAt,\n      enabled: d.enabled,\n      error_message: d.errorMessage,\n    }));\n\nexport const marshalNetworkConnectivityConfigAzurePrivateEndpointRuleSchema: z.ZodType =\n  z\n    .object({\n      ruleId: z.string().optional(),\n      networkConnectivityConfigId: z.string().optional(),\n      resourceId: z.string().optional(),\n      groupId: z.string().optional(),\n      endpointName: z.string().optional(),\n      connectionState: z.string().optional(),\n      creationTime: z.bigint().optional(),\n      updatedTime: z.bigint().optional(),\n      deactivated: z.boolean().optional(),\n      deactivatedAt: z.bigint().optional(),\n      domainNames: z.array(z.string()).optional(),\n      errorMessage: z.string().optional(),\n    })\n    .transform(d => ({\n      rule_id: d.ruleId,\n      network_connectivity_config_id: d.networkConnectivityConfigId,\n      resource_id: d.resourceId,\n      group_id: d.groupId,\n      endpoint_name: d.endpointName,\n      connection_state: d.connectionState,\n      creation_time: d.creationTime,\n      updated_time: d.updatedTime,\n      deactivated: d.deactivated,\n      deactivated_at: d.deactivatedAt,\n      domain_names: d.domainNames,\n      error_message: d.errorMessage,\n    }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const marshalNetworkConnectivityConfigEgressConfig_DefaultRuleSchema: z.ZodType =\n  z\n    .object({\n      azureServiceEndpointRule: z\n        .lazy(\n          () =>\n            marshalNetworkConnectivityConfigEgressConfig_DefaultRule_AzureServiceEndpointRuleSchema\n        )\n        .optional(),\n      awsStableIpRule: z\n        .lazy(\n          () =>\n            marshalNetworkConnectivityConfigEgressConfig_DefaultRule_AwsStableIpRuleSchema\n        )\n        .optional(),\n    })\n    .transform(d => ({\n      azure_service_endpoint_rule: d.azureServiceEndpointRule,\n      aws_stable_ip_rule: d.awsStableIpRule,\n    }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const marshalNetworkConnectivityConfigEgressConfig_DefaultRule_AwsStableIpRuleSchema: z.ZodType =\n  z\n    .object({\n      cidrBlocks: z.array(z.string()).optional(),\n    })\n    .transform(d => ({\n      cidr_blocks: d.cidrBlocks,\n    }));\n\n// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.\nexport const marshalNetworkConnectivityConfigEgressConfig_DefaultRule_AzureServiceEndpointRuleSchema: z.ZodType =\n  z\n    .object({\n      targetRegion: z.string().optional(),\n      targetServices: z.array(z.string()).optional(),\n      subnets: z.array(z.string()).optional(),\n    })\n    .transform(d => ({\n      target_region: d.targetRegion,\n      target_services: d.targetServices,\n      subnets: d.subnets,\n    }));\n\nexport const marshalNetworkVpcEndpointsSchema: z.ZodType = z\n  .object({\n    restApi: z.array(z.string()).optional(),\n    dataplaneRelay: z.array(z.string()).optional(),\n  })\n  .transform(d => ({\n    rest_api: d.restApi,\n    dataplane_relay: d.dataplaneRelay,\n  }));\n\nexport const marshalPrivateAccessSettingsSchema: z.ZodType = z\n  .object({\n    privateAccessSettingsId: z.string().optional(),\n    accountId: z.string().optional(),\n    privateAccessSettingsName: z.string().optional(),\n    region: z.string().optional(),\n    publicAccessEnabled: z.boolean().optional(),\n    privateAccessLevel: z.string().optional(),\n    allowedVpcEndpointIds: z.array(z.string()).optional(),\n  })\n  .transform(d => ({\n    private_access_settings_id: d.privateAccessSettingsId,\n    account_id: d.accountId,\n    private_access_settings_name: d.privateAccessSettingsName,\n    region: d.region,\n    public_access_enabled: d.publicAccessEnabled,\n    private_access_level: d.privateAccessLevel,\n    allowed_vpc_endpoint_ids: d.allowedVpcEndpointIds,\n  }));\n\nexport const marshalReplaceAccountIpAccessListRequestSchema: z.ZodType = z\n  .object({\n    accountId: z.string().optional(),\n    listId: z.string().optional(),\n    label: z.string().optional(),\n    listType: z.string().optional(),\n    ipAddresses: z.array(z.string()).optional(),\n    enabled: z.boolean().optional(),\n  })\n  .transform(d => ({\n    account_id: d.accountId,\n    list_id: d.listId,\n    label: d.label,\n    list_type: d.listType,\n    ip_addresses: d.ipAddresses,\n    enabled: d.enabled,\n  }));\n\nexport const marshalReplaceIpAccessListRequestSchema: z.ZodType = z\n  .object({\n    listId: z.string().optional(),\n    label: z.string().optional(),\n    listType: z.string().optional(),\n    ipAddresses: z.array(z.string()).optional(),\n    enabled: z.boolean().optional(),\n  })\n  .transform(d => ({\n    list_id: d.listId,\n    label: d.label,\n    list_type: d.listType,\n    ip_addresses: d.ipAddresses,\n    enabled: d.enabled,\n  }));\n\nexport const marshalUpdateAccountIpAccessListRequestSchema: z.ZodType = z\n  .object({\n    accountId: z.string().optional(),\n    listId: z.string().optional(),\n    label: z.string().optional(),\n    listType: z.string().optional(),\n    ipAddresses: z.array(z.string()).optional(),\n    enabled: z.boolean().optional(),\n  })\n  .transform(d => ({\n    account_id: d.accountId,\n    list_id: d.listId,\n    label: d.label,\n    list_type: d.listType,\n    ip_addresses: d.ipAddresses,\n    enabled: d.enabled,\n  }));\n\nexport const marshalUpdateIpAccessListRequestSchema: z.ZodType = z\n  .object({\n    listId: z.string().optional(),\n    label: z.string().optional(),\n    listType: z.string().optional(),\n    ipAddresses: z.array(z.string()).optional(),\n    enabled: z.boolean().optional(),\n  })\n  .transform(d => ({\n    list_id: d.listId,\n    label: d.label,\n    list_type: d.listType,\n    ip_addresses: d.ipAddresses,\n    enabled: d.enabled,\n  }));\n\nexport const marshalUpdatePrivateEndpointRuleSchema: z.ZodType = z\n  .object({\n    ruleId: z.string().optional(),\n    networkConnectivityConfigId: z.string().optional(),\n    connectionState: z.string().optional(),\n    domainNames: z.array(z.string()).optional(),\n    creationTime: z.bigint().optional(),\n    updatedTime: z.bigint().optional(),\n    deactivated: z.boolean().optional(),\n    deactivatedAt: z.bigint().optional(),\n    errorMessage: z.string().optional(),\n    resourceId: z.string().optional(),\n    groupId: z.string().optional(),\n    endpointName: z.string().optional(),\n    accountId: z.string().optional(),\n    endpointService: z.string().optional(),\n    resourceNames: z.array(z.string()).optional(),\n    vpcEndpointId: z.string().optional(),\n    enabled: z.boolean().optional(),\n    endpoint: z\n      .discriminatedUnion('$case', [\n        z.object({\n          $case: z.literal('gcpEndpoint'),\n          gcpEndpoint: z.lazy(() => marshalGcpEndpointSchema),\n        }),\n      ])\n      .optional(),\n  })\n  .transform(d => ({\n    rule_id: d.ruleId,\n    network_connectivity_config_id: d.networkConnectivityConfigId,\n    connection_state: d.connectionState,\n    domain_names: d.domainNames,\n    creation_time: d.creationTime,\n    updated_time: d.updatedTime,\n    deactivated: d.deactivated,\n    deactivated_at: d.deactivatedAt,\n    error_message: d.errorMessage,\n    resource_id: d.resourceId,\n    group_id: d.groupId,\n    endpoint_name: d.endpointName,\n    account_id: d.accountId,\n    endpoint_service: d.endpointService,\n    resource_names: d.resourceNames,\n    vpc_endpoint_id: d.vpcEndpointId,\n    enabled: d.enabled,\n    ...