@databricks/sdk-uc-credentials 0.0.0-dev → 0.1.0-dev.2

package/dist/v1/model.js

@@ -0,0 +1,1469 @@
+// Code generated from API definition by Databricks SDK Generator. DO NOT EDIT.
+import { z } from 'zod';
+export var IsolationMode;
+(function (IsolationMode) {
+    IsolationMode["ISOLATION_MODE_UNSPECIFIED"] = "ISOLATION_MODE_UNSPECIFIED";
+    IsolationMode["ISOLATION_MODE_OPEN"] = "ISOLATION_MODE_OPEN";
+    IsolationMode["ISOLATION_MODE_ISOLATED"] = "ISOLATION_MODE_ISOLATED";
+})(IsolationMode || (IsolationMode = {}));
+export var PathOperation;
+(function (PathOperation) {
+    PathOperation["PATH_READ"] = "PATH_READ";
+    PathOperation["PATH_READ_WRITE"] = "PATH_READ_WRITE";
+    PathOperation["PATH_CREATE_TABLE"] = "PATH_CREATE_TABLE";
+})(PathOperation || (PathOperation = {}));
+export var TableOperation;
+(function (TableOperation) {
+    TableOperation["READ"] = "READ";
+    TableOperation["READ_WRITE"] = "READ_WRITE";
+})(TableOperation || (TableOperation = {}));
+export var VolumeOperation;
+(function (VolumeOperation) {
+    VolumeOperation["READ_VOLUME"] = "READ_VOLUME";
+    VolumeOperation["WRITE_VOLUME"] = "WRITE_VOLUME";
+})(VolumeOperation || (VolumeOperation = {}));
+/** A enum represents the result of the file operation */
+// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested enum name.
+export var ValidateCredentialRequest_Result;
+(function (ValidateCredentialRequest_Result) {
+    ValidateCredentialRequest_Result["PASS"] = "PASS";
+    ValidateCredentialRequest_Result["FAIL"] = "FAIL";
+    ValidateCredentialRequest_Result["SKIP"] = "SKIP";
+})(ValidateCredentialRequest_Result || (ValidateCredentialRequest_Result = {}));
+/**
+ * A enum represents the file operation performed on the external location
+ * with the storage credential
+ */
+// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested enum name.
+export var ValidateStorageCredentialRequest_FileOperation;
+(function (ValidateStorageCredentialRequest_FileOperation) {
+    ValidateStorageCredentialRequest_FileOperation["LIST"] = "LIST";
+    ValidateStorageCredentialRequest_FileOperation["READ"] = "READ";
+    ValidateStorageCredentialRequest_FileOperation["WRITE"] = "WRITE";
+    ValidateStorageCredentialRequest_FileOperation["DELETE"] = "DELETE";
+    ValidateStorageCredentialRequest_FileOperation["PATH_EXISTS"] = "PATH_EXISTS";
+})(ValidateStorageCredentialRequest_FileOperation || (ValidateStorageCredentialRequest_FileOperation = {}));
+/** A enum represents the result of the file operation */
+// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested enum name.
+export var ValidateStorageCredentialRequest_Result;
+(function (ValidateStorageCredentialRequest_Result) {
+    ValidateStorageCredentialRequest_Result["PASS"] = "PASS";
+    ValidateStorageCredentialRequest_Result["FAIL"] = "FAIL";
+    ValidateStorageCredentialRequest_Result["SKIP"] = "SKIP";
+})(ValidateStorageCredentialRequest_Result || (ValidateStorageCredentialRequest_Result = {}));
+// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.
+export const unmarshalAccountsCreateStorageCredentialRequest_ResponseSchema = z
+    .object({
+    credential_info: z
+        .lazy(() => unmarshalStorageCredentialInfoSchema)
+        .optional(),
+})
+    .transform(d => ({
+    credentialInfo: d.credential_info,
+}));
+// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.
+export const unmarshalAccountsDeleteStorageCredentialRequest_ResponseSchema = z.object({});
+// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.
+export const unmarshalAccountsGetStorageCredentialRequest_ResponseSchema = z
+    .object({
+    credential_info: z
+        .lazy(() => unmarshalStorageCredentialInfoSchema)
+        .optional(),
+})
+    .transform(d => ({
+    credentialInfo: d.credential_info,
+}));
+// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.
+export const unmarshalAccountsListStorageCredentialsRequest_ResponseSchema = z
+    .object({
+    storage_credentials: z
+        .array(z.lazy(() => unmarshalStorageCredentialInfoSchema))
+        .optional(),
+})
+    .transform(d => ({
+    storageCredentials: d.storage_credentials,
+}));
+// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.
+export const unmarshalAccountsUpdateStorageCredentialRequest_ResponseSchema = z
+    .object({
+    credential_info: z
+        .lazy(() => unmarshalStorageCredentialInfoSchema)
+        .optional(),
+})
+    .transform(d => ({
+    credentialInfo: d.credential_info,
+}));
+export const unmarshalAwsCredentialsSchema = z
+    .object({
+    sts_role: z.lazy(() => unmarshalAwsCredentials_StsRoleSchema).optional(),
+})
+    .transform(d => ({
+    creds: d.sts_role !== undefined
+        ? { $case: 'stsRole', stsRole: d.sts_role }
+        : undefined,
+}));
+// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.
