@pulumi/databricks 1.112.0-alpha.1790142199 → 1.112.0

package/types/output.d.ts

@@ -236,6 +236,12 @@ export interface AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestina
     allDestinations?: boolean;
 }
 export interface AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestinationWorkspaceApi {
+    /**
+     * Inverse of `scopes`: matches every API scope EXCEPT those listed here
+     * ("allow all except"). Mutually exclusive with `scopes` — a single
+     * destination may set at most one of the two
+     */
+    excludedScopes?: string[];
     scopeQualifier?: string;
     scopes?: string[];
 }
@@ -316,6 +322,12 @@ export interface AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestinat
     allDestinations?: boolean;
 }
 export interface AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestinationWorkspaceApi {
+    /**
+     * Inverse of `scopes`: matches every API scope EXCEPT those listed here
+     * ("allow all except"). Mutually exclusive with `scopes` — a single
+     * destination may set at most one of the two
+     */
+    excludedScopes?: string[];
     scopeQualifier?: string;
     scopes?: string[];
 }
@@ -414,6 +426,12 @@ export interface AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleD
     allDestinations?: boolean;
 }
 export interface AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestinationWorkspaceApi {
+    /**
+     * Inverse of `scopes`: matches every API scope EXCEPT those listed here
+     * ("allow all except"). Mutually exclusive with `scopes` — a single
+     * destination may set at most one of the two
+     */
+    excludedScopes?: string[];
     scopeQualifier?: string;
     scopes?: string[];
 }
@@ -494,6 +512,12 @@ export interface AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDe
     allDestinations?: boolean;
 }
 export interface AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestinationWorkspaceApi {
+    /**
+     * Inverse of `scopes`: matches every API scope EXCEPT those listed here
+     * ("allow all except"). Mutually exclusive with `scopes` — a single
+     * destination may set at most one of the two
+     */
+    excludedScopes?: string[];
     scopeQualifier?: string;
     scopes?: string[];
 }
@@ -579,6 +603,12 @@ export interface AccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestinat
     allDestinations?: boolean;
 }
 export interface AccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestinationWorkspaceApi {
+    /**
+     * Inverse of `scopes`: matches every API scope EXCEPT those listed here
+     * ("allow all except"). Mutually exclusive with `scopes` — a single
+     * destination may set at most one of the two
+     */
+    excludedScopes?: string[];
     scopeQualifier?: string;
     scopes?: string[];
 }
@@ -676,6 +706,12 @@ export interface AccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleDestinati
     allDestinations?: boolean;
 }
 export interface AccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleDestinationWorkspaceApi {
+    /**
+     * Inverse of `scopes`: matches every API scope EXCEPT those listed here
+     * ("allow all except"). Mutually exclusive with `scopes` — a single
+     * destination may set at most one of the two
+     */
+    excludedScopes?: string[];
     scopeQualifier?: string;
     scopes?: string[];
 }
@@ -778,6 +814,12 @@ export interface AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinati
     allDestinations?: boolean;
 }
 export interface AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationWorkspaceApi {
+    /**
+     * Inverse of `scopes`: matches every API scope EXCEPT those listed here
+     * ("allow all except"). Mutually exclusive with `scopes` — a single
+     * destination may set at most one of the two
+     */
+    excludedScopes?: string[];
     scopeQualifier?: string;
     scopes?: string[];
 }
@@ -871,6 +913,12 @@ export interface AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinatio
     allDestinations?: boolean;
 }
 export interface AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationWorkspaceApi {
+    /**
+     * Inverse of `scopes`: matches every API scope EXCEPT those listed here
+     * ("allow all except"). Mutually exclusive with `scopes` — a single
+     * destination may set at most one of the two
+     */
+    excludedScopes?: string[];
     scopeQualifier?: string;
     scopes?: string[];
 }
@@ -969,6 +1017,12 @@ export interface AccountNetworkPolicyIngressPrivateAccessAllowRuleDestinationLak
     allDestinations?: boolean;
 }
 export interface AccountNetworkPolicyIngressPrivateAccessAllowRuleDestinationWorkspaceApi {