(d.endpoint?.$case === 'gcpEndpoint' && {\n      gcp_endpoint: d.endpoint.gcpEndpoint,\n    }),\n  }));\n\nexport const marshalWorkspaceNetworkOptionSchema: z.ZodType = z\n  .object({\n    networkPolicyId: z.string().optional(),\n    workspaceId: z.bigint().optional(),\n  })\n  .transform(d => ({\n    network_policy_id: d.networkPolicyId,\n    workspace_id: d.workspaceId,\n  }));\n\nconst gcpEndpointFieldMaskSchema: FieldMaskSchema = {\n  allVpcScServices: {wire: 'all_vpc_sc_services'},\n  googleApiEndpoints: {\n    wire: 'google_api_endpoints',\n    children: () => googleApiEndpointsFieldMaskSchema,\n  },\n  pscEndpointUri: {wire: 'psc_endpoint_uri'},\n  serviceAttachment: {wire: 'service_attachment'},\n};\n\nconst googleApiEndpointsFieldMaskSchema: FieldMaskSchema = {\n  endpoints: {wire: 'endpoints'},\n};\n\nconst updatePrivateEndpointRuleFieldMaskSchema: FieldMaskSchema = {\n  accountId: {wire: 'account_id'},\n  connectionState: {wire: 'connection_state'},\n  creationTime: {wire: 'creation_time'},\n  deactivated: {wire: 'deactivated'},\n  deactivatedAt: {wire: 'deactivated_at'},\n  domainNames: {wire: 'domain_names'},\n  enabled: {wire: 'enabled'},\n  endpointName: {wire: 'endpoint_name'},\n  endpointService: {wire: 'endpoint_service'},\n  errorMessage: {wire: 'error_message'},\n  gcpEndpoint: {\n    wire: 'gcp_endpoint',\n    children: () => gcpEndpointFieldMaskSchema,\n  },\n  groupId: {wire: 'group_id'},\n  networkConnectivityConfigId: {wire: 'network_connectivity_config_id'},\n  resourceId: {wire: 'resource_id'},\n  resourceNames: {wire: 'resource_names'},\n  ruleId: {wire: 'rule_id'},\n  updatedTime: {wire: 'updated_time'},\n  vpcEndpointId: {wire: 'vpc_endpoint_id'},\n};\n\nexport function updatePrivateEndpointRuleFieldMask(\n  ...paths: string[]\n): FieldMask<UpdatePrivateEndpointRule> {\n  return FieldMask.build<UpdatePrivateEndpointRule>(\n    paths,\n    updatePrivateEndpointRuleFieldMaskSchema\n  );\n}\n"],"mappings":";;;;;;;;;;AAaA,MAAa,qBAAqB;CAChC,kCAAkC;CAClC,oBAAoB;CACrB;AAMD,MAAa,gBAAgB;CAE3B,SAAS;CAET,UAAU;CAEV,QAAQ;CAER,cAAc;CACf;;;;;;;AAYD,MAAa,mBAAmB;CAC9B,OAAO;CAEP,OAAO;CACR;AAMD,MAAa,qBAAqB;CAEhC,UAAU;CAEV,SAAS;CACV;AAMD,MAAa,qBAAqB;CAChC,kBAAkB;CAClB,wBAAwB;CAExB,gBAAgB;CACjB;AAMD,MAAa,YAAY;CACvB,OAAO;CACP,QAAQ;CACR,YAAY;CAEZ,QAAQ;CACT;;;;;;;AAYD,MAAa,2CAA2C;CAEtD,OAAO;CAEP,OAAO;CACR;AAOD,MAAa,sFACX;CACE,uCACE;CAEF,UAAU;CACX;;AASH,MAAa,oFACX;CACE,yCACE;CAEF,OAAO;CAEP,YAAY;CACb;AAQH,MAAa,4EACX;CACE,8BAA8B;CAE9B,UAAU;CAEV,SAAS;CACV;;;;;;;AAcH,MAAa,0DAA0D;CACrE,8BAA8B;CAC9B,aAAa;CACb,mBAAmB;CACpB;AAOD,MAAa,oFACX;CACE,sCACE;CAKF,QAAQ;CACR,eAAe;CACf,sBAAsB;CACvB;AAQH,MAAa,kCAAkC,EAE7C,gBAAgB,kBACjB;;;;;;AAYD,MAAa,yCAAyC;CAEpD,0BAA0B;CAE1B,yBAAyB;CAC1B;AAOD,MAAa,mDAAmD;CAC9D,2BAA2B;CAC3B,yBAAyB;CACzB,sCAAsC;CACtC,mCAAmC;CACpC;AAOD,MAAa,4DAA4D;CACvE,4BAA4B;CAC5B,qBAAqB;CACrB,kCAAkC;CACnC;;;;;;;;AAcD,MAAa,4DAA4D;CAKvE,aAAa;CAKb,mBAAmB;CAMnB,aAAa;CACd;;;;;;;;AAcD,MAAa,qDAAqD;CAKhE,gCAAgC;CAKhC,mBAAmB;CACpB;AAOD,MAAa,oDAAoD;CAC/D,aAAa;CACb,mBAAmB;CACpB;AAOD,MAAa,oDAAoD;CAC/D,2CACE;CAEF,aAAa;CAEb,UAAU;CAKV,cAAc;CAEd,SAAS;CAET,SAAS;CAET,UAAU;CAEV,eAAe;CAChB;AAOD,MAAa,6EACX;CACE,2CACE;CAEF,aAAa;CAEb,UAAU;CAKV,cAAc;CAEd,SAAS;CAET,SAAS;CAET,UAAU;CAEV,eAAe;CAChB;AAQH,MAAa,+EACX;CACE,2CACE;CAEF,MAAM;CAEN,aAAa;CAEb,UAAU;CAKV,cAAc;CAEd,SAAS;CAET,SAAS;CAET,UAAU;CAEV,eAAe;CAChB;AAsqDH,MAAa,qCACX,EACG,OAAO;CACN,SAAS,EAAE,QAAQ,CAAC,UAAU;CAC9B,OAAO,EAAE,QAAQ,CAAC,UAAU;CAC5B,cAAc,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CAC5C,eAAe,EAAE,QAAQ,CAAC,UAAU;CACpC,WAAW,EAAE,QAAQ,CAAC,UAAU;CAChC,YAAY,EACT,MAAM;EAAC,EAAE,QAAQ;EAAE,EAAE,QAAQ;EAAE,EAAE,QAAQ;EAAC,CAAC,CAC3C,WAAU,MAAK,OAAO,EAAE,CAAC,CACzB,UAAU;CACb,YAAY,EACT,MAAM;EAAC,EAAE,QAAQ;EAAE,EAAE,QAAQ;EAAE,EAAE,QAAQ;EAAC,CAAC,CAC3C,WAAU,MAAK,OAAO,EAAE,CAAC,CACzB,UAAU;CACb,YAAY,EACT,MAAM;EAAC,EAAE,QAAQ;EAAE,EAAE,QAAQ;EAAE,EAAE,QAAQ;EAAC,CAAC,CAC3C,WAAU,MAAK,OAAO,EAAE,CAAC,CACzB,UAAU;CACb,YAAY,EACT,MAAM;EAAC,EAAE,QAAQ;EAAE,EAAE,QAAQ;EAAE,EAAE,QAAQ;EAAC,CAAC,CAC3C,WAAU,MAAK,OAAO,EAAE,CAAC,CACzB,UAAU;CACb,SAAS,EAAE,SAAS,CAAC,UAAU;CAChC,CAAC,CACD,WAAU,OAAM;CACf,QAAQ,EAAE;CACV,OAAO,EAAE;CACT,aAAa,EAAE;CACf,cAAc,EAAE;CAChB,UAAU,EAAE;CACZ,WAAW,EAAE;CACb,WAAW,EAAE;CACb,WAAW,EAAE;CACb,WAAW,EAAE;CACb,SAAS,EAAE;CACZ,EAAE;AAEP,MAAa,sCACX,EACG,OAAO;CACN,mBAAmB,EAAE,QAAQ,CAAC,UAAU;CACxC,YAAY,EAAE,QAAQ,CAAC,UAAU;CACjC,QAAQ,EAAE,WAAW,mCAAmC,CAAC,UAAU;CACnE,SAAS,EAAE,WAAW,oCAAoC,CAAC,UAAU;CACrE,iBAAiB,EACd,WAAW,oCAAoC,CAC/C,UAAU;CACd,CAAC,CACD,WAAU,OAAM;CACf,iBAAiB,EAAE;CACnB,WAAW,EAAE;CACb,QAAQ,EAAE;CACV,SAAS,EAAE;CACX,eAAe,EAAE;CAClB,EAAE;AAEP,MAAa,oCACX,EACG,OAAO;CACN,qBAAqB,EAAE,QAAQ,CAAC,UAAU;CAC1C,yBAAyB,EAAE,QAAQ,CAAC,UAAU;CAC9C,gBAAgB,EAAE,QAAQ,CAAC,UAAU;CACtC,CAAC,CACD,WAAU,OAAM;CACf,kBAAkB,EAAE;CACpB,sBAAsB,EAAE;CACxB,cAAc,EAAE;CACjB,EAAE;AAEP,MAAa,0CACX,EACG,OAAO;CACN,uBAAuB,EAAE,QAAQ,CAAC,UAAU;CAC5C,gCAAgC,EAAE,QAAQ,CAAC,UAAU;CACrD,8BAA8B,EAAE,QAAQ,CAAC,UAAU;CACnD,yBAAyB,EAAE,QAAQ,CAAC,UAAU;CAC/C,CAAC,CACD,WAAU,OAAM;CACf,qBAAqB,EAAE;CACvB,6BAA6B,EAAE;CAC/B,2BAA2B,EAAE;CAC7B,sBAAsB,EAAE;CACzB,EAAE;AAEP,MAAa,mDACX,EACG,OAAO,EACN,gBAAgB,EACb,WAAW,mCAAmC,CAC9C,UAAU,EACd,CAAC,CACD,WAAU,OAAM,EACf,cAAc,EAAE,gBACjB,EAAE;AAEP,MAAa,4CACX,EACG,OAAO,EACN,gBAAgB,EAAE,WAAW,4BAA4B,CAAC,UAAU,EACrE,CAAC,CACD,WAAU,OAAM,EACf,cAAc,EAAE,gBACjB,EAAE;AAEP,MAAa,qEACX,EACG,OAAO;CACN,eAAe,EACZ,WACO,iEACP,CACA,UAAU;CACb,cAAc,EACX,WAEG,4FACH,CACA,UAAU;CACd,CAAC,CACD,WAAU,OAAM;CACf,cAAc,EAAE;CAChB,aAAa,EAAE;CAChB,EAAE;AAGP,MAAa,8FACX,EACG,OAAO;CACN,8BAA8B,EAC3B,MACC,EAAE,WAEE,iEACH,CACF,CACA,UAAU;CACb,4BAA4B,EACzB,MACC,EAAE,WACM,+DACP,CACF,CACA,UAAU;CACd,CAAC,CACD,WAAU,OAAM;CACf,2BAA2B,EAAE;CAC7B,yBAAyB,EAAE;CAC5B,EAAE;AAEP,MAAa,mDACX,EAAE,OAAO,EAAE,CAAC;AAEd,MAAa,4CACX,EAAE,OAAO,EAAE,CAAC;AAEd,MAAa,qCACX,EACG,OAAO,EACN,gBAAgB,EACb,WAAW,uDAAuD,CAClE,UAAU,EACd,CAAC,CACD,WAAU,OAAM,EACf,eAAe,EAAE,gBAClB,EAAE;AAGP,MAAa,yDACX,EACG,OAAO;CACN,kBAAkB,EAAE,QAAQ,CAAC,UAAU;CACvC,+BAA+B,EAC5B,MACC,EAAE,WAEE,2EACH,CACF,CACA,UAAU;CACb,8BAA8B,EAC3B,MACC,EAAE,WAEE,0EACH,CACF,CACA,UAAU;CACb,oBAAoB,EACjB,WAEG,yEACH,CACA,UAAU;CACb,+BAA+B,EAC5B,MACC,EAAE,WAEE,2EACH,CACF,CACA,UAAU;CACb,iCAAiC,EAC9B,MACC,EAAE,WAEE,6EACH,CACF,CACA,UAAU;CACd,CAAC,CACD,WAAU,OAAM;CACf,iBAAiB,EAAE;CACnB,6BAA6B,EAAE;CAC/B,4BAA4B,EAAE;CAC9B,mBAAmB,EAAE;CACrB,6BAA6B,EAAE;CAC/B,+BAA+B,EAAE;CAClC,EAAE;AAGP,MAAa,+EACX,EACG,OAAO,EACN,eAAe,EACZ,MACC,EACG,MAAM;CAAC,EAAE,QAAQ;CAAE,EAAE,QAAQ;CAAE,EAAE,QAAQ;CAAC,CAAC,CAC3C,WAAU,MAAK,OAAO,EAAE,CAAC,CAC7B,CACA,UAAU,EACd,CAAC,CACD,WAAU,OAAM,EACf,cAAc,EAAE,eACjB,EAAE;AAGP,MAAa,6EACX,EACG,OAAO;CACN,aAAa,EAAE,QAAQ,CAAC,UAAU;CAClC,2BAA2B,EAAE,QAAQ,CAAC,UAAU;CACjD,CAAC,CACD,WAAU,OAAM;CACf,aAAa,EAAE;CACf,yBAAyB,EAAE;CAC5B,EAAE;AAGP,MAAa,2EACX,EACG,OAAO;CACN,kBAAkB,EAAE,QAAQ,CAAC,UAAU;CACvC,6BAA6B,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CAC5D,CAAC,CACD,WAAU,OAAM;CACf,iBAAiB,EAAE;CACnB,yBAAyB,EAAE;CAC5B,EAAE;AAGP,MAAa,4EACX,EACG,OAAO;CACN,aAAa,EAAE,QAAQ,CAAC,UAAU;CAClC,QAAQ,EAAE,QAAQ,CAAC,UAAU;CAC7B,0BAA0B,EAAE,QAAQ,CAAC,UAAU;CAC/C,uBAAuB,EAAE,QAAQ,CAAC,UAAU;CAC5C,uBAAuB,EAAE,QAAQ,CAAC,UAAU;CAC7C,CAAC,CACD,WAAU,OAAM;CACf,YAAY,EAAE;CACd,QAAQ,EAAE;CACV,wBAAwB,EAAE;CAC1B,qBAAqB,EAAE;CACvB,qBAAqB,EAAE;CACxB,EAAE;AAEP,MAAa,0BAA+C,EACzD,OAAO;CACN,MAAM,EAAE,QAAQ,CAAC,UAAU;CAC3B,aAAa,EAAE,QAAQ,CAAC,UAAU;CAClC,YAAY,EAAE,QAAQ,CAAC,UAAU;CACjC,cAAc,EAAE,QAAQ,CAAC,UAAU;CACnC,UAAU,EAAE,QAAQ,CAAC,UAAU;CAC/B,QAAQ,EAAE,QAAQ,CAAC,UAAU;CAC7B,OAAO,EAAE,QAAQ,CAAC,UAAU;CAC5B,6BAA6B,EAC1B,WAAW,wCAAwC,CACnD,UAAU;CACb,uBAAuB,EACpB,WAAW,kCAAkC,CAC7C,UAAU;CACb,uBAAuB,EACpB,WAAW,kCAAkC,CAC7C,UAAU;CACb,aAAa,EACV,QAAQ,CACR,WAAU,MAAK,SAAS,QAAQ,KAAK,EAAE,CAAC,CACxC,UAAU;CACd,CAAC,CACD,WAAU,OAAM;CACf,MAAM,EAAE;CACR,YAAY,EAAE;CACd,WAAW,EAAE;CACb,aAAa,EAAE;CACf,SAAS,EAAE;CACX,QAAQ,EAAE;CACV,OAAO,EAAE;CACT,cACE,EAAE,gCAAgC,SAC9B;EACE,OAAO;EACP,0BAA0B,EAAE;EAC7B,GACD,EAAE,0BAA0B,SAC1B;EACE,OAAO;EACP,oBAAoB,EAAE;EACvB,GACD,EAAE,0BAA0B,SAC1B;EACE,OAAO;EACP,oBAAoB,EAAE;EACvB,GACD;CACV,YAAY,EAAE;CACf,EAAE;AAEL,MAAa,6BAAqD,EAC/D,OAAO;CACN,kBAAkB,EAAE,QAAQ,CAAC,UAAU;CACvC,oBAAoB,EAAE,QAAQ,CAAC,UAAU;CACzC,sBAAsB,EACnB,WAAW,kCAAkC,CAC7C,UAAU;CACb,qBAAqB,EAAE,SAAS,CAAC,UAAU;CAC5C,CAAC,CACD,WAAU,OAAM;CACf,gBAAgB,EAAE;CAClB,gBACE,EAAE,uBAAuB,SACrB;EACE,OAAO;EACP,mBAAmB,EAAE;EACtB,GACD,EAAE,yBAAyB,SACzB;EACE,OAAO;EACP,oBAAoB,EAAE;EACvB,GACD,EAAE,wBAAwB,SACxB;EACE,OAAO;EACP,kBAAkB,EAAE;EACrB,GACD;CACX,EAAE;AAEL,MAAa,gCAA2D,EACrE,OAAO;CACN,oBAAoB,EAAE,QAAQ,CAAC,UAAU;CACzC,QAAQ,EAAE,QAAQ,CAAC,UAAU;CAC7B,WAAW,EAAE,QAAQ,CAAC,UAAU;CAChC,eAAe,EAAE,QAAQ,CAAC,UAAU;CACpC,mBAAmB,EAAE,QAAQ,CAAC,UAAU;CACxC,uBAAuB,EAAE,QAAQ,CAAC,UAAU;CAC7C,CAAC,CACD,WAAU,OAAM;CACf,kBAAkB,EAAE;CACpB,OAAO,EAAE;CACT,UAAU,EAAE;CACZ,cAAc,EAAE;CAChB,gBAAgB,EAAE;CAClB,oBAAoB,EAAE;CACvB,EAAE;AAEL,MAAa,oCACX,EACG,OAAO;CACN,mBAAmB,EAAE,QAAQ,CAAC,UAAU;CACxC,YAAY,EAAE,QAAQ,CAAC,UAAU;CACjC,cAAc,EAAE,QAAQ,CAAC,UAAU;CACnC,iBAAiB,EAAE,QAAQ,CAAC,UAAU;CACtC,uBAAuB,EAAE,QAAQ,CAAC,UAAU;CAC7C,CAAC,CACD,WAAU,OAAM;CACf,iBAAiB,EAAE;CACnB,WAAW,EAAE;CACb,aAAa,EAAE;CACf,gBAAgB,EAAE;CAClB,qBAAqB,EAAE;CACxB,EAAE;AAEP,MAAa,oCACX,EACG,OAAO;CACN,mBAAmB,EAAE,QAAQ,CAAC,UAAU;CACxC,YAAY,EAAE,QAAQ,CAAC,UAAU;CACjC,mBAAmB,EAAE,QAAQ,CAAC,UAAU;CACxC,iBAAiB,EAAE,QAAQ,CAAC,UAAU;CACtC,uBAAuB,EAAE,QAAQ,CAAC,UAAU;CAC7C,CAAC,CACD,WAAU,OAAM;CACf,iBAAiB,EAAE;CACnB,WAAW,EAAE;CACb,iBAAiB,EAAE;CACnB,gBAAgB,EAAE;CAClB,qBAAqB,EAAE;CACxB,EAAE;AAEP,MAAa,gDACX,EACG,OAAO,EACN,gBAAgB,EACb,WAAW,mCAAmC,CAC9C,UAAU,EACd,CAAC,CACD,WAAU,OAAM,EACf,cAAc,EAAE,gBACjB,EAAE;AAEP,MAAa,yCACX,EACG,OAAO,EACN,gBAAgB,EAAE,WAAW,4BAA4B,CAAC,UAAU,EACrE,CAAC,CACD,WAAU,OAAM,EACf,cAAc,EAAE,gBACjB,EAAE;AAEP,MAAa,oCACX,EACG,OAAO,EACN,WAAW,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU,EAC1C,CAAC,CACD,WAAU,OAAM,EACf,WAAW,EAAE,WACd,EAAE;AAEP,MAAa,sCACX,EACG,OAAO;CACN,eAAe,EACZ,WAAW,iDAAiD,CAC5D,UAAU;CACb,gBAAgB,EACb,WAAW,kDAAkD,CAC7D,UAAU;CACb,wBAAwB,EACrB,WAAW,yDAAyD,CACpE,UAAU;CACd,CAAC,CACD,WAAU,OAAM;CACf,cAAc,EAAE;CAChB,eAAe,EAAE;CACjB,sBAAsB,EAAE;CACzB,EAAE;AAGP,MAAa,4DACX,EACG,OAAO;CACN,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CACtC,iBAAiB,EAAE,QAAQ,CAAC,UAAU;CACvC,CAAC,CACD,WAAU,OAAM;CACf,QAAQ,EAAE;CACV,gBAAgB,EAAE;CACnB,EAAE;AAGP,MAAa,sEACX,EACG,OAAO,EACN,kBAAkB,EAAE,SAAS,CAAC,UAAU,EACzC,CAAC,CACD,WAAU,OAAM,EACf,iBAAiB,EAAE,kBACpB,EAAE;AAGP,MAAa,2DACX,EACG,OAAO,EACN,kBAAkB,EAAE,SAAS,CAAC,UAAU,EACzC,CAAC,CACD,WAAU,OAAM,EACf,iBAAiB,EAAE,kBACpB,EAAE;AAGP,MAAa,6DACX,EACG,OAAO,EACN,kBAAkB,EAAE,SAAS,CAAC,UAAU,EACzC,CAAC,CACD,WAAU,OAAM,EACf,iBAAiB,EAAE,kBACpB,EAAE;AAGP,MAAa,qDACX,EACG,OAAO;CACN,eAAe,EAAE,QAAQ,CAAC,UAAU;CACpC,YAAY,EACT,MACC,EAAE,WACM,2DACP,CACF,CACA,UAAU;CACd,CAAC,CACD,WAAU,OAAM;CACf,cAAc,EAAE;CAChB,YAAY,EAAE;CACf,EAAE;AAGP,MAAa,6DACX,EACG,OAAO;CACN,gBAAgB,EAAE,QAAQ,CAAC,UAAU;CACrC,cAAc,EACX,MAAM;EAAC,EAAE,QAAQ;EAAE,EAAE,QAAQ;EAAE,EAAE,QAAQ;EAAC,CAAC,CAC3C,WAAU,MAAK,OAAO,EAAE,CAAC,CACzB,UAAU;CACd,CAAC,CACD,WAAU,OAAM;CACf,eAAe,EAAE;CACjB,aAAa,EAAE;CAChB,EAAE;AAGP,MAAa,2DACX,EACG,OAAO;CACN,kBAAkB,EAAE,QAAQ,CAAC,UAAU;CACvC,YAAY,EACT,MACC,EAAE,WACM,8DACP,CACF,CACA,UAAU;CACb,aAAa,EACV,MACC,EAAE,WACM,8DACP,CACF,CACA,UAAU;CACd,CAAC,CACD,WAAU,OAAM;CACf,iBAAiB,EAAE;CACnB,WAAW,EAAE;CACb,YAAY,EAAE;CACf,EAAE;AAGP,MAAa,gEACX,EACG,OAAO;CACN,QAAQ,EACL,WACO,gEACP,CACA,UAAU;CACb,aAAa,EACV,WAAW,uDAAuD,CAClE,UAAU;CACb,gBAAgB,EACb,WAAW,mDAAmD,CAC9D,UAAU;CACb,OAAO,EAAE,QAAQ,CAAC,UAAU;CAC7B,CAAC,CACD,WAAU,OAAM;CACf,QAAQ,EAAE;CACV,aAAa,EAAE;CACf,gBAAgB,EAAE;CAClB,OAAO,EAAE;CACV,EAAE;AAGP,MAAa,kEACX,EACG,OAAO;CACN,uBAAuB,EAAE,SAAS,CAAC,UAAU;CAC7C,qBAAqB,EAClB,WAAW,oDAAoD,CAC/D,UAAU;CACd,CAAC,CACD,WAAU,OAAM,EACf,QACE,EAAE,0BAA0B,SACxB;CACE,OAAO;CACP,qBAAqB,EAAE;CACxB,GACD,EAAE,wBAAwB,SACxB;CACE,OAAO;CACP,oBAAoB,EAAE;CACvB,GACD,QACT,EAAE;AAGP,MAAa,gDACX,EACG,OAAO,EACN,cAAc,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU,EAC7C,CAAC,CACD,WAAU,OAAM,EACf,aAAa,EAAE,cAChB,EAAE;AAGP,MAAa,+CACX,EACG,OAAO,EACN,WAAW,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU,EAC1C,CAAC,CACD,WAAU,OAAM,EACf,UAAU,EAAE,WACb,EAAE;AAGP,MAAa,iEACX,EACG,OAAO,EACN,kBAAkB,EAAE,SAAS,CAAC,UAAU,EACzC,CAAC,CACD,WAAU,OAAM,EACf,iBAAiB,EAAE,kBACpB,EAAE;AAGP,MAAa,oDACX,EACG,OAAO;CACN,kBAAkB,EAAE,QAAQ,CAAC,UAAU;CACvC,YAAY,EACT,MACC,EAAE,WAAW,uDAAuD,CACrE,CACA,UAAU;CACb,aAAa,EACV,MACC,EAAE,WAAW,uDAAuD,CACrE,CACA,UAAU;CACd,CAAC,CACD,WAAU,OAAM;CACf,iBAAiB,EAAE;CACnB,WAAW,EAAE;CACb,YAAY,EAAE;CACf,EAAE;AAGP,MAAa,yDACX,EACG,OAAO;CACN,QAAQ,EACL,WAAW,yDAAyD,CACpE,UAAU;CACb,aAAa,EACV,WAAW,uDAAuD,CAClE,UAAU;CACb,gBAAgB,EACb,WAAW,mDAAmD,CAC9D,UAAU;CACb,OAAO,EAAE,QAAQ,CAAC,UAAU;CAC7B,CAAC,CACD,WAAU,OAAM;CACf,QAAQ,EAAE;CACV,aAAa,EAAE;CACf,gBAAgB,EAAE;CAClB,OAAO,EAAE;CACV,EAAE;AAGP,MAAa,2DACX,EACG,OAAO;CACN,WAAW,EACR,WAAW,8CAA8C,CACzD,UAAU;CACb,0BAA0B,EAAE,SAAS,CAAC,UAAU;CAChD,8BAA8B,EAAE,SAAS,CAAC,UAAU;CACpD,oBAAoB,EAAE,SAAS,CAAC,UAAU;CAC3C,CAAC,CACD,WAAU,OAAM,EACf,QACE,EAAE,cAAc,SACZ;CAAC,OAAO;CAAsB,WAAW,EAAE;CAAU,GACrD,EAAE,6BAA6B,SAC7B;CACE,OAAO;CACP,wBAAwB,EAAE;CAC3B,GACD,EAAE,iCAAiC,SACjC;CACE,OAAO;CACP,2BAA2B,EAAE;CAC9B,GACD,EAAE,uBAAuB,SACvB;CACE,OAAO;CACP,kBAAkB,EAAE;CACrB,GACD,QACb,EAAE;AAGP,MAAa,mDACX,EACG,OAAO;CACN,kBAAkB,EAAE,QAAQ,CAAC,UAAU;CACvC,YAAY,EACT,MACC,EAAE,WAAW,sDAAsD,CACpE,CACA,UAAU;CACb,aAAa,EACV,MACC,EAAE,WAAW,sDAAsD,CACpE,CACA,UAAU;CACd,CAAC,CACD,WAAU,OAAM;CACf,iBAAiB,EAAE;CACnB,WAAW,EAAE;CACb,YAAY,EAAE;CACf,EAAE;AAGP,MAAa,wDACX,EACG,OAAO;CACN,QAAQ,EACL,WAAW,wDAAwD,CACnE,UAAU;CACb,aAAa,EACV,WAAW,uDAAuD,CAClE,UAAU;CACb,gBAAgB,EACb,WAAW,mDAAmD,CAC9D,UAAU;CACb,OAAO,EAAE,QAAQ,CAAC,UAAU;CAC7B,CAAC,CACD,WAAU,OAAM;CACf,QAAQ,EAAE;CACV,aAAa,EAAE;CACf,gBAAgB,EAAE;CAClB,OAAO,EAAE;CACV,EAAE;AAGP,MAAa,0DACX,EACG,OAAO;CACN,eAAe,EAAE,SAAS,CAAC,UAAU;CACrC,oBAAoB,EACjB,WAAW,6CAA6C,CACxD,UAAU;CACb,oBAAoB,EACjB,WAAW,6CAA6C,CACxD,UAAU;CACd,CAAC,CACD,WAAU,OAAM,EACf,QACE,EAAE,kBAAkB,SAChB;CAAC,OAAO;CAAwB,aAAa,EAAE;CAAc,GAC7D,EAAE,uBAAuB,SACvB;CACE,OAAO;CACP,kBAAkB,EAAE;CACrB,GACD,EAAE,uBAAuB,SACvB;CACE,OAAO;CACP,kBAAkB,EAAE;CACrB,GACD,QACX,EAAE;AAGP,MAAa,yDACX,EACG,OAAO;CACN,kBAAkB,EAAE,SAAS,CAAC,UAAU;CACxC,cAAc,EACX,WAAW,2DAA2D,CACtE,UAAU;CACb,eAAe,EACZ,WAAW,4DAA4D,CACvE,UAAU;CACb,cAAc,EACX,WAAW,2DAA2D,CACtE,UAAU;CACb,kBAAkB,EACf,WACO,+DACP,CACA,UAAU;CACb,YAAY,EACT,WAAW,yDAAyD,CACpE,UAAU;CACb,aAAa,EACV,WAAW,0DAA0D,CACrE,UAAU;CACb,wBAAwB,EACrB,WAEG,oEACH,CACA,UAAU;CACd,CAAC,CACD,WAAU,OAAM;CACf,iBAAiB,EAAE;CACnB,aAAa,EAAE;CACf,cAAc,EAAE;CAChB,aAAa,EAAE;CACf,iBAAiB,EAAE;CACnB,WAAW,EAAE;CACb,YAAY,EAAE;CACd,sBAAsB,EAAE;CACzB,EAAE;AAGP,MAAa,8DACX,EACG,OAAO;CACN,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CACtC,iBAAiB,EAAE,QAAQ,CAAC,UAAU;CACtC,iBAAiB,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CAChD,CAAC,CACD,WAAU,OAAM;CACf,QAAQ,EAAE;CACV,gBAAgB,EAAE;CAClB,gBAAgB,EAAE;CACnB,EAAE;AAGP,MAAa,sDACX,EACG,OAAO,EACN,eAAe,EACZ,MACC,EACG,MAAM;CAAC,EAAE,QAAQ;CAAE,EAAE,QAAQ;CAAE,EAAE,QAAQ;CAAC,CAAC,CAC3C,WAAU,MAAK,OAAO,EAAE,CAAC,CAC7B,CACA,UAAU,EACd,CAAC,CACD,WAAU,OAAM,EACf,cAAc,EAAE,eACjB,EAAE;AAGP,MAAa,6DACX,EACG,OAAO,EACN,kBAAkB,EAAE,SAAS,CAAC,UAAU,EACzC,CAAC,CACD,WAAU,OAAM,EACf,iBAAiB,EAAE,kBACpB,EAAE;AAEP,MAAa,8BAAuD,EACjE,OAAO;CACN,SAAS,EAAE,QAAQ,CAAC,UAAU;CAC9B,OAAO,EAAE,QAAQ,CAAC,UAAU;CAC5B,cAAc,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CAC5C,eAAe,EAAE,QAAQ,CAAC,UAAU;CACpC,WAAW,EAAE,QAAQ,CAAC,UAAU;CAChC,YAAY,EACT,MAAM;EAAC,EAAE,QAAQ;EAAE,EAAE,QAAQ;EAAE,EAAE,QAAQ;EAAC,CAAC,CAC3C,WAAU,MAAK,OAAO,EAAE,CAAC,CACzB,UAAU;CACb,YAAY,EACT,MAAM;EAAC,EAAE,QAAQ;EAAE,EAAE,QAAQ;EAAE,EAAE,QAAQ;EAAC,CAAC,CAC3C,WAAU,MAAK,OAAO,EAAE,CAAC,CACzB,UAAU;CACb,YAAY,EACT,MAAM;EAAC,EAAE,QAAQ;EAAE,EAAE,QAAQ;EAAE,EAAE,QAAQ;EAAC,CAAC,CAC3C,WAAU,MAAK,OAAO,EAAE,CAAC,CACzB,UAAU;CACb,YAAY,EACT,MAAM;EAAC,EAAE,QAAQ;EAAE,EAAE,QAAQ;EAAE,EAAE,QAAQ;EAAC,CAAC,CAC3C,WAAU,MAAK,OAAO,EAAE,CAAC,CACzB,UAAU;CACb,SAAS,EAAE,SAAS,CAAC,UAAU;CAChC,CAAC,CACD,WAAU,OAAM;CACf,QAAQ,EAAE;CACV,OAAO,EAAE;CACT,aAAa,EAAE;CACf,cAAc,EAAE;CAChB,UAAU,EAAE;CACZ,WAAW,EAAE;CACb,WAAW,EAAE;CACb,WAAW,EAAE;CACb,WAAW,EAAE;CACb,SAAS,EAAE;CACZ,EAAE;AAEL,MAAa,kDACX,EACG,OAAO,EACN,iBAAiB,EACd,MAAM,EAAE,WAAW,mCAAmC,CAAC,CACvD,UAAU,EACd,CAAC,CACD,WAAU,OAAM,EACf,eAAe,EAAE,iBAClB,EAAE;AAEP,MAAa,uCACX,EACG,OAAO;CACN,OAAO,EAAE,MAAM,EAAE,WAAW,wBAAwB,CAAC,CAAC,UAAU;CAChE,iBAAiB,EAAE,QAAQ,CAAC,UAAU;CACvC,CAAC,CACD,WAAU,OAAM;CACf,OAAO,EAAE;CACT,eAAe,EAAE;CAClB,EAAE;AAEP,MAAa,2CACX,EACG,OAAO,EACN,iBAAiB,EACd,MAAM,EAAE,WAAW,4BAA4B,CAAC,CAChD,UAAU,EACd,CAAC,CACD,WAAU,OAAM,EACf,eAAe,EAAE,iBAClB,EAAE;AAEP,MAAa,qDACX,EACG,OAAO;CACN,OAAO,EACJ,MAAM,EAAE,WAAW,sCAAsC,CAAC,CAC1D,UAAU;CACb,iBAAiB,EAAE,QAAQ,CAAC,UAAU;CACvC,CAAC,CACD,WAAU,OAAM;CACf,OAAO,EAAE;CACT,eAAe,EAAE;CAClB,EAAE;AAEP,MAAa,wDACX,EACG,OAAO;CACN,OAAO,EACJ,MAAM,EAAE,WAAW,yCAAyC,CAAC,CAC7D,UAAU;CACb,iBAAiB,EAAE,QAAQ,CAAC,UAAU;CACvC,CAAC,CACD,WAAU,OAAM;CACf,OAAO,EAAE;CACT,eAAe,EAAE;CAClB,EAAE;AAEP,MAAa,6CACX,EACG,OAAO;CACN,OAAO,EACJ,MAAM,EAAE,WAAW,oCAAoC,CAAC,CACxD,UAAU;CACb,iBAAiB,EAAE,QAAQ,CAAC,UAAU;CACvC,CAAC,CACD,WAAU,OAAM;CACf,OAAO,EAAE;CACT,eAAe,EAAE;CAClB,EAAE;AAEP,MAAa,wCACX,EACG,OAAO;CACN,SAAS,EAAE,QAAQ,CAAC,UAAU;CAC9B,gCAAgC,EAAE,QAAQ,CAAC,UAAU;CACrD,kBAAkB,EAAE,QAAQ,CAAC,UAAU;CACvC,cAAc,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CAC5C,eAAe,EACZ,MAAM;EAAC,EAAE,QAAQ;EAAE,EAAE,QAAQ;EAAE,EAAE,QAAQ;EAAC,CAAC,CAC3C,WAAU,MAAK,OAAO,EAAE,CAAC,CACzB,UAAU;CACb,cAAc,EACX,MAAM;EAAC,EAAE,QAAQ;EAAE,EAAE,QAAQ;EAAE,EAAE,QAAQ;EAAC,CAAC,CAC3C,WAAU,MAAK,OAAO,EAAE,CAAC,CACzB,UAAU;CACb,aAAa,EAAE,SAAS,CAAC,UAAU;CACnC,gBAAgB,EACb,MAAM;EAAC,EAAE,QAAQ;EAAE,EAAE,QAAQ;EAAE,EAAE,QAAQ;EAAC,CAAC,CAC3C,WAAU,MAAK,OAAO,EAAE,CAAC,CACzB,UAAU;CACb,eAAe,EAAE,QAAQ,CAAC,UAAU;CACpC,aAAa,EAAE,QAAQ,CAAC,UAAU;CAClC,UAAU,EAAE,QAAQ,CAAC,UAAU;CAC/B,eAAe,EAAE,QAAQ,CAAC,UAAU;CACpC,YAAY,EAAE,QAAQ,CAAC,UAAU;CACjC,kBAAkB,EAAE,QAAQ,CAAC,UAAU;CACvC,gBAAgB,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CAC9C,iBAAiB,EAAE,QAAQ,CAAC,UAAU;CACtC,SAAS,EAAE,SAAS,CAAC,UAAU;CAC/B,cAAc,EAAE,WAAW,2BAA2B,CAAC,UAAU;CAClE,CAAC,CACD,WAAU,OAAM;CACf,QAAQ,EAAE;CACV,6BAA6B,EAAE;CAC/B,iBAAiB,EAAE;CACnB,aAAa,EAAE;CACf,cAAc,EAAE;CAChB,aAAa,EAAE;CACf,aAAa,EAAE;CACf,eAAe,EAAE;CACjB,cAAc,EAAE;CAChB,YAAY,EAAE;CACd,SAAS,EAAE;CACX,cAAc,EAAE;CAChB,WAAW,EAAE;CACb,iBAAiB,EAAE;CACnB,eAAe,EAAE;CACjB,eAAe,EAAE;CACjB,SAAS,EAAE;CACX,UACE,EAAE,iBAAiB,SACf;EAAC,OAAO;EAAwB,aAAa,EAAE;EAAa,GAC5D;CACP,EAAE;AAEP,MAAa,yBAA6C,EACvD,OAAO;CACN,YAAY,EAAE,QAAQ,CAAC,UAAU;CACjC,YAAY,EAAE,QAAQ,CAAC,UAAU;CACjC,cAAc,EACX,MAAM;EAAC,EAAE,QAAQ;EAAE,EAAE,QAAQ;EAAE,EAAE,QAAQ;EAAC,CAAC,CAC3C,WAAU,MAAK,OAAO,EAAE,CAAC,CACzB,UAAU;CACb,QAAQ,EAAE,QAAQ,CAAC,UAAU;CAC7B,YAAY,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CAC1C,oBAAoB,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CAClD,YAAY,EAAE,QAAQ,CAAC,UAAU;CACjC,gBAAgB,EACb,MAAM,EAAE,WAAW,6BAA6B,CAAC,CACjD,UAAU;CACb,cAAc,EAAE,QAAQ,CAAC,UAAU;CACnC,eAAe,EACZ,MAAM;EAAC,EAAE,QAAQ;EAAE,EAAE,QAAQ;EAAE,EAAE,QAAQ;EAAC,CAAC,CAC3C,WAAU,MAAK,OAAO,EAAE,CAAC,CACzB,UAAU;CACb,kBAAkB,EACf,MAAM,EAAE,WAAW,8BAA8B,CAAC,CAClD,UAAU;CACb,eAAe,EAAE,WAAW,mCAAmC,CAAC,UAAU;CAC1E,kBAAkB,EAAE,WAAW,8BAA8B,CAAC,UAAU;CACzE,CAAC,CACD,WAAU,OAAM;CACf,WAAW,EAAE;CACb,WAAW,EAAE;CACb,aAAa,EAAE;CACf,OAAO,EAAE;CACT,WAAW,EAAE;CACb,kBAAkB,EAAE;CACpB,WAAW,EAAE;CACb,eAAe,EAAE;CACjB,aAAa,EAAE;CACf,cAAc,EAAE;CAChB,iBAAiB,EAAE;CACnB,cAAc,EAAE;CAChB,aACE,EAAE,qBAAqB,SACnB;EAAC,OAAO;EAA2B,gBAAgB,EAAE;EAAiB,GACtE;CACP,EAAE;AAEL,MAAa,2CACX,EACG,OAAO;CACN,gCAAgC,EAAE,QAAQ,CAAC,UAAU;CACrD,YAAY,EAAE,QAAQ,CAAC,UAAU;CACjC,MAAM,EAAE,QAAQ,CAAC,UAAU;CAC3B,QAAQ,EAAE,QAAQ,CAAC,UAAU;CAC7B,eAAe,EACZ,WAEG,mEACH,CACA,UAAU;CACb,cAAc,EACX,MAAM;EAAC,EAAE,QAAQ;EAAE,EAAE,QAAQ;EAAE,EAAE,QAAQ;EAAC,CAAC,CAC3C,WAAU,MAAK,OAAO,EAAE,CAAC,CACzB,UAAU;CACb,eAAe,EACZ,MAAM;EAAC,EAAE,QAAQ;EAAE,EAAE,QAAQ;EAAE,EAAE,QAAQ;EAAC,CAAC,CAC3C,WAAU,MAAK,OAAO,EAAE,CAAC,CACzB,UAAU;CACd,CAAC,CACD,WAAU,OAAM;CACf,6BAA6B,EAAE;CAC/B,WAAW,EAAE;CACb,MAAM,EAAE;CACR,QAAQ,EAAE;CACV,cAAc,EAAE;CAChB,aAAa,EAAE;CACf,cAAc,EAAE;CACjB,EAAE;AAEP,MAAa,iEACX,EACG,OAAO;CACN,SAAS,EAAE,QAAQ,CAAC,UAAU;CAC9B,gCAAgC,EAAE,QAAQ,CAAC,UAAU;CACrD,YAAY,EAAE,QAAQ,CAAC,UAAU;CACjC,kBAAkB,EAAE,QAAQ,CAAC,UAAU;CACvC,cAAc,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CAC5C,gBAAgB,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CAC9C,iBAAiB,EAAE,QAAQ,CAAC,UAAU;CACtC,kBAAkB,EAAE,QAAQ,CAAC,UAAU;CACvC,eAAe,EACZ,MAAM;EAAC,EAAE,QAAQ;EAAE,EAAE,QAAQ;EAAE,EAAE,QAAQ;EAAC,CAAC,CAC3C,WAAU,MAAK,OAAO,EAAE,CAAC,CACzB,UAAU;CACb,cAAc,EACX,MAAM;EAAC,EAAE,QAAQ;EAAE,EAAE,QAAQ;EAAE,EAAE,QAAQ;EAAC,CAAC,CAC3C,WAAU,MAAK,OAAO,EAAE,CAAC,CACzB,UAAU;CACb,aAAa,EAAE,SAAS,CAAC,UAAU;CACnC,gBAAgB,EACb,MAAM;EAAC,EAAE,QAAQ;EAAE,EAAE,QAAQ;EAAE,EAAE,QAAQ;EAAC,CAAC,CAC3C,WAAU,MAAK,OAAO,EAAE,CAAC,CACzB,UAAU;CACb,SAAS,EAAE,SAAS,CAAC,UAAU;CAC/B,eAAe,EAAE,QAAQ,CAAC,UAAU;CACrC,CAAC,CACD,WAAU,OAAM;CACf,QAAQ,EAAE;CACV,6BAA6B,EAAE;CAC/B,WAAW,EAAE;CACb,iBAAiB,EAAE;CACnB,aAAa,EAAE;CACf,eAAe,EAAE;CACjB,eAAe,EAAE;CACjB,iBAAiB,EAAE;CACnB,cAAc,EAAE;CAChB,aAAa,EAAE;CACf,aAAa,EAAE;CACf,eAAe,EAAE;CACjB,SAAS,EAAE;CACX,cAAc,EAAE;CACjB,EAAE;AAEP,MAAa,mEACX,EACG,OAAO;CACN,SAAS,EAAE,QAAQ,CAAC,UAAU;CAC9B,gCAAgC,EAAE,QAAQ,CAAC,UAAU;CACrD,aAAa,EAAE,QAAQ,CAAC,UAAU;CAClC,UAAU,EAAE,QAAQ,CAAC,UAAU;CAC/B,eAAe,EAAE,QAAQ,CAAC,UAAU;CACpC,kBAAkB,EAAE,QAAQ,CAAC,UAAU;CACvC,eAAe,EACZ,MAAM;EAAC,EAAE,QAAQ;EAAE,EAAE,QAAQ;EAAE,EAAE,QAAQ;EAAC,CAAC,CAC3C,WAAU,MAAK,OAAO,EAAE,CAAC,CACzB,UAAU;CACb,cAAc,EACX,MAAM;EAAC,EAAE,QAAQ;EAAE,EAAE,QAAQ;EAAE,EAAE,QAAQ;EAAC,CAAC,CAC3C,WAAU,MAAK,OAAO,EAAE,CAAC,CACzB,UAAU;CACb,aAAa,EAAE,SAAS,CAAC,UAAU;CACnC,gBAAgB,EACb,MAAM;EAAC,EAAE,QAAQ;EAAE,EAAE,QAAQ;EAAE,EAAE,QAAQ;EAAC,CAAC,CAC3C,WAAU,MAAK,OAAO,EAAE,CAAC,CACzB,UAAU;CACb,cAAc,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CAC5C,eAAe,EAAE,QAAQ,CAAC,UAAU;CACrC,CAAC,CACD,WAAU,OAAM;CACf,QAAQ,EAAE;CACV,6BAA6B,EAAE;CAC/B,YAAY,EAAE;CACd,SAAS,EAAE;CACX,cAAc,EAAE;CAChB,iBAAiB,EAAE;CACnB,cAAc,EAAE;CAChB,aAAa,EAAE;CACf,aAAa,EAAE;CACf,eAAe,EAAE;CACjB,aAAa,EAAE;CACf,cAAc,EAAE;CACjB,EAAE;AAGP,MAAa,mEACX,EACG,OAAO;CACN,6BAA6B,EAC1B,WAEG,0FACH,CACA,UAAU;CACb,oBAAoB,EACjB,WAEG,iFACH,CACA,UAAU;CACd,CAAC,CACD,WAAU,OAAM;CACf,0BAA0B,EAAE;CAC5B,iBAAiB,EAAE;CACpB,EAAE;AAGP,MAAa,mFACX,EACG,OAAO,EACN,aAAa,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU,EAC5C,CAAC,CACD,WAAU,OAAM,EACf,YAAY,EAAE,aACf,EAAE;AAGP,MAAa,4FACX,EACG,OAAO;CACN,eAAe,EAAE,QAAQ,CAAC,UAAU;CACpC,iBAAiB,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CAC/C,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CACxC,CAAC,CACD,WAAU,OAAM;CACf,cAAc,EAAE;CAChB,gBAAgB,EAAE;CAClB,SAAS,EAAE;CACZ,EAAE;AAEP,MAAa,+BAAyD,EACnE,OAAO;CACN,YAAY,EAAE,QAAQ,CAAC,UAAU;CACjC,eAAe,EAAE,QAAQ,CAAC,UAAU;CACrC,CAAC,CACD,WAAU,OAAM;CACf,WAAW,EAAE;CACb,cAAc,EAAE;CACjB,EAAE;AAEL,MAAa,qCACX,EACG,OAAO;CACN,UAAU,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CACxC,iBAAiB,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CAChD,CAAC,CACD,WAAU,OAAM;CACf,SAAS,EAAE;CACX,gBAAgB,EAAE;CACnB,EAAE;AAEP,MAAa,gCAA2D,EACrE,OAAO;CACN,cAAc,EAAE,QAAQ,CAAC,UAAU;CACnC,iBAAiB,EAAE,QAAQ,CAAC,UAAU;CACvC,CAAC,CACD,WAAU,OAAM;CACf,aAAa,EAAE;CACf,gBAAgB,EAAE;CACnB,EAAE;AAEL,MAAa,uCACX,EACG,OAAO;CACN,4BAA4B,EAAE,QAAQ,CAAC,UAAU;CACjD,YAAY,EAAE,QAAQ,CAAC,UAAU;CACjC,8BAA8B,EAAE,QAAQ,CAAC,UAAU;CACnD,QAAQ,EAAE,QAAQ,CAAC,UAAU;CAC7B,uBAAuB,EAAE,SAAS,CAAC,UAAU;CAC7C,sBAAsB,EAAE,QAAQ,CAAC,UAAU;CAC3C,0BAA0B,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CACzD,CAAC,CACD,WAAU,OAAM;CACf,yBAAyB,EAAE;CAC3B,WAAW,EAAE;CACb,2BAA2B,EAAE;CAC7B,QAAQ,EAAE;CACV,qBAAqB,EAAE;CACvB,oBAAoB,EAAE;CACtB,uBAAuB,EAAE;CAC1B,EAAE;AAEP,MAAa,oDACX,EACG,OAAO,EACN,gBAAgB,EACb,WAAW,mCAAmC,CAC9C,UAAU,EACd,CAAC,CACD,WAAU,OAAM,EACf,cAAc,EAAE,gBACjB,EAAE;AAEP,MAAa,6CACX,EACG,OAAO,EACN,gBAAgB,EAAE,WAAW,4BAA4B,CAAC,UAAU,EACrE,CAAC,CACD,WAAU,OAAM,EACf,cAAc,EAAE,gBACjB,EAAE;AAEP,MAAa,mDACX,EACG,OAAO,EACN,gBAAgB,EACb,WAAW,mCAAmC,CAC9C,UAAU,EACd,CAAC,CACD,WAAU,OAAM,EACf,cAAc,EAAE,gBACjB,EAAE;AAEP,MAAa,4CACX,EACG,OAAO,EACN,gBAAgB,EAAE,WAAW,4BAA4B,CAAC,UAAU,EACrE,CAAC,CACD,WAAU,OAAM,EACf,cAAc,EAAE,gBACjB,EAAE;AAEP,MAAa,6BAAqD,EAC/D,OAAO;CACN,iBAAiB,EAAE,QAAQ,CAAC,UAAU;CACtC,YAAY,EAAE,QAAQ,CAAC,UAAU;CACjC,mBAAmB,EAAE,QAAQ,CAAC,UAAU;CACxC,qBAAqB,EAAE,QAAQ,CAAC,UAAU;CAC1C,yBAAyB,EAAE,QAAQ,CAAC,UAAU;CAC9C,UAAU,EAAE,QAAQ,CAAC,UAAU;CAC/B,QAAQ,EAAE,QAAQ,CAAC,UAAU;CAC7B,gBAAgB,EAAE,QAAQ,CAAC,UAAU;CACrC,OAAO,EAAE,QAAQ,CAAC,UAAU;CAC5B,uBAAuB,EACpB,WAAW,kCAAkC,CAC7C,UAAU;CACd,CAAC,CACD,WAAU,OAAM;CACf,eAAe,EAAE;CACjB,WAAW,EAAE;CACb,iBAAiB,EAAE;CACnB,kBAAkB,EAAE;CACpB,sBAAsB,EAAE;CACxB,SAAS,EAAE;CACX,QAAQ,EAAE;CACV,cAAc,EAAE;CAChB,OAAO,EAAE;CACT,iBACE,EAAE,0BAA0B,SACxB;EACE,OAAO;EACP,oBAAoB,EAAE;EACvB,GACD;CACP,EAAE;AAEL,MAAa,wCACX,EACG,OAAO;CACN,mBAAmB,EAAE,QAAQ,CAAC,UAAU;CACxC,cAAc,EACX,MAAM;EAAC,EAAE,QAAQ;EAAE,EAAE,QAAQ;EAAE,EAAE,QAAQ;EAAC,CAAC,CAC3C,WAAU,MAAK,OAAO,EAAE,CAAC,CACzB,UAAU;CACd,CAAC,CACD,WAAU,OAAM;CACf,iBAAiB,EAAE;CACnB,aAAa,EAAE;CAChB,EAAE;AAEP,MAAa,oCAA+C,EACzD,OAAO;CACN,iBAAiB,EAAE,QAAQ,CAAC,UAAU;CACtC,WAAW,EAAE,QAAQ,CAAC,UAAU;CAChC,QAAQ,EAAE,WAAW,iCAAiC,CAAC,UAAU;CACjE,SAAS,EAAE,WAAW,kCAAkC,CAAC,UAAU;CACnE,eAAe,EAAE,WAAW,kCAAkC,CAAC,UAAU;CAC1E,CAAC,CACD,WAAU,OAAM;CACf,mBAAmB,EAAE;CACrB,YAAY,EAAE;CACd,QAAQ,EAAE;CACV,SAAS,EAAE;CACX,iBAAiB,EAAE;CACpB,EAAE;AAEL,MAAa,kCAA6C,EACvD,OAAO;CACN,kBAAkB,EAAE,QAAQ,CAAC,UAAU;CACvC,sBAAsB,EAAE,QAAQ,CAAC,UAAU;CAC3C,cAAc,EAAE,QAAQ,CAAC,UAAU;CACpC,CAAC,CACD,WAAU,OAAM;CACf,qBAAqB,EAAE;CACvB,yBAAyB,EAAE;CAC3B,gBAAgB,EAAE;CACnB,EAAE;AAEL,MAAa,wCAAmD,EAC7D,OAAO;CACN,qBAAqB,EAAE,QAAQ,CAAC,UAAU;CAC1C,6BAA6B,EAAE,QAAQ,CAAC,UAAU;CAClD,2BAA2B,EAAE,QAAQ,CAAC,UAAU;CAChD,sBAAsB,EAAE,QAAQ,CAAC,UAAU;CAC5C,CAAC,CACD,WAAU,OAAM;CACf,uBAAuB,EAAE;CACzB,gCAAgC,EAAE;CAClC,8BAA8B,EAAE;CAChC,yBAAyB,EAAE;CAC5B,EAAE;AAEL,MAAa,gDAA2D,EACrE,OAAO;CACN,WAAW,EAAE,QAAQ,CAAC,UAAU;CAChC,OAAO,EAAE,QAAQ,CAAC,UAAU;CAC5B,UAAU,EAAE,QAAQ,CAAC,UAAU;CAC/B,aAAa,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CAC5C,CAAC,CACD,WAAU,OAAM;CACf,YAAY,EAAE;CACd,OAAO,EAAE;CACT,WAAW,EAAE;CACb,cAAc,EAAE;CACjB,EAAE;AAEL,MAAa,yCAAoD,EAC9D,OAAO;CACN,OAAO,EAAE,QAAQ,CAAC,UAAU;CAC5B,UAAU,EAAE,QAAQ,CAAC,UAAU;CAC/B,aAAa,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CAC5C,CAAC,CACD,WAAU,OAAM;CACf,OAAO,EAAE;CACT,WAAW,EAAE;CACb,cAAc,EAAE;CACjB,EAAE;AAEL,MAAa,sDAAiE,EAC3E,OAAO;CACN,6BAA6B,EAAE,QAAQ,CAAC,UAAU;CAClD,WAAW,EAAE,QAAQ,CAAC,UAAU;CAChC,MAAM,EAAE,QAAQ,CAAC,UAAU;CAC3B,QAAQ,EAAE,QAAQ,CAAC,UAAU;CAC7B,cAAc,EACX,WACO,iEACP,CACA,UAAU;CACb,aAAa,EAAE,QAAQ,CAAC,UAAU;CAClC,cAAc,EAAE,QAAQ,CAAC,UAAU;CACpC,CAAC,CACD,WAAU,OAAM;CACf,gCAAgC,EAAE;CAClC,YAAY,EAAE;CACd,MAAM,EAAE;CACR,QAAQ,EAAE;CACV,eAAe,EAAE;CACjB,cAAc,EAAE;CAChB,eAAe,EAAE;CAClB,EAAE;AAEL,MAAa,oCAA+C,EACzD,OAAO;CACN,WAAW,EAAE,QAAQ,CAAC,UAAU;CAChC,aAAa,EAAE,QAAQ,CAAC,UAAU;CAClC,OAAO,EAAE,QAAQ,CAAC,UAAU;CAC5B,WAAW,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CACzC,kBAAkB,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CAChD,cAAc,EAAE,WAAW,iCAAiC,CAAC,UAAU;CACvE,gBAAgB,EAAE,WAAW,4BAA4B,CAAC,UAAU;CACrE,CAAC,CACD,WAAU,OAAM;CACf,YAAY,EAAE;CACd,cAAc,EAAE;CAChB,QAAQ,EAAE;CACV,YAAY,EAAE;CACd,oBAAoB,EAAE;CACtB,eAAe,EAAE;CACjB,kBAAkB,EAAE;CACrB,EAAE;AAEL,MAAa,kDAA6D,EACvE,OAAO;CACN,WAAW,EAAE,QAAQ,CAAC,UAAU;CAChC,2BAA2B,EAAE,QAAQ,CAAC,UAAU;CAChD,QAAQ,EAAE,QAAQ,CAAC,UAAU;CAC7B,qBAAqB,EAAE,SAAS,CAAC,UAAU;CAC3C,oBAAoB,EAAE,QAAQ,CAAC,UAAU;CACzC,uBAAuB,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CACtD,CAAC,CACD,WAAU,OAAM;CACf,YAAY,EAAE;CACd,8BAA8B,EAAE;CAChC,QAAQ,EAAE;CACV,uBAAuB,EAAE;CACzB,sBAAsB,EAAE;CACxB,0BAA0B,EAAE;CAC7B,EAAE;AAEL,MAAa,yCAAoD,EAC9D,OAAO;CACN,QAAQ,EAAE,QAAQ,CAAC,UAAU;CAC7B,6BAA6B,EAAE,QAAQ,CAAC,UAAU;CAClD,iBAAiB,EAAE,QAAQ,CAAC,UAAU;CACtC,aAAa,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CAC3C,cAAc,EAAE,QAAQ,CAAC,UAAU;CACnC,aAAa,EAAE,QAAQ,CAAC,UAAU;CAClC,aAAa,EAAE,SAAS,CAAC,UAAU;CACnC,eAAe,EAAE,QAAQ,CAAC,UAAU;CACpC,cAAc,EAAE,QAAQ,CAAC,UAAU;CACnC,YAAY,EAAE,QAAQ,CAAC,UAAU;CACjC,SAAS,EAAE,QAAQ,CAAC,UAAU;CAC9B,cAAc,EAAE,QAAQ,CAAC,UAAU;CACnC,WAAW,EAAE,QAAQ,CAAC,UAAU;CAChC,iBAAiB,EAAE,QAAQ,CAAC,UAAU;CACtC,eAAe,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CAC7C,eAAe,EAAE,QAAQ,CAAC,UAAU;CACpC,SAAS,EAAE,SAAS,CAAC,UAAU;CAC/B,UAAU,EACP,mBAAmB,SAAS,CAC3B,EAAE,OAAO;EACP,OAAO,EAAE,QAAQ,cAAc;EAC/B,aAAa,EAAE,WAAW,yBAAyB;EACpD,CAAC,CACH,CAAC,CACD,UAAU;CACd,CAAC,CACD,WAAU,OAAM;CACf,SAAS,EAAE;CACX,gCAAgC,EAAE;CAClC,kBAAkB,EAAE;CACpB,cAAc,EAAE;CAChB,eAAe,EAAE;CACjB,cAAc,EAAE;CAChB,aAAa,EAAE;CACf,gBAAgB,EAAE;CAClB,eAAe,EAAE;CACjB,aAAa,EAAE;CACf,UAAU,EAAE;CACZ,eAAe,EAAE;CACjB,YAAY,EAAE;CACd,kBAAkB,EAAE;CACpB,gBAAgB,EAAE;CAClB,iBAAiB,EAAE;CACnB,SAAS,EAAE;CACX,GAAI,EAAE,UAAU,UAAU,iBAAiB,EACzC,cAAc,EAAE,SAAS,aAC1B;CACF,EAAE;AAEL,MAAa,wCAAmD,EAC7D,OAAO;CACN,WAAW,EAAE,QAAQ,CAAC,UAAU;CAChC,iBAAiB,EAAE,QAAQ,CAAC,UAAU;CACtC,QAAQ,EAAE,QAAQ,CAAC,UAAU;CAC7B,kBAAkB,EAAE,QAAQ,CAAC,UAAU;CACvC,iBAAiB,EACd,mBAAmB,SAAS,CAC3B,EAAE,OAAO;EACP,OAAO,EAAE,QAAQ,qBAAqB;EACtC,oBAAoB,EAAE,WAAW,gCAAgC;EAClE,CAAC,CACH,CAAC,CACD,UAAU;CACd,CAAC,CACD,WAAU,OAAM;CACf,YAAY,EAAE;CACd,mBAAmB,EAAE;CACrB,QAAQ,EAAE;CACV,qBAAqB,EAAE;CACvB,GAAI,EAAE,iBAAiB,UAAU,wBAAwB,EACvD,uBAAuB,EAAE,gBAAgB,oBAC1C;CACF,EAAE;AAEL,MAAa,mEACX,EACG,OAAO;CACN,cAAc,EACX,WACO,+DACP,CACA,UAAU;CACb,aAAa,EACV,WAEG,0FACH,CACA,UAAU;CACd,CAAC,CACD,WAAU,OAAM;CACf,eAAe,EAAE;CACjB,cAAc,EAAE;CACjB,EAAE;AAGP,MAAa,4FACX,EACG,OAAO;CACN,2BAA2B,EACxB,MACC,EAAE,WACM,+DACP,CACF,CACA,UAAU;CACb,yBAAyB,EACtB,MACC,EAAE,WACM,6DACP,CACF,CACA,UAAU;CACd,CAAC,CACD,WAAU,OAAM;CACf,8BAA8B,EAAE;CAChC,4BAA4B,EAAE;CAC/B,EAAE;AAEP,MAAa,mCAA8C,EACxD,OAAO,EACN,eAAe,EACZ,WAAW,qDAAqD,CAChE,UAAU,EACd,CAAC,CACD,WAAU,OAAM,EACf,gBAAgB,EAAE,eACnB,EAAE;AAGL,MAAa,uDAAkE,EAC5E,OAAO;CACN,iBAAiB,EAAE,QAAQ,CAAC,UAAU;CACtC,6BAA6B,EAC1B,MACC,EAAE,WAEE,yEACH,CACF,CACA,UAAU;CACb,4BAA4B,EACzB,MACC,EAAE,WAEE,wEACH,CACF,CACA,UAAU;CACb,mBAAmB,EAChB,WAEG,uEACH,CACA,UAAU;CACb,6BAA6B,EAC1B,MACC,EAAE,WAEE,yEACH,CACF,CACA,UAAU;CACb,+BAA+B,EAC5B,MACC,EAAE,WAEE,2EACH,CACF,CACA,UAAU;CACd,CAAC,CACD,WAAU,OAAM;CACf,kBAAkB,EAAE;CACpB,+BAA+B,EAAE;CACjC,8BAA8B,EAAE;CAChC,oBAAoB,EAAE;CACtB,+BAA+B,EAAE;CACjC,iCAAiC,EAAE;CACpC,EAAE;AAGL,MAAa,6EACX,EACG,OAAO,EACN,cAAc,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU,EAC7C,CAAC,CACD,WAAU,OAAM,EACf,eAAe,EAAE,cAClB,EAAE;AAGP,MAAa,2EACX,EACG,OAAO;CACN,aAAa,EAAE,QAAQ,CAAC,UAAU;CAClC,yBAAyB,EAAE,QAAQ,CAAC,UAAU;CAC/C,CAAC,CACD,WAAU,OAAM;CACf,aAAa,EAAE;CACf,2BAA2B,EAAE;CAC9B,EAAE;AAGP,MAAa,yEACX,EACG,OAAO;CACN,iBAAiB,EAAE,QAAQ,CAAC,UAAU;CACtC,yBAAyB,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CACxD,CAAC,CACD,WAAU,OAAM;CACf,kBAAkB,EAAE;CACpB,6BAA6B,EAAE;CAChC,EAAE;AAGP,MAAa,0EACX,EACG,OAAO;CACN,YAAY,EAAE,QAAQ,CAAC,UAAU;CACjC,QAAQ,EAAE,QAAQ,CAAC,UAAU;CAC7B,wBAAwB,EAAE,QAAQ,CAAC,UAAU;CAC7C,qBAAqB,EAAE,QAAQ,CAAC,UAAU;CAC1C,qBAAqB,EAAE,QAAQ,CAAC,UAAU;CAC3C,CAAC,CACD,WAAU,OAAM;CACf,aAAa,EAAE;CACf,QAAQ,EAAE;CACV,0BAA0B,EAAE;CAC5B,uBAAuB,EAAE;CACzB,uBAAuB,EAAE;CAC1B,EAAE;AAEP,MAAa,wBAAmC,EAC7C,OAAO;CACN,MAAM,EAAE,QAAQ,CAAC,UAAU;CAC3B,YAAY,EAAE,QAAQ,CAAC,UAAU;CACjC,WAAW,EAAE,QAAQ,CAAC,UAAU;CAChC,aAAa,EAAE,QAAQ,CAAC,UAAU;CAClC,SAAS,EAAE,QAAQ,CAAC,UAAU;CAC9B,QAAQ,EAAE,QAAQ,CAAC,UAAU;CAC7B,OAAO,EAAE,QAAQ,CAAC,UAAU;CAC5B,cAAc,EACX,mBAAmB,SAAS;EAC3B,EAAE,OAAO;GACP,OAAO,EAAE,QAAQ,2BAA2B;GAC5C,0BAA0B,EAAE,WACpB,sCACP;GACF,CAAC;EACF,EAAE,OAAO;GACP,OAAO,EAAE,QAAQ,qBAAqB;GACtC,oBAAoB,EAAE,WAAW,gCAAgC;GAClE,CAAC;EACF,EAAE,OAAO;GACP,OAAO,EAAE,QAAQ,qBAAqB;GACtC,oBAAoB,EAAE,WAAW,gCAAgC;GAClE,CAAC;EACH,CAAC,CACD,UAAU;CACb,YAAY,EACT,KAAK,CACL,WAAW,MAAwB,EAAE,UAAU,CAAC,CAChD,UAAU;CACd,CAAC,CACD,WAAU,OAAM;CACf,MAAM,EAAE;CACR,aAAa,EAAE;CACf,YAAY,EAAE;CACd,cAAc,EAAE;CAChB,UAAU,EAAE;CACZ,QAAQ,EAAE;CACV,OAAO,EAAE;CACT,GAAI,EAAE,cAAc,UAAU,8BAA8B,EAC1D,6BAA6B,EAAE,aAAa,0BAC7C;CACD,GAAI,EAAE,cAAc,UAAU,wBAAwB,EACpD,uBAAuB,EAAE,aAAa,oBACvC;CACD,GAAI,EAAE,cAAc,UAAU,wBAAwB,EACpD,uBAAuB,EAAE,aAAa,oBACvC;CACD,aAAa,EAAE;CAChB,EAAE;AAEL,MAAa,2BAAsC,EAChD,OAAO;CACN,gBAAgB,EAAE,QAAQ,CAAC,UAAU;CACrC,gBAAgB,EACb,mBAAmB,SAAS;EAC3B,EAAE,OAAO;GACP,OAAO,EAAE,QAAQ,oBAAoB;GACrC,mBAAmB,EAAE,QAAQ;GAC9B,CAAC;EACF,EAAE,OAAO;GACP,OAAO,EAAE,QAAQ,qBAAqB;GACtC,oBAAoB,EAAE,WAAW,gCAAgC;GAClE,CAAC;EACF,EAAE,OAAO;GACP,OAAO,EAAE,QAAQ,mBAAmB;GACpC,kBAAkB,EAAE,SAAS;GAC9B,CAAC;EACH,CAAC,CACD,UAAU;CACd,CAAC,CACD,WAAU,OAAM;CACf,kBAAkB,EAAE;CACpB,GAAI,EAAE,gBAAgB,UAAU,uBAAuB,EACrD,oBAAoB,EAAE,eAAe,mBACtC;CACD,GAAI,EAAE,gBAAgB,UAAU,wBAAwB,EACtD,sBAAsB,EAAE,eAAe,oBACxC;CACD,GAAI,EAAE,gBAAgB,UAAU,sBAAsB,EACpD,qBAAqB,EAAE,eAAe,kBACvC;CACF,EAAE;AAEL,MAAa,8BAAyC,EACnD,OAAO;CACN,kBAAkB,EAAE,QAAQ,CAAC,UAAU;CACvC,OAAO,EAAE,QAAQ,CAAC,UAAU;CAC5B,UAAU,EAAE,QAAQ,CAAC,UAAU;CAC/B,cAAc,EAAE,QAAQ,CAAC,UAAU;CACnC,gBAAgB,EAAE,QAAQ,CAAC,UAAU;CACrC,oBAAoB,EAAE,QAAQ,CAAC,UAAU;CAC1C,CAAC,CACD,WAAU,OAAM;CACf,oBAAoB,EAAE;CACtB,QAAQ,EAAE;CACV,WAAW,EAAE;CACb,eAAe,EAAE;CACjB,mBAAmB,EAAE;CACrB,uBAAuB,EAAE;CAC1B,EAAE;AAEL,MAAa,kCAA6C,EACvD,OAAO;CACN,iBAAiB,EAAE,QAAQ,CAAC,UAAU;CACtC,WAAW,EAAE,QAAQ,CAAC,UAAU;CAChC,aAAa,EAAE,QAAQ,CAAC,UAAU;CAClC,gBAAgB,EAAE,QAAQ,CAAC,UAAU;CACrC,qBAAqB,EAAE,QAAQ,CAAC,UAAU;CAC3C,CAAC,CACD,WAAU,OAAM;CACf,mBAAmB,EAAE;CACrB,YAAY,EAAE;CACd,cAAc,EAAE;CAChB,iBAAiB,EAAE;CACnB,uBAAuB,EAAE;CAC1B,EAAE;AAEL,MAAa,kCAA6C,EACvD,OAAO;CACN,iBAAiB,EAAE,QAAQ,CAAC,UAAU;CACtC,WAAW,EAAE,QAAQ,CAAC,UAAU;CAChC,iBAAiB,EAAE,QAAQ,CAAC,UAAU;CACtC,gBAAgB,EAAE,QAAQ,CAAC,UAAU;CACrC,qBAAqB,EAAE,QAAQ,CAAC,UAAU;CAC3C,CAAC,CACD,WAAU,OAAM;CACf,mBAAmB,EAAE;CACrB,YAAY,EAAE;CACd,mBAAmB,EAAE;CACrB,iBAAiB,EAAE;CACnB,uBAAuB,EAAE;CAC1B,EAAE;AAEL,MAAa,kCAA6C,EACvD,OAAO,EACN,WAAW,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU,EAC1C,CAAC,CACD,WAAU,OAAM,EACf,WAAW,EAAE,WACd,EAAE;AAEL,MAAa,oCAA+C,EACzD,OAAO;CACN,cAAc,EACX,WAAW,+CAA+C,CAC1D,UAAU;CACb,eAAe,EACZ,WAAW,gDAAgD,CAC3D,UAAU;CACb,sBAAsB,EACnB,WAAW,uDAAuD,CAClE,UAAU;CACd,CAAC,CACD,WAAU,OAAM;CACf,eAAe,EAAE;CACjB,gBAAgB,EAAE;CAClB,wBAAwB,EAAE;CAC3B,EAAE;AAGL,MAAa,0DACX,EACG,OAAO;CACN,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CACtC,gBAAgB,EAAE,QAAQ,CAAC,UAAU;CACtC,CAAC,CACD,WAAU,OAAM;CACf,QAAQ,EAAE;CACV,iBAAiB,EAAE;CACpB,EAAE;AAGP,MAAa,oEACX,EACG,OAAO,EACN,iBAAiB,EAAE,SAAS,CAAC,UAAU,EACxC,CAAC,CACD,WAAU,OAAM,EACf,kBAAkB,EAAE,iBACrB,EAAE;AAGP,MAAa,yDACX,EACG,OAAO,EACN,iBAAiB,EAAE,SAAS,CAAC,UAAU,EACxC,CAAC,CACD,WAAU,OAAM,EACf,kBAAkB,EAAE,iBACrB,EAAE;AAGP,MAAa,2DACX,EACG,OAAO,EACN,iBAAiB,EAAE,SAAS,CAAC,UAAU,EACxC,CAAC,CACD,WAAU,OAAM,EACf,kBAAkB,EAAE,iBACrB,EAAE;AAGP,MAAa,mDAA8D,EACxE,OAAO;CACN,cAAc,EAAE,QAAQ,CAAC,UAAU;CACnC,YAAY,EACT,MACC,EAAE,WAAW,yDAAyD,CACvE,CACA,UAAU;CACd,CAAC,CACD,WAAU,OAAM;CACf,eAAe,EAAE;CACjB,YAAY,EAAE;CACf,EAAE;AAGL,MAAa,2DACX,EACG,OAAO;CACN,eAAe,EAAE,QAAQ,CAAC,UAAU;CACpC,aAAa,EAAE,QAAQ,CAAC,UAAU;CACnC,CAAC,CACD,WAAU,OAAM;CACf,gBAAgB,EAAE;CAClB,cAAc,EAAE;CACjB,EAAE;AAGP,MAAa,yDACX,EACG,OAAO;CACN,iBAAiB,EAAE,QAAQ,CAAC,UAAU;CACtC,WAAW,EACR,MACC,EAAE,WACM,4DACP,CACF,CACA,UAAU;CACb,YAAY,EACT,MACC,EAAE,WACM,4DACP,CACF,CACA,UAAU;CACd,CAAC,CACD,WAAU,OAAM;CACf,kBAAkB,EAAE;CACpB,YAAY,EAAE;CACd,aAAa,EAAE;CAChB,EAAE;AAGP,MAAa,8DACX,EACG,OAAO;CACN,QAAQ,EACL,WACO,8DACP,CACA,UAAU;CACb,aAAa,EACV,WAAW,qDAAqD,CAChE,UAAU;CACb,gBAAgB,EACb,WAAW,iDAAiD,CAC5D,UAAU;CACb,OAAO,EAAE,QAAQ,CAAC,UAAU;CAC7B,CAAC,CACD,WAAU,OAAM;CACf,QAAQ,EAAE;CACV,aAAa,EAAE;CACf,gBAAgB,EAAE;CAClB,OAAO,EAAE;CACV,EAAE;AAGP,MAAa,gEACX,EACG,OAAO,EACN,QAAQ,EACL,mBAAmB,SAAS,CAC3B,EAAE,OAAO;CACP,OAAO,EAAE,QAAQ,sBAAsB;CACvC,qBAAqB,EAAE,SAAS;CACjC,CAAC,EACF,EAAE,OAAO;CACP,OAAO,EAAE,QAAQ,qBAAqB;CACtC,oBAAoB,EAAE,WACd,kDACP;CACF,CAAC,CACH,CAAC,CACD,UAAU,EACd,CAAC,CACD,WAAU,OAAM;CACf,GAAI,EAAE,QAAQ,UAAU,yBAAyB,EAC/C,uBAAuB,EAAE,OAAO,qBACjC;CACD,GAAI,EAAE,QAAQ,UAAU,wBAAwB,EAC9C,qBAAqB,EAAE,OAAO,oBAC/B;CACF,EAAE;AAGP,MAAa,8CAAyD,EACnE,OAAO,EACN,aAAa,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU,EAC5C,CAAC,CACD,WAAU,OAAM,EACf,cAAc,EAAE,aACjB,EAAE;AAGL,MAAa,6CAAwD,EAClE,OAAO,EACN,UAAU,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU,EACzC,CAAC,CACD,WAAU,OAAM,EACf,WAAW,EAAE,UACd,EAAE;AAGL,MAAa,+DACX,EACG,OAAO,EACN,iBAAiB,EAAE,SAAS,CAAC,UAAU,EACxC,CAAC,CACD,WAAU,OAAM,EACf,kBAAkB,EAAE,iBACrB,EAAE;AAGP,MAAa,kDAA6D,EACvE,OAAO;CACN,iBAAiB,EAAE,QAAQ,CAAC,UAAU;CACtC,WAAW,EACR,MAAM,EAAE,WAAW,qDAAqD,CAAC,CACzE,UAAU;CACb,YAAY,EACT,MAAM,EAAE,WAAW,qDAAqD,CAAC,CACzE,UAAU;CACd,CAAC,CACD,WAAU,OAAM;CACf,kBAAkB,EAAE;CACpB,YAAY,EAAE;CACd,aAAa,EAAE;CAChB,EAAE;AAGL,MAAa,uDAAkE,EAC5E,OAAO;CACN,QAAQ,EACL,WAAW,uDAAuD,CAClE,UAAU;CACb,aAAa,EACV,WAAW,qDAAqD,CAChE,UAAU;CACb,gBAAgB,EACb,WAAW,iDAAiD,CAC5D,UAAU;CACb,OAAO,EAAE,QAAQ,CAAC,UAAU;CAC7B,CAAC,CACD,WAAU,OAAM;CACf,QAAQ,EAAE;CACV,aAAa,EAAE;CACf,gBAAgB,EAAE;CAClB,OAAO,EAAE;CACV,EAAE;AAGL,MAAa,yDACX,EACG,OAAO,EACN,QAAQ,EACL,mBAAmB,SAAS;CAC3B,EAAE,OAAO;EACP,OAAO,EAAE,QAAQ,YAAY;EAC7B,WAAW,EAAE,WACL,4CACP;EACF,CAAC;CACF,EAAE,OAAO;EACP,OAAO,EAAE,QAAQ,yBAAyB;EAC1C,wBAAwB,EAAE,SAAS;EACpC,CAAC;CACF,EAAE,OAAO;EACP,OAAO,EAAE,QAAQ,4BAA4B;EAC7C,2BAA2B,EAAE,SAAS;EACvC,CAAC;CACF,EAAE,OAAO;EACP,OAAO,EAAE,QAAQ,mBAAmB;EACpC,kBAAkB,EAAE,SAAS;EAC9B,CAAC;CACH,CAAC,CACD,UAAU,EACd,CAAC,CACD,WAAU,OAAM;CACf,GAAI,EAAE,QAAQ,UAAU,eAAe,EAAC,WAAW,EAAE,OAAO,WAAU;CACtE,GAAI,EAAE,QAAQ,UAAU,4BAA4B,EAClD,0BAA0B,EAAE,OAAO,wBACpC;CACD,GAAI,EAAE,QAAQ,UAAU,+BAA+B,EACrD,8BAA8B,EAAE,OAAO,2BACxC;CACD,GAAI,EAAE,QAAQ,UAAU,sBAAsB,EAC5C,oBAAoB,EAAE,OAAO,kBAC9B;CACF,EAAE;AAGP,MAAa,iDAA4D,EACtE,OAAO;CACN,iBAAiB,EAAE,QAAQ,CAAC,UAAU;CACtC,WAAW,EACR,MAAM,EAAE,WAAW,oDAAoD,CAAC,CACxE,UAAU;CACb,YAAY,EACT,MAAM,EAAE,WAAW,oDAAoD,CAAC,CACxE,UAAU;CACd,CAAC,CACD,WAAU,OAAM;CACf,kBAAkB,EAAE;CACpB,YAAY,EAAE;CACd,aAAa,EAAE;CAChB,EAAE;AAGL,MAAa,sDAAiE,EAC3E,OAAO;CACN,QAAQ,EACL,WAAW,sDAAsD,CACjE,UAAU;CACb,aAAa,EACV,WAAW,qDAAqD,CAChE,UAAU;CACb,gBAAgB,EACb,WAAW,iDAAiD,CAC5D,UAAU;CACb,OAAO,EAAE,QAAQ,CAAC,UAAU;CAC7B,CAAC,CACD,WAAU,OAAM;CACf,QAAQ,EAAE;CACV,aAAa,EAAE;CACf,gBAAgB,EAAE;CAClB,OAAO,EAAE;CACV,EAAE;AAGL,MAAa,wDACX,EACG,OAAO,EACN,QAAQ,EACL,mBAAmB,SAAS;CAC3B,EAAE,OAAO;EAAC,OAAO,EAAE,QAAQ,cAAc;EAAE,aAAa,EAAE,SAAS;EAAC,CAAC;CACrE,EAAE,OAAO;EACP,OAAO,EAAE,QAAQ,mBAAmB;EACpC,kBAAkB,EAAE,WACZ,2CACP;EACF,CAAC;CACF,EAAE,OAAO;EACP,OAAO,EAAE,QAAQ,mBAAmB;EACpC,kBAAkB,EAAE,WACZ,2CACP;EACF,CAAC;CACH,CAAC,CACD,UAAU,EACd,CAAC,CACD,WAAU,OAAM;CACf,GAAI,EAAE,QAAQ,UAAU,iBAAiB,EACvC,eAAe,EAAE,OAAO,aACzB;CACD,GAAI,EAAE,QAAQ,UAAU,sBAAsB,EAC5C,oBAAoB,EAAE,OAAO,kBAC9B;CACD,GAAI,EAAE,QAAQ,UAAU,sBAAsB,EAC5C,oBAAoB,EAAE,OAAO,kBAC9B;CACF,EAAE;AAGP,MAAa,uDAAkE,EAC5E,OAAO;CACN,iBAAiB,EAAE,SAAS,CAAC,UAAU;CACvC,aAAa,EACV,WAAW,yDAAyD,CACpE,UAAU;CACb,cAAc,EACX,WAAW,0DAA0D,CACrE,UAAU;CACb,aAAa,EACV,WAAW,yDAAyD,CACpE,UAAU;CACb,iBAAiB,EACd,WAAW,6DAA6D,CACxE,UAAU;CACb,WAAW,EACR,WAAW,uDAAuD,CAClE,UAAU;CACb,YAAY,EACT,WAAW,wDAAwD,CACnE,UAAU;CACb,sBAAsB,EACnB,WACO,kEACP,CACA,UAAU;CACd,CAAC,CACD,WAAU,OAAM;CACf,kBAAkB,EAAE;CACpB,cAAc,EAAE;CAChB,eAAe,EAAE;CACjB,cAAc,EAAE;CAChB,kBAAkB,EAAE;CACpB,YAAY,EAAE;CACd,aAAa,EAAE;CACf,wBAAwB,EAAE;CAC3B,EAAE;AAGL,MAAa,4DACX,EACG,OAAO;CACN,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CACtC,gBAAgB,EAAE,QAAQ,CAAC,UAAU;CACrC,gBAAgB,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