+export const unmarshalAwsCredentials_StsRoleSchema = z
+    .object({
+    role_arn: z.string().optional(),
+})
+    .transform(d => ({
+    roleArn: d.role_arn,
+}));
+export const unmarshalAwsIamRoleSchema = z
+    .object({
+    role_arn: z.string().optional(),
+    unity_catalog_iam_arn: z.string().optional(),
+    external_id: z.string().optional(),
+})
+    .transform(d => ({
+    roleArn: d.role_arn,
+    unityCatalogIamArn: d.unity_catalog_iam_arn,
+    externalId: d.external_id,
+}));
+export const unmarshalAzureActiveDirectoryTokenSchema = z
+    .object({
+    aad_token: z.string().optional(),
+})
+    .transform(d => ({
+    aadToken: d.aad_token,
+}));
+export const unmarshalAzureManagedIdentitySchema = z
+    .object({
+    access_connector_id: z.string().optional(),
+    managed_identity_id: z.string().optional(),
+    credential_id: z.string().optional(),
+})
+    .transform(d => ({
+    accessConnectorId: d.access_connector_id,
+    managedIdentityId: d.managed_identity_id,
+    credentialId: d.credential_id,
+}));
+export const unmarshalAzureServicePrincipalSchema = z
+    .object({
+    directory_id: z.string().optional(),
+    application_id: z.string().optional(),
+    client_secret: z.string().optional(),
+})
+    .transform(d => ({
+    directoryId: d.directory_id,
+    applicationId: d.application_id,
+    clientSecret: d.client_secret,
+}));
+export const unmarshalAzureUserDelegationSasSchema = z
+    .object({
+    sas_token: z.string().optional(),
+})
+    .transform(d => ({
+    sasToken: d.sas_token,
+}));
+export const unmarshalCloudflareApiTokenSchema = z
+    .object({
+    access_key_id: z.string().optional(),
+    secret_access_key: z.string().optional(),
+    account_id: z.string().optional(),
+})
+    .transform(d => ({
+    accessKeyId: d.access_key_id,
+    secretAccessKey: d.secret_access_key,
+    accountId: d.account_id,
+}));
+export const unmarshalCredentialInfoSchema = z
+    .object({
+    name: z.string().optional(),
+    aws_iam_role: z.lazy(() => unmarshalAwsIamRoleSchema).optional(),
+    azure_service_principal: z
+        .lazy(() => unmarshalAzureServicePrincipalSchema)
+        .optional(),
+    gcp_service_account_key: z
+        .lazy(() => unmarshalGcpServiceAccountKeySchema)
+        .optional(),
+    azure_managed_identity: z
+        .lazy(() => unmarshalAzureManagedIdentitySchema)
+        .optional(),
+    databricks_gcp_service_account: z
+        .lazy(() => unmarshalDatabricksGcpServiceAccountSchema)
+        .optional(),
+    cloudflare_api_token: z
+        .lazy(() => unmarshalCloudflareApiTokenSchema)
+        .optional(),
+    comment: z.string().optional(),
+    read_only: z.boolean().optional(),
+    owner: z.string().optional(),
+    id: z.string().optional(),
+    metastore_id: z.string().optional(),
+    created_at: z
+        .union([z.number(), z.bigint()])
+        .transform(v => BigInt(v))
+        .optional(),
+    created_by: z.string().optional(),
+    updated_at: z
+        .union([z.number(), z.bigint()])
+        .transform(v => BigInt(v))
+        .optional(),
+    updated_by: z.string().optional(),
+    used_for_managed_storage: z.boolean().optional(),
+    full_name: z.string().optional(),
+    isolation_mode: z.enum(IsolationMode).optional(),
+})
+    .transform(d => ({
+    name: d.name,
+    credential: d.aws_iam_role !== undefined
+        ? { $case: 'awsIamRole', awsIamRole: d.aws_iam_role }
+        : d.azure_service_principal !== undefined
+            ? {
+                $case: 'azureServicePrincipal',
+                azureServicePrincipal: d.azure_service_principal,
+            }
+            : d.gcp_service_account_key !== undefined
+                ? {
+                    $case: 'gcpServiceAccountKey',
+                    gcpServiceAccountKey: d.gcp_service_account_key,
+                }
+                : d.azure_managed_identity !== undefined
+                    ? {
+                        $case: 'azureManagedIdentity',
+                        azureManagedIdentity: d.azure_managed_identity,
+                    }
+                    : d.databricks_gcp_service_account !== undefined
+                        ? {
+                            $case: 'databricksGcpServiceAccount',
+                            databricksGcpServiceAccount: d.databricks_gcp_service_account,
+                        }
+                        : d.cloudflare_api_token !== undefined
+                            ? {
+                                $case: 'cloudflareApiToken',
+                                cloudflareApiToken: d.cloudflare_api_token,
+                            }
+                            : undefined,
+    comment: d.comment,
+    readOnly: d.read_only,
+    owner: d.owner,
+    id: d.id,
+    metastoreId: d.metastore_id,
+    createdAt: d.created_at,
+    createdBy: d.created_by,
+    updatedAt: d.updated_at,
+    updatedBy: d.updated_by,
+    usedForManagedStorage: d.used_for_managed_storage,
+    fullName: d.full_name,
+    isolationMode: d.isolation_mode,
+}));
+export const unmarshalCredentialsSchema = z
+    .object({
+    credentials_id: z.string().optional(),
+    account_id: z.string().optional(),
+    aws_credentials: z.lazy(() => unmarshalAwsCredentialsSchema).optional(),
+    credentials_name: z.string().optional(),
+    creation_time: z
+        .union([z.number(), z.bigint()])
+        .transform(v => BigInt(v))
+        .optional(),
+})
+    .transform(d => ({
+    credentialsId: d.credentials_id,
+    accountId: d.account_id,
+    cloudCredentials: d.aws_credentials !== undefined
+        ? { $case: 'awsCredentials', awsCredentials: d.aws_credentials }
+        : undefined,
+    credentialsName: d.credentials_name,
+    creationTime: d.creation_time,
+}));
+export const unmarshalDatabricksGcpServiceAccountSchema = z
+    .object({
+    email: z.string().optional(),
+    private_key_id: z.string().optional(),
+    credential_id: z.string().optional(),
+})
+    .transform(d => ({
+    email: d.email,
+    privateKeyId: d.private_key_id,
+    credentialId: d.credential_id,
+}));
+// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.
+export const unmarshalDeleteCredentialRequest_ResponseSchema = z.object({});
+// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.
+export const unmarshalDeleteStorageCredentialRequest_ResponseSchema = z.object({});
+export const unmarshalGcpOauthTokenSchema = z
+    .object({
+    oauth_token: z.string().optional(),
+})
+    .transform(d => ({
+    oauthToken: d.oauth_token,
+}));
+export const unmarshalGcpServiceAccountKeySchema = z
+    .object({
+    email: z.string().optional(),
+    private_key_id: z.string().optional(),
+    private_key: z.string().optional(),
+})
+    .transform(d => ({
+    email: d.email,
+    privateKeyId: d.private_key_id,
+    privateKey: d.private_key,
+}));
+// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.
+export const unmarshalGenerateTemporaryPathCredentialRequest_ResponseSchema = z
+    .object({
+    aws_temp_credentials: z
+        .lazy(() => unmarshalTemporaryAwsCredentialsSchema)
+        .optional(),
+    azure_user_delegation_sas: z
+        .lazy(() => unmarshalAzureUserDelegationSasSchema)
+        .optional(),
+    gcp_oauth_token: z.lazy(() => unmarshalGcpOauthTokenSchema).optional(),
+    azure_aad: z
+        .lazy(() => unmarshalAzureActiveDirectoryTokenSchema)
+        .optional(),
+    r2_temp_credentials: z
+        .lazy(() => unmarshalR2CredentialsSchema)
+        .optional(),
+    expiration_time: z
+        .union([z.number(), z.bigint()])
+        .transform(v => BigInt(v))
+        .optional(),
+    url: z.string().optional(),
+})
+    .transform(d => ({
+    credentials: d.aws_temp_credentials !== undefined
+        ? {
+            $case: 'awsTempCredentials',
+            awsTempCredentials: d.aws_temp_credentials,
+        }
+        : d.azure_user_delegation_sas !== undefined
+            ? {
+                $case: 'azureUserDelegationSas',
+                azureUserDelegationSas: d.azure_user_delegation_sas,
+            }
+            : d.gcp_oauth_token !== undefined
+                ? {
+                    $case: 'gcpOauthToken',
+                    gcpOauthToken: d.gcp_oauth_token,
+                }
+                : d.azure_aad !== undefined
+                    ? { $case: 'azureAad', azureAad: d.azure_aad }
+                    : d.r2_temp_credentials !== undefined
+                        ? {
+                            $case: 'r2TempCredentials',
+                            r2TempCredentials: d.r2_temp_credentials,
+                        }
+                        : undefined,
+    expirationTime: d.expiration_time,
+    url: d.url,
+}));
+// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.