+    /**
+     * Inverse of `scopes`: matches every API scope EXCEPT those listed here
+     * ("allow all except"). Mutually exclusive with `scopes` — a single
+     * destination may set at most one of the two
+     */
+    excludedScopes?: string[];
     scopeQualifier?: string;
     scopes?: string[];
 }
@@ -1066,6 +1120,12 @@ export interface AccountNetworkPolicyIngressPrivateAccessDenyRuleDestinationLake
     allDestinations?: boolean;
 }
 export interface AccountNetworkPolicyIngressPrivateAccessDenyRuleDestinationWorkspaceApi {
+    /**
+     * Inverse of `scopes`: matches every API scope EXCEPT those listed here
+     * ("allow all except"). Mutually exclusive with `scopes` — a single
+     * destination may set at most one of the two
+     */
+    excludedScopes?: string[];
     scopeQualifier?: string;
     scopes?: string[];
 }
@@ -1168,6 +1228,12 @@ export interface AccountNetworkPolicyIngressPublicAccessAllowRuleDestinationLake
     allDestinations?: boolean;
 }
 export interface AccountNetworkPolicyIngressPublicAccessAllowRuleDestinationWorkspaceApi {
+    /**
+     * Inverse of `scopes`: matches every API scope EXCEPT those listed here
+     * ("allow all except"). Mutually exclusive with `scopes` — a single
+     * destination may set at most one of the two
+     */
+    excludedScopes?: string[];
     scopeQualifier?: string;
     scopes?: string[];
 }
@@ -1261,6 +1327,12 @@ export interface AccountNetworkPolicyIngressPublicAccessDenyRuleDestinationLakeb
     allDestinations?: boolean;
 }
 export interface AccountNetworkPolicyIngressPublicAccessDenyRuleDestinationWorkspaceApi {
+    /**
+     * Inverse of `scopes`: matches every API scope EXCEPT those listed here
+     * ("allow all except"). Mutually exclusive with `scopes` — a single
+     * destination may set at most one of the two
+     */
+    excludedScopes?: string[];
     scopeQualifier?: string;
     scopes?: string[];
 }
@@ -1448,6 +1520,10 @@ export interface AccountSettingV2EffectiveRestrictWorkspaceAdmins {
 export interface AccountSettingV2EffectiveStringVal {
     value?: string;
 }
+export interface AccountSettingV2EffectiveWorkspaceLabel {
+    color?: string;
+    label?: string;
+}
 export interface AccountSettingV2IntegerVal {
     value?: number;
 }
@@ -1471,6 +1547,10 @@ export interface AccountSettingV2RestrictWorkspaceAdmins {
 export interface AccountSettingV2StringVal {
     value?: string;
 }
+export interface AccountSettingV2WorkspaceLabel {
+    color?: string;
+    label?: string;
+}
 export interface AiGatewayMcpServiceConfig {
     /**
      * Tool names or prefix patterns to expose from the MCP server. Use exact
@@ -1532,6 +1612,15 @@ export interface AiGatewayMcpServiceConfigSourceConnection {
      * `mcpServiceId`; required and immutable on Update/Get/Delete
      */
     name: string;
+    /**
+     * (object) - Options needed to build the U2M authorize request, returned as a flat map. When set, it
+     * includes: `authorizationEndpoint` (OAuth authorize URL), `tokenEndpoint` (token-exchange
+     * URL), `oauthScope` (space-separated scopes to request), `clientId` (OAuth client id), and
+     * `oauthProvider` (the OAuth provider)
+     */
+    options: {
+        [key: string]: string;
+    };
 }
 export interface AiGatewayMcpServiceProviderConfig {
     /**
@@ -1723,6 +1812,12 @@ export interface AiGatewayModelProviderServiceConfigCustom {
 export interface AiGatewayModelProviderServiceConfigCustomDirect {
     apiKey?: outputs.AiGatewayModelProviderServiceConfigCustomDirectApiKey;
     baseUrl?: string;
+    /**
+     * Header-based API-key auth: the secret is forwarded on outbound requests
+     * under a caller-chosen HTTP header rather than as an `Authorization`
+     * bearer token. Set this instead of `apiKey` for header auth
+     */
+    headerAuth?: outputs.AiGatewayModelProviderServiceConfigCustomDirectHeaderAuth;
 }
 export interface AiGatewayModelProviderServiceConfigCustomDirectApiKey {
     /**
@@ -1732,6 +1827,27 @@ export interface AiGatewayModelProviderServiceConfigCustomDirectApiKey {
      */
     plaintext: string;
 }
+export interface AiGatewayModelProviderServiceConfigCustomDirectHeaderAuth {
+    /**
+     * HTTP header name that carries the API key on outbound requests (e.g.,
+     * `Ocp-Apim-Subscription-Key`). The value forwarded under this header is
+     * supplied via `apiKeyValue`
+     */
+    apiKeyName?: string;
+    /**
+     * Secret value forwarded under the `apiKeyName` header on outbound
+     * requests. Supplied as inline plaintext via `ProviderSecret.plaintext`