CAC/C,CAAC,CACD,WAAU,OAAM;CACf,QAAQ,EAAE;CACV,iBAAiB,EAAE;CACnB,iBAAiB,EAAE;CACpB,EAAE;AAGP,MAAa,oDAA+D,EACzE,OAAO,EACN,cAAc,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU,EAC7C,CAAC,CACD,WAAU,OAAM,EACf,eAAe,EAAE,cAClB,EAAE;AAGL,MAAa,2DACX,EACG,OAAO,EACN,iBAAiB,EAAE,SAAS,CAAC,UAAU,EACxC,CAAC,CACD,WAAU,OAAM,EACf,kBAAkB,EAAE,iBACrB,EAAE;AAEP,MAAa,+DACX,EACG,OAAO;CACN,QAAQ,EAAE,QAAQ,CAAC,UAAU;CAC7B,6BAA6B,EAAE,QAAQ,CAAC,UAAU;CAClD,WAAW,EAAE,QAAQ,CAAC,UAAU;CAChC,iBAAiB,EAAE,QAAQ,CAAC,UAAU;CACtC,aAAa,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CAC3C,eAAe,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CAC7C,eAAe,EAAE,QAAQ,CAAC,UAAU;CACpC,iBAAiB,EAAE,QAAQ,CAAC,UAAU;CACtC,cAAc,EAAE,QAAQ,CAAC,UAAU;CACnC,aAAa,EAAE,QAAQ,CAAC,UAAU;CAClC,aAAa,EAAE,SAAS,CAAC,UAAU;CACnC,eAAe,EAAE,QAAQ,CAAC,UAAU;CACpC,SAAS,EAAE,SAAS,CAAC,UAAU;CAC/B,cAAc,EAAE,QAAQ,CAAC,UAAU;CACpC,CAAC,CACD,WAAU,OAAM;CACf,SAAS,EAAE;CACX,gCAAgC,EAAE;CAClC,YAAY,EAAE;CACd,kBAAkB,EAAE;CACpB,cAAc,EAAE;CAChB,gBAAgB,EAAE;CAClB,iBAAiB,EAAE;CACnB,kBAAkB,EAAE;CACpB,eAAe,EAAE;CACjB,cAAc,EAAE;CAChB,aAAa,EAAE;CACf,gBAAgB,EAAE;CAClB,SAAS,EAAE;CACX,eAAe,EAAE;CAClB,EAAE;AAEP,MAAa,iEACX,EACG,OAAO;CACN,QAAQ,EAAE,QAAQ,CAAC,UAAU;CAC7B,6BAA6B,EAAE,QAAQ,CAAC,UAAU;CAClD,YAAY,EAAE,QAAQ,CAAC,UAAU;CACjC,SAAS,EAAE,QAAQ,CAAC,UAAU;CAC9B,cAAc,EAAE,QAAQ,CAAC,UAAU;CACnC,iBAAiB,EAAE,QAAQ,CAAC,UAAU;CACtC,cAAc,EAAE,QAAQ,CAAC,UAAU;CACnC,aAAa,EAAE,QAAQ,CAAC,UAAU;CAClC,aAAa,EAAE,SAAS,CAAC,UAAU;CACnC,eAAe,EAAE,QAAQ,CAAC,UAAU;CACpC,aAAa,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CAC3C,cAAc,EAAE,QAAQ,CAAC,UAAU;CACpC,CAAC,CACD,WAAU,OAAM;CACf,SAAS,EAAE;CACX,gCAAgC,EAAE;CAClC,aAAa,EAAE;CACf,UAAU,EAAE;CACZ,eAAe,EAAE;CACjB,kBAAkB,EAAE;CACpB,eAAe,EAAE;CACjB,cAAc,EAAE;CAChB,aAAa,EAAE;CACf,gBAAgB,EAAE;CAClB,cAAc,EAAE;CAChB,eAAe,EAAE;CAClB,EAAE;AAGP,MAAa,iEACX,EACG,OAAO;CACN,0BAA0B,EACvB,WAEG,wFACH,CACA,UAAU;CACb,iBAAiB,EACd,WAEG,+EACH,CACA,UAAU;CACd,CAAC,CACD,WAAU,OAAM;CACf,6BAA6B,EAAE;CAC/B,oBAAoB,EAAE;CACvB,EAAE;AAGP,MAAa,iFACX,EACG,OAAO,EACN,YAAY,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU,EAC3C,CAAC,CACD,WAAU,OAAM,EACf,aAAa,EAAE,YAChB,EAAE;AAGP,MAAa,0FACX,EACG,OAAO;CACN,cAAc,EAAE,QAAQ,CAAC,UAAU;CACnC,gBAAgB,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CAC9C,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CACxC,CAAC,CACD,WAAU,OAAM;CACf,eAAe,EAAE;CACjB,iBAAiB,EAAE;CACnB,SAAS,EAAE;CACZ,EAAE;AAEP,MAAa,mCAA8C,EACxD,OAAO;CACN,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CACvC,gBAAgB,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CAC/C,CAAC,CACD,WAAU,OAAM;CACf,UAAU,EAAE;CACZ,iBAAiB,EAAE;CACpB,EAAE;AAEL,MAAa,qCAAgD,EAC1D,OAAO;CACN,yBAAyB,EAAE,QAAQ,CAAC,UAAU;CAC9C,WAAW,EAAE,QAAQ,CAAC,UAAU;CAChC,2BAA2B,EAAE,QAAQ,CAAC,UAAU;CAChD,QAAQ,EAAE,QAAQ,CAAC,UAAU;CAC7B,qBAAqB,EAAE,SAAS,CAAC,UAAU;CAC3C,oBAAoB,EAAE,QAAQ,CAAC,UAAU;CACzC,uBAAuB,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CACtD,CAAC,CACD,WAAU,OAAM;CACf,4BAA4B,EAAE;CAC9B,YAAY,EAAE;CACd,8BAA8B,EAAE;CAChC,QAAQ,EAAE;CACV,uBAAuB,EAAE;CACzB,sBAAsB,EAAE;CACxB,0BAA0B,EAAE;CAC7B,EAAE;AAEL,MAAa,iDAA4D,EACtE,OAAO;CACN,WAAW,EAAE,QAAQ,CAAC,UAAU;CAChC,QAAQ,EAAE,QAAQ,CAAC,UAAU;CAC7B,OAAO,EAAE,QAAQ,CAAC,UAAU;CAC5B,UAAU,EAAE,QAAQ,CAAC,UAAU;CAC/B,aAAa,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CAC3C,SAAS,EAAE,SAAS,CAAC,UAAU;CAChC,CAAC,CACD,WAAU,OAAM;CACf,YAAY,EAAE;CACd,SAAS,EAAE;CACX,OAAO,EAAE;CACT,WAAW,EAAE;CACb,cAAc,EAAE;CAChB,SAAS,EAAE;CACZ,EAAE;AAEL,MAAa,0CAAqD,EAC/D,OAAO;CACN,QAAQ,EAAE,QAAQ,CAAC,UAAU;CAC7B,OAAO,EAAE,QAAQ,CAAC,UAAU;CAC5B,UAAU,EAAE,QAAQ,CAAC,UAAU;CAC/B,aAAa,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CAC3C,SAAS,EAAE,SAAS,CAAC,UAAU;CAChC,CAAC,CACD,WAAU,OAAM;CACf,SAAS,EAAE;CACX,OAAO,EAAE;CACT,WAAW,EAAE;CACb,cAAc,EAAE;CAChB,SAAS,EAAE;CACZ,EAAE;AAEL,MAAa,gDAA2D,EACrE,OAAO;CACN,WAAW,EAAE,QAAQ,CAAC,UAAU;CAChC,QAAQ,EAAE,QAAQ,CAAC,UAAU;CAC7B,OAAO,EAAE,QAAQ,CAAC,UAAU;CAC5B,UAAU,EAAE,QAAQ,CAAC,UAAU;CAC/B,aAAa,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CAC3C,SAAS,EAAE,SAAS,CAAC,UAAU;CAChC,CAAC,CACD,WAAU,OAAM;CACf,YAAY,EAAE;CACd,SAAS,EAAE;CACX,OAAO,EAAE;CACT,WAAW,EAAE;CACb,cAAc,EAAE;CAChB,SAAS,EAAE;CACZ,EAAE;AAEL,MAAa,yCAAoD,EAC9D,OAAO;CACN,QAAQ,EAAE,QAAQ,CAAC,UAAU;CAC7B,OAAO,EAAE,QAAQ,CAAC,UAAU;CAC5B,UAAU,EAAE,QAAQ,CAAC,UAAU;CAC/B,aAAa,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CAC3C,SAAS,EAAE,SAAS,CAAC,UAAU;CAChC,CAAC,CACD,WAAU,OAAM;CACf,SAAS,EAAE;CACX,OAAO,EAAE;CACT,WAAW,EAAE;CACb,cAAc,EAAE;CAChB,SAAS,EAAE;CACZ,EAAE;AAEL,MAAa,yCAAoD,EAC9D,OAAO;CACN,QAAQ,EAAE,QAAQ,CAAC,UAAU;CAC7B,6BAA6B,EAAE,QAAQ,CAAC,UAAU;CAClD,iBAAiB,EAAE,QAAQ,CAAC,UAAU;CACtC,aAAa,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CAC3C,cAAc,EAAE,QAAQ,CAAC,UAAU;CACnC,aAAa,EAAE,QAAQ,CAAC,UAAU;CAClC,aAAa,EAAE,SAAS,CAAC,UAAU;CACnC,eAAe,EAAE,QAAQ,CAAC,UAAU;CACpC,cAAc,EAAE,QAAQ,CAAC,UAAU;CACnC,YAAY,EAAE,QAAQ,CAAC,UAAU;CACjC,SAAS,EAAE,QAAQ,CAAC,UAAU;CAC9B,cAAc,EAAE,QAAQ,CAAC,UAAU;CACnC,WAAW,EAAE,QAAQ,CAAC,UAAU;CAChC,iBAAiB,EAAE,QAAQ,CAAC,UAAU;CACtC,eAAe,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CAC7C,eAAe,EAAE,QAAQ,CAAC,UAAU;CACpC,SAAS,EAAE,SAAS,CAAC,UAAU;CAC/B,UAAU,EACP,mBAAmB,SAAS,CAC3B,EAAE,OAAO;EACP,OAAO,EAAE,QAAQ,cAAc;EAC/B,aAAa,EAAE,WAAW,yBAAyB;EACpD,CAAC,CACH,CAAC,CACD,UAAU;CACd,CAAC,CACD,WAAU,OAAM;CACf,SAAS,EAAE;CACX,gCAAgC,EAAE;CAClC,kBAAkB,EAAE;CACpB,cAAc,EAAE;CAChB,eAAe,EAAE;CACjB,cAAc,EAAE;CAChB,aAAa,EAAE;CACf,gBAAgB,EAAE;CAClB,eAAe,EAAE;CACjB,aAAa,EAAE;CACf,UAAU,EAAE;CACZ,eAAe,EAAE;CACjB,YAAY,EAAE;CACd,kBAAkB,EAAE;CACpB,gBAAgB,EAAE;CAClB,iBAAiB,EAAE;CACnB,SAAS,EAAE;CACX,GAAI,EAAE,UAAU,UAAU,iBAAiB,EACzC,cAAc,EAAE,SAAS,aAC1B;CACF,EAAE;AAEL,MAAa,sCAAiD,EAC3D,OAAO;CACN,iBAAiB,EAAE,QAAQ,CAAC,UAAU;CACtC,aAAa,EAAE,QAAQ,CAAC,UAAU;CACnC,CAAC,CACD,WAAU,OAAM;CACf,mBAAmB,EAAE;CACrB,cAAc,EAAE;CACjB,EAAE;AAEL,MAAM,6BAA8C;CAClD,kBAAkB,EAAC,MAAM,uBAAsB;CAC/C,oBAAoB;EAClB,MAAM;EACN,gBAAgB;EACjB;CACD,gBAAgB,EAAC,MAAM,oBAAmB;CAC1C,mBAAmB,EAAC,MAAM,sBAAqB;CAChD;AAED,MAAM,oCAAqD,EACzD,WAAW,EAAC,MAAM,aAAY,EAC/B;AAED,MAAM,2CAA4D;CAChE,WAAW,EAAC,MAAM,cAAa;CAC/B,iBAAiB,EAAC,MAAM,oBAAmB;CAC3C,cAAc,EAAC,MAAM,iBAAgB;CACrC,aAAa,EAAC,MAAM,eAAc;CAClC,eAAe,EAAC,MAAM,kBAAiB;CACvC,aAAa,EAAC,MAAM,gBAAe;CACnC,SAAS,EAAC,MAAM,WAAU;CAC1B,cAAc,EAAC,MAAM,iBAAgB;CACrC,iBAAiB,EAAC,MAAM,oBAAmB;CAC3C,cAAc,EAAC,MAAM,iBAAgB;CACrC,aAAa;EACX,MAAM;EACN,gBAAgB;EACjB;CACD,SAAS,EAAC,MAAM,YAAW;CAC3B,6BAA6B,EAAC,MAAM,kCAAiC;CACrE,YAAY,EAAC,MAAM,eAAc;CACjC,eAAe,EAAC,MAAM,kBAAiB;CACvC,QAAQ,EAAC,MAAM,WAAU;CACzB,aAAa,EAAC,MAAM,gBAAe;CACnC,eAAe,EAAC,MAAM,mBAAkB;CACzC;AAED,SAAgB,mCACd,GAAG,OACmC;AACtC,QAAO,UAAU,MACf,OACA,yCACD"}