+export const unmarshalGenerateTemporaryTableCredentialRequest_ResponseSchema = z
+    .object({
+    aws_temp_credentials: z
+        .lazy(() => unmarshalTemporaryAwsCredentialsSchema)
+        .optional(),
+    azure_user_delegation_sas: z
+        .lazy(() => unmarshalAzureUserDelegationSasSchema)
+        .optional(),
+    gcp_oauth_token: z.lazy(() => unmarshalGcpOauthTokenSchema).optional(),
+    azure_aad: z
+        .lazy(() => unmarshalAzureActiveDirectoryTokenSchema)
+        .optional(),
+    r2_temp_credentials: z
+        .lazy(() => unmarshalR2CredentialsSchema)
+        .optional(),
+    expiration_time: z
+        .union([z.number(), z.bigint()])
+        .transform(v => BigInt(v))
+        .optional(),
+    url: z.string().optional(),
+})
+    .transform(d => ({
+    credentials: d.aws_temp_credentials !== undefined
+        ? {
+            $case: 'awsTempCredentials',
+            awsTempCredentials: d.aws_temp_credentials,
+        }
+        : d.azure_user_delegation_sas !== undefined
+            ? {
+                $case: 'azureUserDelegationSas',
+                azureUserDelegationSas: d.azure_user_delegation_sas,
+            }
+            : d.gcp_oauth_token !== undefined
+                ? {
+                    $case: 'gcpOauthToken',
+                    gcpOauthToken: d.gcp_oauth_token,
+                }
+                : d.azure_aad !== undefined
+                    ? { $case: 'azureAad', azureAad: d.azure_aad }
+                    : d.r2_temp_credentials !== undefined
+                        ? {
+                            $case: 'r2TempCredentials',
+                            r2TempCredentials: d.r2_temp_credentials,
+                        }
+                        : undefined,
+    expirationTime: d.expiration_time,
+    url: d.url,
+}));
+// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.
+export const unmarshalGenerateTemporaryVolumeCredentialRequest_ResponseSchema = z
+    .object({
+    aws_temp_credentials: z
+        .lazy(() => unmarshalTemporaryAwsCredentialsSchema)
+        .optional(),
+    azure_user_delegation_sas: z
+        .lazy(() => unmarshalAzureUserDelegationSasSchema)
+        .optional(),
+    gcp_oauth_token: z.lazy(() => unmarshalGcpOauthTokenSchema).optional(),
+    azure_aad: z
+        .lazy(() => unmarshalAzureActiveDirectoryTokenSchema)
+        .optional(),
+    r2_temp_credentials: z
+        .lazy(() => unmarshalR2CredentialsSchema)
+        .optional(),
+    expiration_time: z
+        .union([z.number(), z.bigint()])
+        .transform(v => BigInt(v))
+        .optional(),
+    url: z.string().optional(),
+})
+    .transform(d => ({
+    credentials: d.aws_temp_credentials !== undefined
+        ? {
+            $case: 'awsTempCredentials',
+            awsTempCredentials: d.aws_temp_credentials,
+        }
+        : d.azure_user_delegation_sas !== undefined
+            ? {
+                $case: 'azureUserDelegationSas',
+                azureUserDelegationSas: d.azure_user_delegation_sas,
+            }
+            : d.gcp_oauth_token !== undefined
+                ? {
+                    $case: 'gcpOauthToken',
+                    gcpOauthToken: d.gcp_oauth_token,
+                }
+                : d.azure_aad !== undefined
+                    ? { $case: 'azureAad', azureAad: d.azure_aad }
+                    : d.r2_temp_credentials !== undefined
+                        ? {
+                            $case: 'r2TempCredentials',
+                            r2TempCredentials: d.r2_temp_credentials,
+                        }
+                        : undefined,
+    expirationTime: d.expiration_time,
+    url: d.url,
+}));
+// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.
+export const unmarshalListCredentialsRequest_ResponseSchema = z
+    .object({
+    credentials: z
+        .array(z.lazy(() => unmarshalCredentialInfoSchema))
+        .optional(),
+    next_page_token: z.string().optional(),
+})
+    .transform(d => ({
+    credentials: d.credentials,
+    nextPageToken: d.next_page_token,
+}));
+// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.
+export const unmarshalListStorageCredentialsRequest_ResponseSchema = z
+    .object({
+    storage_credentials: z
+        .array(z.lazy(() => unmarshalStorageCredentialInfoSchema))
+        .optional(),
+    next_page_token: z.string().optional(),
+})
+    .transform(d => ({
+    storageCredentials: d.storage_credentials,
+    nextPageToken: d.next_page_token,
+}));
+export const unmarshalR2CredentialsSchema = z
+    .object({
+    access_key_id: z.string().optional(),
+    secret_access_key: z.string().optional(),
+    session_token: z.string().optional(),
+})
+    .transform(d => ({
+    accessKeyId: d.access_key_id,
+    secretAccessKey: d.secret_access_key,
+    sessionToken: d.session_token,
+}));
+export const unmarshalStorageCredentialInfoSchema = z
+    .object({
+    name: z.string().optional(),
+    aws_iam_role: z.lazy(() => unmarshalAwsIamRoleSchema).optional(),
+    azure_service_principal: z
+        .lazy(() => unmarshalAzureServicePrincipalSchema)
+        .optional(),
+    gcp_service_account_key: z
+        .lazy(() => unmarshalGcpServiceAccountKeySchema)
+        .optional(),
+    azure_managed_identity: z
+        .lazy(() => unmarshalAzureManagedIdentitySchema)
+        .optional(),
+    databricks_gcp_service_account: z
+        .lazy(() => unmarshalDatabricksGcpServiceAccountSchema)
+        .optional(),
+    cloudflare_api_token: z
+        .lazy(() => unmarshalCloudflareApiTokenSchema)
+        .optional(),
+    comment: z.string().optional(),
+    read_only: z.boolean().optional(),
+    owner: z.string().optional(),
+    id: z.string().optional(),
+    metastore_id: z.string().optional(),
+    created_at: z
+        .union([z.number(), z.bigint()])
+        .transform(v => BigInt(v))
+        .optional(),
+    created_by: z.string().optional(),
+    updated_at: z
+        .union([z.number(), z.bigint()])
+        .transform(v => BigInt(v))
+        .optional(),
+    updated_by: z.string().optional(),
+    used_for_managed_storage: z.boolean().optional(),
+    full_name: z.string().optional(),
+    isolation_mode: z.enum(IsolationMode).optional(),
+})
+    .transform(d => ({
+    name: d.name,
+    credential: d.aws_iam_role !== undefined
+        ? { $case: 'awsIamRole', awsIamRole: d.aws_iam_role }
+        : d.azure_service_principal !== undefined
+            ? {