+     */
+    apiKeyValue?: outputs.AiGatewayModelProviderServiceConfigCustomDirectHeaderAuthApiKeyValue;
+}
+export interface AiGatewayModelProviderServiceConfigCustomDirectHeaderAuthApiKeyValue {
+    /**
+     * Inline plaintext credential. INPUT_ONLY: the value never round-trips on
+     * reads. Get and List responses omit `plaintext`; the enclosing secret
+     * object remains present to indicate that a secret is configured
+     */
+    plaintext: string;
+}
 export interface AiGatewayModelProviderServiceConfigGeminiEnterprise {
     direct?: outputs.AiGatewayModelProviderServiceConfigGeminiEnterpriseDirect;
 }
@@ -5263,6 +5379,10 @@ export interface FeatureEngineeringFeatureSource {
      * A Delta table data source
      */
     deltaTableSource?: outputs.FeatureEngineeringFeatureSourceDeltaTableSource;
+    /**
+     * A data source composed from registered upstream Features
+     */
+    featureViewSource?: outputs.FeatureEngineeringFeatureSourceFeatureViewSource;
     /**
      * A Kafka stream data source
      */
@@ -5297,6 +5417,18 @@ export interface FeatureEngineeringFeatureSourceDeltaTableSource {
     timeseriesColumn?: string;
     transformationSql?: string;
 }
+export interface FeatureEngineeringFeatureSourceFeatureViewSource {
+    /**
+     * The upstream Features this source reads. Must include at least one feature
+     */
+    featureReferences?: outputs.FeatureEngineeringFeatureSourceFeatureViewSourceFeatureReference[];
+}
+export interface FeatureEngineeringFeatureSourceFeatureViewSourceFeatureReference {
+    /**
+     * The three-part full name of the upstream Feature
+     */
+    feature: string;
+}
 export interface FeatureEngineeringFeatureSourceKafkaSource {
     entityColumnIdentifiers?: outputs.FeatureEngineeringFeatureSourceKafkaSourceEntityColumnIdentifier[];
     filterCondition?: string;
@@ -5691,12 +5823,18 @@ export interface FeatureEngineeringKafkaConfigValueSchemaProtoSchema {
 export interface FeatureEngineeringMaterializedFeatureCronScheduleTrigger {
     /**
      * The cron expression defining the schedule (e.g., "0 0 * * *" for daily at midnight). The
-     * schedule is interpreted in the UTC time zone. Required when mode is MANUAL (or unset). Left
-     * empty when mode is DERIVED, where the service computes it (aligned to UTC) from the features'
-     * window timing and fills it in on the response
+     * schedule is interpreted in timezoneId (defaults to UTC). Required when mode is MANUAL (or
+     * unset). Left empty when mode is DERIVED, where the service computes it (aligned to UTC) from
+     * the features' window timing and fills it in on the response
      */
     cronExpression?: string;
     mode?: string;
+    /**
+     * A Java timezone ID. The schedule is resolved with respect to this timezone. Defaults to UTC
+     * when omitted. Can only be configured for MANUAL schedules; DERIVED schedules are always aligned
+     * to UTC
+     */
+    timezoneId?: string;
 }
 export interface FeatureEngineeringMaterializedFeatureOfflineStoreConfig {
     catalogName: string;
@@ -6273,6 +6411,12 @@ export interface GetAccountNetworkPoliciesItemIngressCrossWorkspaceAccessAllowRu
     allDestinations?: boolean;
 }
 export interface GetAccountNetworkPoliciesItemIngressCrossWorkspaceAccessAllowRuleDestinationWorkspaceApi {
+    /**
+     * (list of string) - Inverse of `scopes`: matches every API scope EXCEPT those listed here
+     * ("allow all except"). Mutually exclusive with `scopes` — a single
+     * destination may set at most one of the two
+     */
+    excludedScopes?: string[];
     /**
      * (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: `API_SCOPE_QUALIFIER_ALL`, `API_SCOPE_QUALIFIER_READ`
      */
@@ -6413,6 +6557,12 @@ export interface GetAccountNetworkPoliciesItemIngressCrossWorkspaceAccessDenyRul
     allDestinations?: boolean;
 }
 export interface GetAccountNetworkPoliciesItemIngressCrossWorkspaceAccessDenyRuleDestinationWorkspaceApi {
+    /**
+     * (list of string) - Inverse of `scopes`: matches every API scope EXCEPT those listed here
+     * ("allow all except"). Mutually exclusive with `scopes` — a single
+     * destination may set at most one of the two
+     */
+    excludedScopes?: string[];
     /**
      * (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: `API_SCOPE_QUALIFIER_ALL`, `API_SCOPE_QUALIFIER_READ`
      */
@@ -6583,6 +6733,12 @@ export interface GetAccountNetworkPoliciesItemIngressDryRunCrossWorkspaceAccessA
     allDestinations?: boolean;
 }
 export interface GetAccountNetworkPoliciesItemIngressDryRunCrossWorkspaceAccessAllowRuleDestinationWorkspaceApi {