+                $case: 'azureServicePrincipal',
+                azureServicePrincipal: d.azure_service_principal,
+            }
+            : d.gcp_service_account_key !== undefined
+                ? {
+                    $case: 'gcpServiceAccountKey',
+                    gcpServiceAccountKey: d.gcp_service_account_key,
+                }
+                : d.azure_managed_identity !== undefined
+                    ? {
+                        $case: 'azureManagedIdentity',
+                        azureManagedIdentity: d.azure_managed_identity,
+                    }
+                    : d.databricks_gcp_service_account !== undefined
+                        ? {
+                            $case: 'databricksGcpServiceAccount',
+                            databricksGcpServiceAccount: d.databricks_gcp_service_account,
+                        }
+                        : d.cloudflare_api_token !== undefined
+                            ? {
+                                $case: 'cloudflareApiToken',
+                                cloudflareApiToken: d.cloudflare_api_token,
+                            }
+                            : undefined,
+    comment: d.comment,
+    readOnly: d.read_only,
+    owner: d.owner,
+    id: d.id,
+    metastoreId: d.metastore_id,
+    createdAt: d.created_at,
+    createdBy: d.created_by,
+    updatedAt: d.updated_at,
+    updatedBy: d.updated_by,
+    usedForManagedStorage: d.used_for_managed_storage,
+    fullName: d.full_name,
+    isolationMode: d.isolation_mode,
+}));
+export const unmarshalTemporaryAwsCredentialsSchema = z
+    .object({
+    access_key_id: z.string().optional(),
+    secret_access_key: z.string().optional(),
+    session_token: z.string().optional(),
+    access_point: z.string().optional(),
+})
+    .transform(d => ({
+    accessKeyId: d.access_key_id,
+    secretAccessKey: d.secret_access_key,
+    sessionToken: d.session_token,
+    accessPoint: d.access_point,
+}));
+export const unmarshalTemporaryCredentialsSchema = z
+    .object({
+    aws_temp_credentials: z
+        .lazy(() => unmarshalTemporaryAwsCredentialsSchema)
+        .optional(),
+    azure_user_delegation_sas: z
+        .lazy(() => unmarshalAzureUserDelegationSasSchema)
+        .optional(),
+    gcp_oauth_token: z.lazy(() => unmarshalGcpOauthTokenSchema).optional(),
+    azure_aad: z
+        .lazy(() => unmarshalAzureActiveDirectoryTokenSchema)
+        .optional(),
+    r2_temp_credentials: z
+        .lazy(() => unmarshalR2CredentialsSchema)
+        .optional(),
+    expiration_time: z
+        .union([z.number(), z.bigint()])
+        .transform(v => BigInt(v))
+        .optional(),
+    url: z.string().optional(),
+})
+    .transform(d => ({
+    credentials: d.aws_temp_credentials !== undefined
+        ? {
+            $case: 'awsTempCredentials',
+            awsTempCredentials: d.aws_temp_credentials,
+        }
+        : d.azure_user_delegation_sas !== undefined
+            ? {
+                $case: 'azureUserDelegationSas',
+                azureUserDelegationSas: d.azure_user_delegation_sas,
+            }
+            : d.gcp_oauth_token !== undefined
+                ? {
+                    $case: 'gcpOauthToken',
+                    gcpOauthToken: d.gcp_oauth_token,
+                }
+                : d.azure_aad !== undefined
+                    ? { $case: 'azureAad', azureAad: d.azure_aad }
+                    : d.r2_temp_credentials !== undefined
+                        ? {
+                            $case: 'r2TempCredentials',
+                            r2TempCredentials: d.r2_temp_credentials,
+                        }
+                        : undefined,
+    expirationTime: d.expiration_time,
+    url: d.url,
+}));
+// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.
+export const unmarshalValidateCredentialRequest_ResponseSchema = z
+    .object({
+    results: z
+        .array(z.lazy(() => unmarshalValidateCredentialRequest_ValidationResultSchema))
+        .optional(),
+    isDir: z.boolean().optional(),
+})
+    .transform(d => ({
+    results: d.results,
+    isDir: d.isDir,
+}));
+// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.
+export const unmarshalValidateCredentialRequest_ValidationResultSchema = z
+    .object({
+    result: z.enum(ValidateCredentialRequest_Result).optional(),
+    message: z.string().optional(),
+})
+    .transform(d => ({
+    result: d.result,
+    message: d.message,
+}));
+// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.
+export const unmarshalValidateStorageCredentialRequest_ResponseSchema = z
+    .object({
+    isDir: z.boolean().optional(),
+    results: z
+        .array(z.lazy(() => unmarshalValidateStorageCredentialRequest_ValidationResultSchema))
+        .optional(),
+})
+    .transform(d => ({
+    isDir: d.isDir,
+    results: d.results,
+}));
+// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.
+export const unmarshalValidateStorageCredentialRequest_ValidationResultSchema = z
+    .object({
+    operation: z
+        .enum(ValidateStorageCredentialRequest_FileOperation)
+        .optional(),
+    result: z.enum(ValidateStorageCredentialRequest_Result).optional(),
+    message: z.string().optional(),
+})
+    .transform(d => ({
+    operation: d.operation,
+    result: d.result,
+    message: d.message,
+}));
+export const marshalAccountsCreateStorageCredentialRequestSchema = z
+    .object({
+    accountId: z.string().optional(),
+    metastoreId: z.string().optional(),
+    credentialInfo: z
+        .lazy(() => marshalCreateAccountsStorageCredentialSchema)
+        .optional(),
+    skipValidation: z.boolean().optional(),
+})
+    .transform(d => ({
+    account_id: d.accountId,
+    metastore_id: d.metastoreId,
+    credential_info: d.credentialInfo,
+    skip_validation: d.skipValidation,
+}));
+export const marshalAccountsUpdateStorageCredentialRequestSchema = z
+    .object({
+    accountId: z.string().optional(),
+    metastoreId: z.string().optional(),
+    nameArg: z.string().optional(),
+    credentialInfo: z
+        .lazy(() => marshalUpdateAccountsStorageCredentialSchema)
+        .optional(),
+    skipValidation: z.boolean().optional(),
+})
+    .transform(d => ({
+    account_id: d.accountId,
+    metastore_id: d.metastoreId,
+    name_arg: d.nameArg,
+    credential_info: d.credentialInfo,
+    skip_validation: d.skipValidation,
+}));
+// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.
+export const marshalAwsCredentials_StsRoleSchema = z
+    .object({
+    roleArn: z.string().optional(),
+})
+    .transform(d => ({
+    role_arn: d.roleArn,
+}));
+export const marshalAwsIamRoleSchema = z
+    .object({
+    roleArn: z.string().optional(),
+    unityCatalogIamArn: z.string().optional(),
+    externalId: z.string().optional(),
+})
+    .transform(d => ({
+    role_arn: d.roleArn,
+    unity_catalog_iam_arn: d.unityCatalogIamArn,
+    external_id: d.externalId,
+}));
+export const marshalAzureManagedIdentitySchema = z
+    .object({
+    accessConnectorId: z.string().optional(),
+    managedIdentityId: z.string().optional(),
+    credentialId: z.string().optional(),
+})
+    .transform(d => ({
+    access_connector_id: d.accessConnectorId,
+    managed_identity_id: d.managedIdentityId,
+    credential_id: d.credentialId,
+}));
+export const marshalAzureServicePrincipalSchema = z
+    .object({
+    directoryId: z.string().optional(),
+    applicationId: z.string().optional(),
+    clientSecret: z.string().optional(),
+})
+    .transform(d => ({
+    directory_id: d.directoryId,
+    application_id: d.applicationId,
+    client_secret: d.clientSecret,
+}));
+export const marshalCloudflareApiTokenSchema = z
+    .object({
+    accessKeyId: z.string().optional(),
+    secretAccessKey: z.string().optional(),
+    accountId: z.string().optional(),
+})
+    .transform(d => ({
+    access_key_id: d.accessKeyId,
+    secret_access_key: d.secretAccessKey,
+    account_id: d.accountId,
+}));
+export const marshalCreateAccountsStorageCredentialSchema = z
+    .object({
+    name: z.string().optional(),
+    credential: z
+        .discriminatedUnion('$case', [
+        z.object({
+            $case: z.literal('awsIamRole'),
+            awsIamRole: z.lazy(() => marshalAwsIamRoleSchema),
+        }),
+        z.object({
+            $case: z.literal('azureServicePrincipal'),
+            azureServicePrincipal: z.lazy(() => marshalAzureServicePrincipalSchema),
+        }),
+        z.object({
+            $case: z.literal('gcpServiceAccountKey'),
+            gcpServiceAccountKey: z.lazy(() => marshalGcpServiceAccountKeySchema),
+        }),
+        z.object({
+            $case: z.literal('azureManagedIdentity'),
+            azureManagedIdentity: z.lazy(() => marshalAzureManagedIdentitySchema),
+        }),
+        z.object({
+            $case: z.literal('databricksGcpServiceAccount'),
+            databricksGcpServiceAccount: z.lazy(() => marshalDatabricksGcpServiceAccountSchema),
+        }),
+        z.object({
+            $case: z.literal('cloudflareApiToken'),
+            cloudflareApiToken: z.lazy(() => marshalCloudflareApiTokenSchema),
+        }),
+    ])
+        .optional(),
+    comment: z.string().optional(),
+    readOnly: z.boolean().optional(),
+    owner: z.string().optional(),
+    id: z.string().optional(),
+    metastoreId: z.string().optional(),
+    createdAt: z.bigint().optional(),
+    createdBy: z.string().optional(),
+    updatedAt: z.bigint().optional(),
+    updatedBy: z.string().optional(),
+    usedForManagedStorage: z.boolean().optional(),
+    fullName: z.string().optional(),
+    isolationMode: z.enum(IsolationMode).optional(),
+})
+    .transform(d => ({
+    name: d.name,
+    ...(d.credential?.$case === 'awsIamRole' && {
+        aws_iam_role: d.credential.awsIamRole,
+    }),
+    ...(d.credential?.$case === 'azureServicePrincipal' && {
+        azure_service_principal: d.credential.azureServicePrincipal,
+    }),
+    ...(d.credential?.$case === 'gcpServiceAccountKey' && {
+        gcp_service_account_key: d.credential.gcpServiceAccountKey,
+    }),
+    ...(d.credential?.$case === 'azureManagedIdentity' && {
+        azure_managed_identity: d.credential.azureManagedIdentity,
+    }),
+    ...(d.credential?.$case === 'databricksGcpServiceAccount' && {
+        databricks_gcp_service_account: d.credential.databricksGcpServiceAccount,
+    }),
+    ...(d.credential?.$case === 'cloudflareApiToken' && {
+        cloudflare_api_token: d.credential.cloudflareApiToken,
+    }),
+    comment: d.comment,
+    read_only: d.readOnly,
+    owner: d.owner,
+    id: d.id,
+    metastore_id: d.metastoreId,
+    created_at: d.createdAt,
+    created_by: d.createdBy,
+    updated_at: d.updatedAt,
+    updated_by: d.updatedBy,
+    used_for_managed_storage: d.usedForManagedStorage,
+    full_name: d.fullName,
+    isolation_mode: d.isolationMode,
+}));
+export const marshalCreateCredentialAwsCredentialsSchema = z
+    .object({
+    creds: z
+        .discriminatedUnion('$case', [
+        z.object({
+            $case: z.literal('stsRole'),
+            stsRole: z.lazy(() => marshalAwsCredentials_StsRoleSchema),
+        }),
+    ])
+        .optional(),
+})
+    .transform(d => ({
+    ...(d.creds?.$case === 'stsRole' && { sts_role: d.creds.stsRole }),
+}));
+export const marshalCreateCredentialRequestSchema = z
+    .object({
+    skipValidation: z.boolean().optional(),
+    name: z.string().optional(),
+    credential: z
+        .discriminatedUnion('$case', [
+        z.object({
+            $case: z.literal('awsIamRole'),
+            awsIamRole: z.lazy(() => marshalAwsIamRoleSchema),
+        }),
+        z.object({
+            $case: z.literal('azureServicePrincipal'),
+            azureServicePrincipal: z.lazy(() => marshalAzureServicePrincipalSchema),
+        }),
+        z.object({
+            $case: z.literal('gcpServiceAccountKey'),
+            gcpServiceAccountKey: z.lazy(() => marshalGcpServiceAccountKeySchema),
+        }),
+        z.object({
+            $case: z.literal('azureManagedIdentity'),
+            azureManagedIdentity: z.lazy(() => marshalAzureManagedIdentitySchema),
+        }),
+        z.object({
+            $case: z.literal('databricksGcpServiceAccount'),
+            databricksGcpServiceAccount: z.lazy(() => marshalDatabricksGcpServiceAccountSchema),
+        }),
+        z.object({
+            $case: z.literal('cloudflareApiToken'),
+            cloudflareApiToken: z.lazy(() => marshalCloudflareApiTokenSchema),
+        }),
+    ])
+        .optional(),
+    comment: z.string().optional(),
+    readOnly: z.boolean().optional(),
+    owner: z.string().optional(),
+    id: z.string().optional(),
+    metastoreId: z.string().optional(),
+    createdAt: z.bigint().optional(),
+    createdBy: z.string().optional(),
+    updatedAt: z.bigint().optional(),
+    updatedBy: z.string().optional(),
+    usedForManagedStorage: z.boolean().optional(),
+    fullName: z.string().optional(),
+    isolationMode: z.enum(IsolationMode).optional(),
+})
+    .transform(d => ({
+    skip_validation: d.skipValidation,
+    name: d.name,
+    ...(d.credential?.$case === 'awsIamRole' && {
+        aws_iam_role: d.credential.awsIamRole,
+    }),
+    ...(d.credential?.$case === 'azureServicePrincipal' && {