+    /**
+     * (list of string) - Inverse of `scopes`: matches every API scope EXCEPT those listed here
+     * ("allow all except"). Mutually exclusive with `scopes` — a single
+     * destination may set at most one of the two
+     */
+    excludedScopes?: string[];
     /**
      * (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: `API_SCOPE_QUALIFIER_ALL`, `API_SCOPE_QUALIFIER_READ`
      */
@@ -6723,6 +6879,12 @@ export interface GetAccountNetworkPoliciesItemIngressDryRunCrossWorkspaceAccessD
     allDestinations?: boolean;
 }
 export interface GetAccountNetworkPoliciesItemIngressDryRunCrossWorkspaceAccessDenyRuleDestinationWorkspaceApi {
+    /**
+     * (list of string) - Inverse of `scopes`: matches every API scope EXCEPT those listed here
+     * ("allow all except"). Mutually exclusive with `scopes` — a single
+     * destination may set at most one of the two
+     */
+    excludedScopes?: string[];
     /**
      * (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: `API_SCOPE_QUALIFIER_ALL`, `API_SCOPE_QUALIFIER_READ`
      */
@@ -6877,6 +7039,12 @@ export interface GetAccountNetworkPoliciesItemIngressDryRunPrivateAccessAllowRul
     allDestinations?: boolean;
 }
 export interface GetAccountNetworkPoliciesItemIngressDryRunPrivateAccessAllowRuleDestinationWorkspaceApi {
+    /**
+     * (list of string) - Inverse of `scopes`: matches every API scope EXCEPT those listed here
+     * ("allow all except"). Mutually exclusive with `scopes` — a single
+     * destination may set at most one of the two
+     */
+    excludedScopes?: string[];
     /**
      * (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: `API_SCOPE_QUALIFIER_ALL`, `API_SCOPE_QUALIFIER_READ`
      */
@@ -7031,6 +7199,12 @@ export interface GetAccountNetworkPoliciesItemIngressDryRunPrivateAccessDenyRule
     allDestinations?: boolean;
 }
 export interface GetAccountNetworkPoliciesItemIngressDryRunPrivateAccessDenyRuleDestinationWorkspaceApi {
+    /**
+     * (list of string) - Inverse of `scopes`: matches every API scope EXCEPT those listed here
+     * ("allow all except"). Mutually exclusive with `scopes` — a single
+     * destination may set at most one of the two
+     */
+    excludedScopes?: string[];
     /**
      * (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: `API_SCOPE_QUALIFIER_ALL`, `API_SCOPE_QUALIFIER_READ`
      */
@@ -7199,6 +7373,12 @@ export interface GetAccountNetworkPoliciesItemIngressDryRunPublicAccessAllowRule
     allDestinations?: boolean;
 }
 export interface GetAccountNetworkPoliciesItemIngressDryRunPublicAccessAllowRuleDestinationWorkspaceApi {
+    /**
+     * (list of string) - Inverse of `scopes`: matches every API scope EXCEPT those listed here
+     * ("allow all except"). Mutually exclusive with `scopes` — a single
+     * destination may set at most one of the two
+     */
+    excludedScopes?: string[];
     /**
      * (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: `API_SCOPE_QUALIFIER_ALL`, `API_SCOPE_QUALIFIER_READ`
      */
@@ -7349,6 +7529,12 @@ export interface GetAccountNetworkPoliciesItemIngressDryRunPublicAccessDenyRuleD
     allDestinations?: boolean;
 }
 export interface GetAccountNetworkPoliciesItemIngressDryRunPublicAccessDenyRuleDestinationWorkspaceApi {
+    /**
+     * (list of string) - Inverse of `scopes`: matches every API scope EXCEPT those listed here
+     * ("allow all except"). Mutually exclusive with `scopes` — a single
+     * destination may set at most one of the two
+     */
+    excludedScopes?: string[];
     /**
      * (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: `API_SCOPE_QUALIFIER_ALL`, `API_SCOPE_QUALIFIER_READ`
      */
@@ -7513,6 +7699,12 @@ export interface GetAccountNetworkPoliciesItemIngressPrivateAccessAllowRuleDesti
     allDestinations?: boolean;
 }
 export interface GetAccountNetworkPoliciesItemIngressPrivateAccessAllowRuleDestinationWorkspaceApi {
+    /**
+     * (list of string) - Inverse of `scopes`: matches every API scope EXCEPT those listed here
+     * ("allow all except"). Mutually exclusive with `scopes` — a single
+     * destination may set at most one of the two
+     */
+    excludedScopes?: string[];
     /**
      * (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: `API_SCOPE_QUALIFIER_ALL`, `API_SCOPE_QUALIFIER_READ`
      */
@@ -7667,6 +7859,12 @@ export interface GetAccountNetworkPoliciesItemIngressPrivateAccessDenyRuleDestin
     allDestinations?: boolean;
 }
 export interface GetAccountNetworkPoliciesItemIngressPrivateAccessDenyRuleDestinationWorkspaceApi {
+    /**