+        azure_service_principal: d.credential.azureServicePrincipal,
+    }),
+    ...(d.credential?.$case === 'gcpServiceAccountKey' && {
+        gcp_service_account_key: d.credential.gcpServiceAccountKey,
+    }),
+    ...(d.credential?.$case === 'azureManagedIdentity' && {
+        azure_managed_identity: d.credential.azureManagedIdentity,
+    }),
+    ...(d.credential?.$case === 'databricksGcpServiceAccount' && {
+        databricks_gcp_service_account: d.credential.databricksGcpServiceAccount,
+    }),
+    ...(d.credential?.$case === 'cloudflareApiToken' && {
+        cloudflare_api_token: d.credential.cloudflareApiToken,
+    }),
+    comment: d.comment,
+    read_only: d.readOnly,
+    owner: d.owner,
+    id: d.id,
+    metastore_id: d.metastoreId,
+    created_at: d.createdAt,
+    created_by: d.createdBy,
+    updated_at: d.updatedAt,
+    updated_by: d.updatedBy,
+    used_for_managed_storage: d.usedForManagedStorage,
+    full_name: d.fullName,
+    isolation_mode: d.isolationMode,
+}));
+export const marshalCreateCredentialsRequestSchema = z
+    .object({
+    accountId: z.string().optional(),
+    credentialsName: z.string().optional(),
+    cloudCredentials: z
+        .discriminatedUnion('$case', [
+        z.object({
+            $case: z.literal('awsCredentials'),
+            awsCredentials: z.lazy(() => marshalCreateCredentialAwsCredentialsSchema),
+        }),
+    ])
+        .optional(),
+})
+    .transform(d => ({
+    account_id: d.accountId,
+    credentials_name: d.credentialsName,
+    ...(d.cloudCredentials?.$case === 'awsCredentials' && {
+        aws_credentials: d.cloudCredentials.awsCredentials,
+    }),
+}));
+export const marshalCreateStorageCredentialRequestSchema = z
+    .object({
+    skipValidation: z.boolean().optional(),
+    name: z.string().optional(),
+    credential: z
+        .discriminatedUnion('$case', [
+        z.object({
+            $case: z.literal('awsIamRole'),
+            awsIamRole: z.lazy(() => marshalAwsIamRoleSchema),
+        }),
+        z.object({
+            $case: z.literal('azureServicePrincipal'),
+            azureServicePrincipal: z.lazy(() => marshalAzureServicePrincipalSchema),
+        }),
+        z.object({
+            $case: z.literal('gcpServiceAccountKey'),
+            gcpServiceAccountKey: z.lazy(() => marshalGcpServiceAccountKeySchema),
+        }),
+        z.object({
+            $case: z.literal('azureManagedIdentity'),
+            azureManagedIdentity: z.lazy(() => marshalAzureManagedIdentitySchema),
+        }),
+        z.object({
+            $case: z.literal('databricksGcpServiceAccount'),
+            databricksGcpServiceAccount: z.lazy(() => marshalDatabricksGcpServiceAccountSchema),
+        }),
+        z.object({
+            $case: z.literal('cloudflareApiToken'),
+            cloudflareApiToken: z.lazy(() => marshalCloudflareApiTokenSchema),
+        }),
+    ])
+        .optional(),
+    comment: z.string().optional(),
+    readOnly: z.boolean().optional(),
+    owner: z.string().optional(),
+    id: z.string().optional(),
+    metastoreId: z.string().optional(),
+    createdAt: z.bigint().optional(),
+    createdBy: z.string().optional(),
+    updatedAt: z.bigint().optional(),
+    updatedBy: z.string().optional(),
+    usedForManagedStorage: z.boolean().optional(),
+    fullName: z.string().optional(),
+    isolationMode: z.enum(IsolationMode).optional(),
+})
+    .transform(d => ({
+    skip_validation: d.skipValidation,
+    name: d.name,
+    ...(d.credential?.$case === 'awsIamRole' && {
+        aws_iam_role: d.credential.awsIamRole,
+    }),
+    ...(d.credential?.$case === 'azureServicePrincipal' && {
+        azure_service_principal: d.credential.azureServicePrincipal,
+    }),
+    ...(d.credential?.$case === 'gcpServiceAccountKey' && {
+        gcp_service_account_key: d.credential.gcpServiceAccountKey,
+    }),
+    ...(d.credential?.$case === 'azureManagedIdentity' && {
+        azure_managed_identity: d.credential.azureManagedIdentity,
+    }),
+    ...(d.credential?.$case === 'databricksGcpServiceAccount' && {
+        databricks_gcp_service_account: d.credential.databricksGcpServiceAccount,
+    }),
+    ...(d.credential?.$case === 'cloudflareApiToken' && {
+        cloudflare_api_token: d.credential.cloudflareApiToken,
+    }),
+    comment: d.comment,
+    read_only: d.readOnly,
+    owner: d.owner,
+    id: d.id,
+    metastore_id: d.metastoreId,
+    created_at: d.createdAt,
+    created_by: d.createdBy,
+    updated_at: d.updatedAt,
+    updated_by: d.updatedBy,
+    used_for_managed_storage: d.usedForManagedStorage,
+    full_name: d.fullName,
+    isolation_mode: d.isolationMode,
+}));
+export const marshalDatabricksGcpServiceAccountSchema = z
+    .object({
+    email: z.string().optional(),
+    privateKeyId: z.string().optional(),
+    credentialId: z.string().optional(),
+})
+    .transform(d => ({
+    email: d.email,
+    private_key_id: d.privateKeyId,
+    credential_id: d.credentialId,
+}));
+export const marshalGcpServiceAccountKeySchema = z
+    .object({
+    email: z.string().optional(),
+    privateKeyId: z.string().optional(),
+    privateKey: z.string().optional(),
+})
+    .transform(d => ({
+    email: d.email,
+    private_key_id: d.privateKeyId,
+    private_key: d.privateKey,
+}));
+export const marshalGenerateTemporaryPathCredentialRequestSchema = z
+    .object({
+    url: z.string().optional(),
+    operation: z.enum(PathOperation).optional(),
+    dryRun: z.boolean().optional(),
+})
+    .transform(d => ({
+    url: d.url,
+    operation: d.operation,
+    dry_run: d.dryRun,
+}));
+export const marshalGenerateTemporaryServiceCredentialRequestSchema = z
+    .object({
+    credentialName: z.string().optional(),
+    options: z
+        .discriminatedUnion('$case', [
+        z.object({
+            $case: z.literal('azureOptions'),
+            azureOptions: z.lazy(() => marshalGenerateTemporaryServiceCredentialRequest_AzureOptionsSchema),
+        }),
+        z.object({
+            $case: z.literal('gcpOptions'),
+            gcpOptions: z.lazy(() => marshalGenerateTemporaryServiceCredentialRequest_GcpOptionsSchema),
+        }),
+    ])
+        .optional(),
+})
+    .transform(d => ({
+    credential_name: d.credentialName,
+    ...(d.options?.$case === 'azureOptions' && {
+        azure_options: d.options.azureOptions,
+    }),
+    ...(d.options?.$case === 'gcpOptions' && {
+        gcp_options: d.options.gcpOptions,
+    }),
+}));
+// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.
+export const marshalGenerateTemporaryServiceCredentialRequest_AzureOptionsSchema = z
+    .object({
+    resources: z.array(z.string()).optional(),
+})
+    .transform(d => ({
+    resources: d.resources,
+}));
+// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.
+export const marshalGenerateTemporaryServiceCredentialRequest_GcpOptionsSchema = z
+    .object({
+    scopes: z.array(z.string()).optional(),
+})
+    .transform(d => ({
+    scopes: d.scopes,
+}));
+export const marshalGenerateTemporaryTableCredentialRequestSchema = z
+    .object({
+    tableId: z.string().optional(),
+    operation: z.enum(TableOperation).optional(),
+})
+    .transform(d => ({
+    table_id: d.tableId,
+    operation: d.operation,
+}));
+export const marshalGenerateTemporaryVolumeCredentialRequestSchema = z
+    .object({
+    volumeId: z.string().optional(),
+    operation: z.enum(VolumeOperation).optional(),
+})
+    .transform(d => ({
+    volume_id: d.volumeId,
+    operation: d.operation,
+}));
+export const marshalUpdateAccountsStorageCredentialSchema = z
+    .object({
+    name: z.string().optional(),
+    credential: z
+        .discriminatedUnion('$case', [
+        z.object({
+            $case: z.literal('awsIamRole'),
+            awsIamRole: z.lazy(() => marshalAwsIamRoleSchema),
+        }),
+        z.object({
+            $case: z.literal('azureServicePrincipal'),
+            azureServicePrincipal: z.lazy(() => marshalAzureServicePrincipalSchema),
+        }),
+        z.object({
+            $case: z.literal('gcpServiceAccountKey'),
+            gcpServiceAccountKey: z.lazy(() => marshalGcpServiceAccountKeySchema),
+        }),
+        z.object({
+            $case: z.literal('azureManagedIdentity'),
+            azureManagedIdentity: z.lazy(() => marshalAzureManagedIdentitySchema),
+        }),
+        z.object({
+            $case: z.literal('databricksGcpServiceAccount'),
+            databricksGcpServiceAccount: z.lazy(() => marshalDatabricksGcpServiceAccountSchema),
+        }),
+        z.object({
+            $case: z.literal('cloudflareApiToken'),
+            cloudflareApiToken: z.lazy(() => marshalCloudflareApiTokenSchema),
+        }),
+    ])
+        .optional(),
+    comment: z.string().optional(),
+    readOnly: z.boolean().optional(),
+    owner: z.string().optional(),
+    id: z.string().optional(),
+    metastoreId: z.string().optional(),
+    createdAt: z.bigint().optional(),
+    createdBy: z.string().optional(),
+    updatedAt: z.bigint().optional(),
+    updatedBy: z.string().optional(),
+    usedForManagedStorage: z.boolean().optional(),
+    fullName: z.string().optional(),
+    isolationMode: z.enum(IsolationMode).optional(),
+})
+    .transform(d => ({
+    name: d.name,
+    ...(d.credential?.$case === 'awsIamRole' && {
+        aws_iam_role: d.credential.awsIamRole,
+    }),
+    ...(d.credential?.$case === 'azureServicePrincipal' && {
+        azure_service_principal: d.credential.azureServicePrincipal,
+    }),
+    ...(d.credential?.$case === 'gcpServiceAccountKey' && {
+        gcp_service_account_key: d.credential.gcpServiceAccountKey,
+    }),
+    ...(d.credential?.$case === 'azureManagedIdentity' && {
+        azure_managed_identity: d.credential.azureManagedIdentity,
+    }),
+    ...(d.credential?.$case === 'databricksGcpServiceAccount' && {
+        databricks_gcp_service_account: d.credential.databricksGcpServiceAccount,
+    }),
+    ...(d.credential?.$case === 'cloudflareApiToken' && {
+        cloudflare_api_token: d.credential.cloudflareApiToken,
+    }),
+    comment: d.comment,
+    read_only: d.readOnly,
+    owner: d.owner,
+    id: d.id,
+    metastore_id: d.metastoreId,
+    created_at: d.createdAt,
+    created_by: d.createdBy,
+    updated_at: d.updatedAt,
+    updated_by: d.updatedBy,
+    used_for_managed_storage: d.usedForManagedStorage,
+    full_name: d.fullName,
+    isolation_mode: d.isolationMode,
+}));
+export const marshalUpdateCredentialRequestSchema = z
+    .object({
+    nameArg: z.string().optional(),
+    newName: z.string().optional(),
+    skipValidation: z.boolean().optional(),
+    force: z.boolean().optional(),
+    name: z.string().optional(),
+    credential: z
+        .discriminatedUnion('$case', [
+        z.object({
+            $case: z.literal('awsIamRole'),
+            awsIamRole: z.lazy(() => marshalAwsIamRoleSchema),
+        }),
+        z.object({
+            $case: z.literal('azureServicePrincipal'),
+            azureServicePrincipal: z.lazy(() => marshalAzureServicePrincipalSchema),
+        }),
+        z.object({
+            $case: z.literal('gcpServiceAccountKey'),
+            gcpServiceAccountKey: z.lazy(() => marshalGcpServiceAccountKeySchema),
+        }),
+        z.object({
+            $case: z.literal('azureManagedIdentity'),
+            azureManagedIdentity: z.lazy(() => marshalAzureManagedIdentitySchema),
+        }),
+        z.object({
+            $case: z.literal('databricksGcpServiceAccount'),
+            databricksGcpServiceAccount: z.lazy(() => marshalDatabricksGcpServiceAccountSchema),
+        }),
+        z.object({
+            $case: z.literal('cloudflareApiToken'),
+            cloudflareApiToken: z.lazy(() => marshalCloudflareApiTokenSchema),
+        }),
+    ])
+        .optional(),
+    comment: z.string().optional(),
+    readOnly: z.boolean().optional(),
+    owner: z.string().optional(),
+    id: z.string().optional(),
+    metastoreId: z.string().optional(),
+    createdAt: z.bigint().optional(),
+    createdBy: z.string().optional(),
+    updatedAt: z.bigint().optional(),
+    updatedBy: z.string().optional(),
+    usedForManagedStorage: z.boolean().optional(),
+    fullName: z.string().optional(),
+    isolationMode: z.enum(IsolationMode).optional(),
+})
+    .transform(d => ({
+    name_arg: d.nameArg,
+    new_name: d.newName,
+    skip_validation: d.skipValidation,
+    force: d.force,
+    name: d.name,
+    ...(d.credential?.$case === 'awsIamRole' && {
+        aws_iam_role: d.credential.awsIamRole,
+    }),
+    ...(d.credential?.$case === 'azureServicePrincipal' && {
+        azure_service_principal: d.credential.azureServicePrincipal,
+    }),
+    ...(d.credential?.$case === 'gcpServiceAccountKey' && {
+        gcp_service_account_key: d.credential.gcpServiceAccountKey,
+    }),
+    ...(d.credential?.$case === 'azureManagedIdentity' && {
+        azure_managed_identity: d.credential.azureManagedIdentity,
+    }),
+    ...(d.credential?.$case === 'databricksGcpServiceAccount' && {
+        databricks_gcp_service_account: d.credential.databricksGcpServiceAccount,
+    }),
+    ...(d.credential?.$case === 'cloudflareApiToken' && {
+        cloudflare_api_token: d.credential.cloudflareApiToken,
+    }),
+    comment: d.comment,
+    read_only: d.readOnly,
+    owner: d.owner,
+    id: d.id,
+    metastore_id: d.metastoreId,
+    created_at: d.createdAt,
+    created_by: d.createdBy,
+    updated_at: d.updatedAt,
+    updated_by: d.updatedBy,
+    used_for_managed_storage: d.usedForManagedStorage,
+    full_name: d.fullName,
+    isolation_mode: d.isolationMode,
+}));
+export const marshalUpdateStorageCredentialRequestSchema = z
+    .object({