+     * (list of string) - Inverse of `scopes`: matches every API scope EXCEPT those listed here
+     * ("allow all except"). Mutually exclusive with `scopes` — a single
+     * destination may set at most one of the two
+     */
+    excludedScopes?: string[];
     /**
      * (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: `API_SCOPE_QUALIFIER_ALL`, `API_SCOPE_QUALIFIER_READ`
      */
@@ -7835,6 +8033,12 @@ export interface GetAccountNetworkPoliciesItemIngressPublicAccessAllowRuleDestin
     allDestinations?: boolean;
 }
 export interface GetAccountNetworkPoliciesItemIngressPublicAccessAllowRuleDestinationWorkspaceApi {
+    /**
+     * (list of string) - Inverse of `scopes`: matches every API scope EXCEPT those listed here
+     * ("allow all except"). Mutually exclusive with `scopes` — a single
+     * destination may set at most one of the two
+     */
+    excludedScopes?: string[];
     /**
      * (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: `API_SCOPE_QUALIFIER_ALL`, `API_SCOPE_QUALIFIER_READ`
      */
@@ -7985,6 +8189,12 @@ export interface GetAccountNetworkPoliciesItemIngressPublicAccessDenyRuleDestina
     allDestinations?: boolean;
 }
 export interface GetAccountNetworkPoliciesItemIngressPublicAccessDenyRuleDestinationWorkspaceApi {
+    /**
+     * (list of string) - Inverse of `scopes`: matches every API scope EXCEPT those listed here
+     * ("allow all except"). Mutually exclusive with `scopes` — a single
+     * destination may set at most one of the two
+     */
+    excludedScopes?: string[];
     /**
      * (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: `API_SCOPE_QUALIFIER_ALL`, `API_SCOPE_QUALIFIER_READ`
      */
@@ -8261,6 +8471,12 @@ export interface GetAccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDest
     allDestinations?: boolean;
 }
 export interface GetAccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestinationWorkspaceApi {
+    /**
+     * (list of string) - Inverse of `scopes`: matches every API scope EXCEPT those listed here
+     * ("allow all except"). Mutually exclusive with `scopes` — a single
+     * destination may set at most one of the two
+     */
+    excludedScopes?: string[];
     /**
      * (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: `API_SCOPE_QUALIFIER_ALL`, `API_SCOPE_QUALIFIER_READ`
      */
@@ -8401,6 +8617,12 @@ export interface GetAccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDesti
     allDestinations?: boolean;
 }
 export interface GetAccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestinationWorkspaceApi {
+    /**
+     * (list of string) - Inverse of `scopes`: matches every API scope EXCEPT those listed here
+     * ("allow all except"). Mutually exclusive with `scopes` — a single
+     * destination may set at most one of the two
+     */
+    excludedScopes?: string[];
     /**
      * (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: `API_SCOPE_QUALIFIER_ALL`, `API_SCOPE_QUALIFIER_READ`
      */
@@ -8571,6 +8793,12 @@ export interface GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRu
     allDestinations?: boolean;
 }
 export interface GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestinationWorkspaceApi {
+    /**
+     * (list of string) - Inverse of `scopes`: matches every API scope EXCEPT those listed here
+     * ("allow all except"). Mutually exclusive with `scopes` — a single
+     * destination may set at most one of the two
+     */
+    excludedScopes?: string[];
     /**
      * (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: `API_SCOPE_QUALIFIER_ALL`, `API_SCOPE_QUALIFIER_READ`
      */
@@ -8711,6 +8939,12 @@ export interface GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRul
     allDestinations?: boolean;
 }
 export interface GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestinationWorkspaceApi {
+    /**
+     * (list of string) - Inverse of `scopes`: matches every API scope EXCEPT those listed here
+     * ("allow all except"). Mutually exclusive with `scopes` — a single
+     * destination may set at most one of the two
+     */
+    excludedScopes?: string[];
     /**
      * (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: `API_SCOPE_QUALIFIER_ALL`, `API_SCOPE_QUALIFIER_READ`
      */
@@ -8865,6 +9099,12 @@ export interface GetAccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDesti
     allDestinations?: boolean;
 }
 export interface GetAccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestinationWorkspaceApi {
+    /**
+     * (list of string) - Inverse of `scopes`: matches every API scope EXCEPT those listed here