+    nameArg: z.string().optional(),
+    newName: z.string().optional(),
+    skipValidation: z.boolean().optional(),
+    force: z.boolean().optional(),
+    name: z.string().optional(),
+    credential: z
+        .discriminatedUnion('$case', [
+        z.object({
+            $case: z.literal('awsIamRole'),
+            awsIamRole: z.lazy(() => marshalAwsIamRoleSchema),
+        }),
+        z.object({
+            $case: z.literal('azureServicePrincipal'),
+            azureServicePrincipal: z.lazy(() => marshalAzureServicePrincipalSchema),
+        }),
+        z.object({
+            $case: z.literal('gcpServiceAccountKey'),
+            gcpServiceAccountKey: z.lazy(() => marshalGcpServiceAccountKeySchema),
+        }),
+        z.object({
+            $case: z.literal('azureManagedIdentity'),
+            azureManagedIdentity: z.lazy(() => marshalAzureManagedIdentitySchema),
+        }),
+        z.object({
+            $case: z.literal('databricksGcpServiceAccount'),
+            databricksGcpServiceAccount: z.lazy(() => marshalDatabricksGcpServiceAccountSchema),
+        }),
+        z.object({
+            $case: z.literal('cloudflareApiToken'),
+            cloudflareApiToken: z.lazy(() => marshalCloudflareApiTokenSchema),
+        }),
+    ])
+        .optional(),
+    comment: z.string().optional(),
+    readOnly: z.boolean().optional(),
+    owner: z.string().optional(),
+    id: z.string().optional(),
+    metastoreId: z.string().optional(),
+    createdAt: z.bigint().optional(),
+    createdBy: z.string().optional(),
+    updatedAt: z.bigint().optional(),
+    updatedBy: z.string().optional(),
+    usedForManagedStorage: z.boolean().optional(),
+    fullName: z.string().optional(),
+    isolationMode: z.enum(IsolationMode).optional(),
+})
+    .transform(d => ({
+    name_arg: d.nameArg,
+    new_name: d.newName,
+    skip_validation: d.skipValidation,
+    force: d.force,
+    name: d.name,
+    ...(d.credential?.$case === 'awsIamRole' && {
+        aws_iam_role: d.credential.awsIamRole,
+    }),
+    ...(d.credential?.$case === 'azureServicePrincipal' && {
+        azure_service_principal: d.credential.azureServicePrincipal,
+    }),
+    ...(d.credential?.$case === 'gcpServiceAccountKey' && {
+        gcp_service_account_key: d.credential.gcpServiceAccountKey,
+    }),
+    ...(d.credential?.$case === 'azureManagedIdentity' && {
+        azure_managed_identity: d.credential.azureManagedIdentity,
+    }),
+    ...(d.credential?.$case === 'databricksGcpServiceAccount' && {
+        databricks_gcp_service_account: d.credential.databricksGcpServiceAccount,
+    }),
+    ...(d.credential?.$case === 'cloudflareApiToken' && {
+        cloudflare_api_token: d.credential.cloudflareApiToken,
+    }),
+    comment: d.comment,
+    read_only: d.readOnly,
+    owner: d.owner,
+    id: d.id,
+    metastore_id: d.metastoreId,
+    created_at: d.createdAt,
+    created_by: d.createdBy,
+    updated_at: d.updatedAt,
+    updated_by: d.updatedBy,
+    used_for_managed_storage: d.usedForManagedStorage,
+    full_name: d.fullName,
+    isolation_mode: d.isolationMode,
+}));
+export const marshalValidateCredentialRequestSchema = z
+    .object({
+    credential: z
+        .discriminatedUnion('$case', [
+        z.object({
+            $case: z.literal('credentialName'),
+            credentialName: z.string(),
+        }),
+        z.object({
+            $case: z.literal('awsIamRole'),
+            awsIamRole: z.lazy(() => marshalAwsIamRoleSchema),
+        }),
+        z.object({
+            $case: z.literal('azureManagedIdentity'),
+            azureManagedIdentity: z.lazy(() => marshalAzureManagedIdentitySchema),
+        }),
+        z.object({
+            $case: z.literal('databricksGcpServiceAccount'),
+            databricksGcpServiceAccount: z.lazy(() => marshalDatabricksGcpServiceAccountSchema),
+        }),
+    ])
+        .optional(),
+    externalLocationName: z.string().optional(),
+    url: z.string().optional(),
+    readOnly: z.boolean().optional(),
+})
+    .transform(d => ({
+    ...(d.credential?.$case === 'credentialName' && {
+        credential_name: d.credential.credentialName,
+    }),
+    ...(d.credential?.$case === 'awsIamRole' && {
+        aws_iam_role: d.credential.awsIamRole,
+    }),
+    ...(d.credential?.$case === 'azureManagedIdentity' && {
+        azure_managed_identity: d.credential.azureManagedIdentity,
+    }),
+    ...(d.credential?.$case === 'databricksGcpServiceAccount' && {
+        databricks_gcp_service_account: d.credential.databricksGcpServiceAccount,
+    }),
+    external_location_name: d.externalLocationName,
+    url: d.url,
+    read_only: d.readOnly,
+}));
+export const marshalValidateStorageCredentialRequestSchema = z
+    .object({
+    credential: z
+        .discriminatedUnion('$case', [
+        z.object({
+            $case: z.literal('storageCredentialName'),
+            storageCredentialName: z.string(),
+        }),
+        z.object({
+            $case: z.literal('awsIamRole'),
+            awsIamRole: z.lazy(() => marshalAwsIamRoleSchema),
+        }),
+        z.object({
+            $case: z.literal('azureServicePrincipal'),
+            azureServicePrincipal: z.lazy(() => marshalAzureServicePrincipalSchema),
+        }),
+        z.object({
+            $case: z.literal('azureManagedIdentity'),
+            azureManagedIdentity: z.lazy(() => marshalAzureManagedIdentitySchema),
+        }),
+        z.object({
+            $case: z.literal('databricksGcpServiceAccount'),
+            databricksGcpServiceAccount: z.lazy(() => marshalDatabricksGcpServiceAccountSchema),
+        }),
+        z.object({
+            $case: z.literal('cloudflareApiToken'),
+            cloudflareApiToken: z.lazy(() => marshalCloudflareApiTokenSchema),
+        }),
+    ])
+        .optional(),
+    externalLocationName: z.string().optional(),
+    url: z.string().optional(),
+    readOnly: z.boolean().optional(),
+})
+    .transform(d => ({
+    ...(d.credential?.$case === 'storageCredentialName' && {
+        storage_credential_name: d.credential.storageCredentialName,
+    }),
+    ...(d.credential?.$case === 'awsIamRole' && {
+        aws_iam_role: d.credential.awsIamRole,
+    }),
+    ...(d.credential?.$case === 'azureServicePrincipal' && {
+        azure_service_principal: d.credential.azureServicePrincipal,
+    }),
+    ...(d.credential?.$case === 'azureManagedIdentity' && {
+        azure_managed_identity: d.credential.azureManagedIdentity,
+    }),
+    ...(d.credential?.$case === 'databricksGcpServiceAccount' && {
+        databricks_gcp_service_account: d.credential.databricksGcpServiceAccount,
+    }),
+    ...(d.credential?.$case === 'cloudflareApiToken' && {
+        cloudflare_api_token: d.credential.cloudflareApiToken,
+    }),
+    external_location_name: d.externalLocationName,
+    url: d.url,
+    read_only: d.readOnly,
+}));
+//# sourceMappingURL=model.js.map