+     * ("allow all except"). Mutually exclusive with `scopes` — a single
+     * destination may set at most one of the two
+     */
+    excludedScopes?: string[];
     /**
      * (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: `API_SCOPE_QUALIFIER_ALL`, `API_SCOPE_QUALIFIER_READ`
      */
@@ -9019,6 +9259,12 @@ export interface GetAccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleDestin
     allDestinations?: boolean;
 }
 export interface GetAccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleDestinationWorkspaceApi {
+    /**
+     * (list of string) - Inverse of `scopes`: matches every API scope EXCEPT those listed here
+     * ("allow all except"). Mutually exclusive with `scopes` — a single
+     * destination may set at most one of the two
+     */
+    excludedScopes?: string[];
     /**
      * (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: `API_SCOPE_QUALIFIER_ALL`, `API_SCOPE_QUALIFIER_READ`
      */
@@ -9187,6 +9433,12 @@ export interface GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestin
     allDestinations?: boolean;
 }
 export interface GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationWorkspaceApi {
+    /**
+     * (list of string) - Inverse of `scopes`: matches every API scope EXCEPT those listed here
+     * ("allow all except"). Mutually exclusive with `scopes` — a single
+     * destination may set at most one of the two
+     */
+    excludedScopes?: string[];
     /**
      * (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: `API_SCOPE_QUALIFIER_ALL`, `API_SCOPE_QUALIFIER_READ`
      */
@@ -9337,6 +9589,12 @@ export interface GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestina
     allDestinations?: boolean;
 }
 export interface GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationWorkspaceApi {
+    /**
+     * (list of string) - Inverse of `scopes`: matches every API scope EXCEPT those listed here
+     * ("allow all except"). Mutually exclusive with `scopes` — a single
+     * destination may set at most one of the two
+     */
+    excludedScopes?: string[];
     /**
      * (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: `API_SCOPE_QUALIFIER_ALL`, `API_SCOPE_QUALIFIER_READ`
      */
@@ -9501,6 +9759,12 @@ export interface GetAccountNetworkPolicyIngressPrivateAccessAllowRuleDestination
     allDestinations?: boolean;
 }
 export interface GetAccountNetworkPolicyIngressPrivateAccessAllowRuleDestinationWorkspaceApi {
+    /**
+     * (list of string) - Inverse of `scopes`: matches every API scope EXCEPT those listed here
+     * ("allow all except"). Mutually exclusive with `scopes` — a single
+     * destination may set at most one of the two
+     */
+    excludedScopes?: string[];
     /**
      * (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: `API_SCOPE_QUALIFIER_ALL`, `API_SCOPE_QUALIFIER_READ`
      */
@@ -9655,6 +9919,12 @@ export interface GetAccountNetworkPolicyIngressPrivateAccessDenyRuleDestinationL
     allDestinations?: boolean;
 }
 export interface GetAccountNetworkPolicyIngressPrivateAccessDenyRuleDestinationWorkspaceApi {
+    /**
+     * (list of string) - Inverse of `scopes`: matches every API scope EXCEPT those listed here
+     * ("allow all except"). Mutually exclusive with `scopes` — a single
+     * destination may set at most one of the two
+     */
+    excludedScopes?: string[];
     /**
      * (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: `API_SCOPE_QUALIFIER_ALL`, `API_SCOPE_QUALIFIER_READ`
      */
@@ -9823,6 +10093,12 @@ export interface GetAccountNetworkPolicyIngressPublicAccessAllowRuleDestinationL
     allDestinations?: boolean;
 }
 export interface GetAccountNetworkPolicyIngressPublicAccessAllowRuleDestinationWorkspaceApi {
+    /**
+     * (list of string) - Inverse of `scopes`: matches every API scope EXCEPT those listed here
+     * ("allow all except"). Mutually exclusive with `scopes` — a single
+     * destination may set at most one of the two
+     */
+    excludedScopes?: string[];
     /**
      * (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: `API_SCOPE_QUALIFIER_ALL`, `API_SCOPE_QUALIFIER_READ`
      */
@@ -9973,6 +10249,12 @@ export interface GetAccountNetworkPolicyIngressPublicAccessDenyRuleDestinationLa
     allDestinations?: boolean;
 }
 export interface GetAccountNetworkPolicyIngressPublicAccessDenyRuleDestinationWorkspaceApi {
+    /**
+     * (list of string) - Inverse of `scopes`: matches every API scope EXCEPT those listed here
+     * ("allow all except"). Mutually exclusive with `scopes` — a single
+     * destination may set at most one of the two
+     */
+    excludedScopes?: string[];
     /**
      * (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: `API_SCOPE_QUALIFIER_ALL`, `API_SCOPE_QUALIFIER_READ`
      */
@@ -10265,6 +10547,16 @@ export interface GetAccountSettingV2EffectiveStringVal {
      */
     value?: string;
 }
+export interface GetAccountSettingV2EffectiveWorkspaceLabel {
+    /**
+     * (string)
+     */
+    color?: string;
+    /**
+     * (string)
+     */
+    label?: string;
+}
 export interface GetAccountSettingV2IntegerVal {
     /**
      * (string) - Represents a generic string value
@@ -10300,6 +10592,16 @@ export interface GetAccountSettingV2StringVal {
      */
     value?: string;
 }
+export interface GetAccountSettingV2WorkspaceLabel {
+    /**
+     * (string)
+     */
+    color?: string;
+    /**
+     * (string)
+     */
+    label?: string;
+}
 export interface GetAiGatewayMcpServiceConfig {
     /**
      * (list of string) - Tool names or prefix patterns to expose from the MCP server. Use exact
@@ -10361,6 +10663,15 @@ export interface GetAiGatewayMcpServiceConfigSourceConnection {
      * `mcpServiceId`; required and immutable on Update/Get/Delete
      */
     name: string;
+    /**
+     * (object) - Options needed to build the U2M authorize request, returned as a flat map. When set, it
+     * includes: `authorizationEndpoint` (OAuth authorize URL), `tokenEndpoint` (token-exchange
+     * URL), `oauthScope` (space-separated scopes to request), `clientId` (OAuth client id), and
+     * `oauthProvider` (the OAuth provider)
+     */
+    options: {
+        [key: string]: string;
+    };
 }
 export interface GetAiGatewayMcpServiceProviderConfig {
     /**
@@ -10478,6 +10789,15 @@ export interface GetAiGatewayMcpServicesMcpServiceConfigSourceConnection {
      * server, in the form `connections/{catalog}.{schema}.{connection}`
      */
     name: string;
+    /**
+     * (object) - Options needed to build the U2M authorize request, returned as a flat map. When set, it
+     * includes: `authorizationEndpoint` (OAuth authorize URL), `tokenEndpoint` (token-exchange
+     * URL), `oauthScope` (space-separated scopes to request), `clientId` (OAuth client id), and
+     * `oauthProvider` (the OAuth provider)
+     */
+    options: {
+        [key: string]: string;
+    };
 }
 export interface GetAiGatewayMcpServicesMcpServiceProviderConfig {
     /**
@@ -10753,6 +11073,12 @@ export interface GetAiGatewayModelProviderServiceConfigCustomDirect {
      * OpenAI-API-compatible third-party endpoints or in-network proxies
      */
     baseUrl?: string;
+    /**
+     * (ModelProviderServiceConfigCustomProviderApiKeyHeaderAuth) - Header-based API-key auth: the secret is forwarded on outbound requests
+     * under a caller-chosen HTTP header rather than as an `Authorization`
+     * bearer token. Set this instead of `apiKey` for header auth
+     */
+    headerAuth?: outputs.GetAiGatewayModelProviderServiceConfigCustomDirectHeaderAuth;
 }
 export interface GetAiGatewayModelProviderServiceConfigCustomDirectApiKey {
     /**
@@ -10762,6 +11088,27 @@ export interface GetAiGatewayModelProviderServiceConfigCustomDirectApiKey {
      */
     plaintext: string;
 }
+export interface GetAiGatewayModelProviderServiceConfigCustomDirectHeaderAuth {
+    /**
+     * (string) - HTTP header name that carries the API key on outbound requests (e.g.,
+     * `Ocp-Apim-Subscription-Key`). The value forwarded under this header is
+     * supplied via `apiKeyValue`
+     */
+    apiKeyName?: string;
+    /**
+     * (ModelProviderServiceConfigProviderSecret) - Secret value forwarded under the `apiKeyName` header on outbound
+     * requests. Supplied as inline plaintext via `ProviderSecret.plaintext`
+     */
+    apiKeyValue?: outputs.GetAiGatewayModelProviderServiceConfigCustomDirectHeaderAuthApiKeyValue;
+}
+export interface GetAiGatewayModelProviderServiceConfigCustomDirectHeaderAuthApiKeyValue {
+    /**
+     * (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on
+     * reads. Get and List responses omit `plaintext`; the enclosing secret
+     * object remains present to indicate that a secret is configured
+     */
+    plaintext: string;
+}
 export interface GetAiGatewayModelProviderServiceConfigGeminiEnterprise {
     /**
      * (ModelProviderServiceConfigOpenAiProviderDirectConfig) - OpenAI configuration with an API key supplied in the request
@@ -11285,6 +11632,12 @@ export interface GetAiGatewayModelProviderServicesModelProviderServiceConfigCust
      * OpenAI-API-compatible third-party endpoints or in-network proxies
      */
     baseUrl?: string;
+    /**
+     * (ModelProviderServiceConfigCustomProviderApiKeyHeaderAuth) - Header-based API-key auth: the secret is forwarded on outbound requests
+     * under a caller-chosen HTTP header rather than as an `Authorization`
+     * bearer token. Set this instead of `apiKey` for header auth
+     */
+    headerAuth?: outputs.GetAiGatewayModelProviderServicesModelProviderServiceConfigCustomDirectHeaderAuth;
 }
 export interface GetAiGatewayModelProviderServicesModelProviderServiceConfigCustomDirectApiKey {
     /**
@@ -11294,6 +11647,27 @@ export interface GetAiGatewayModelProviderServicesModelProviderServiceConfigCust
      */
     plaintext: string;
 }
+export interface GetAiGatewayModelProviderServicesModelProviderServiceConfigCustomDirectHeaderAuth {
+    /**
+     * (string) - HTTP header name that carries the API key on outbound requests (e.g.,
+     * `Ocp-Apim-Subscription-Key`). The value forwarded under this header is
+     * supplied via `apiKeyValue`
+     */
+    apiKeyName?: string;
+    /**
+     * (ModelProviderServiceConfigProviderSecret) - Secret value forwarded under the `apiKeyName` header on outbound
+     * requests. Supplied as inline plaintext via `ProviderSecret.plaintext`
+     */
+    apiKeyValue?: outputs.GetAiGatewayModelProviderServicesModelProviderServiceConfigCustomDirectHeaderAuthApiKeyValue;
+}
+export interface GetAiGatewayModelProviderServicesModelProviderServiceConfigCustomDirectHeaderAuthApiKeyValue {
+    /**
+     * (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on
+     * reads. Get and List responses omit `plaintext`; the enclosing secret
+     * object remains present to indicate that a secret is configured
+     */
+    plaintext: string;
+}
 export interface GetAiGatewayModelProviderServicesModelProviderServiceConfigGeminiEnterprise {
     /**
      * (ModelProviderServiceConfigOpenAiProviderDirectConfig) - OpenAI configuration with an API key supplied in the request
@@ -18736,6 +19110,10 @@ export interface GetFeatureEngineeringFeatureSource {
      * (DeltaTableSource) - A Delta table data source
      */
     deltaTableSource?: outputs.GetFeatureEngineeringFeatureSourceDeltaTableSource;
+    /**
+     * (FeatureViewSource) - A data source composed from registered upstream Features
+     */
+    featureViewSource?: outputs.GetFeatureEngineeringFeatureSourceFeatureViewSource;
     /**
      * (KafkaSource) - A Kafka stream data source
      */
@@ -18785,6 +19163,18 @@ export interface GetFeatureEngineeringFeatureSourceDeltaTableSource {
      */
     transformationSql?: string;
 }
+export interface GetFeatureEngineeringFeatureSourceFeatureViewSource {
+    /**
+     * (list of FeatureReference) - The upstream Features this source reads. Must include at least one feature
+     */
+    featureReferences?: outputs.GetFeatureEngineeringFeatureSourceFeatureViewSourceFeatureReference[];
+}
+export interface GetFeatureEngineeringFeatureSourceFeatureViewSourceFeatureReference {
+    /**
+     * (string) - The three-part full name of the upstream Feature
+     */
+    feature: string;
+}
 export interface GetFeatureEngineeringFeatureSourceKafkaSource {
     /**
      * (list of ColumnIdentifier, deprecated)
@@ -19488,6 +19878,10 @@ export interface GetFeatureEngineeringFeaturesFeatureSource {
      * (DeltaTableSource) - A Delta table data source
      */
     deltaTableSource?: outputs.GetFeatureEngineeringFeaturesFeatureSourceDeltaTableSource;
+    /**
+     * (FeatureViewSource) - A data source composed from registered upstream Features
+     */
+    featureViewSource?: outputs.GetFeatureEngineeringFeaturesFeatureSourceFeatureViewSource;
     /**
      * (KafkaSource) - A Kafka stream data source
      */
@@ -19535,6 +19929,18 @@ export interface GetFeatureEngineeringFeaturesFeatureSourceDeltaTableSource {
      */
     transformationSql?: string;
 }
+export interface GetFeatureEngineeringFeaturesFeatureSourceFeatureViewSource {
+    /**
+     * (list of FeatureReference) - The upstream Features this source reads. Must include at least one feature
+     */
+    featureReferences?: outputs.GetFeatureEngineeringFeaturesFeatureSourceFeatureViewSourceFeatureReference[];
+}
+export interface GetFeatureEngineeringFeaturesFeatureSourceFeatureViewSourceFeatureReference {
+    /**
+     * (string) - The three-part full name of the upstream Feature
+     */
+    feature: string;
+}
 export interface GetFeatureEngineeringFeaturesFeatureSourceKafkaSource {
     /**
      * (list of ColumnIdentifier, deprecated)
@@ -20399,15 +20805,21 @@ export interface GetFeatureEngineeringKafkaConfigsProviderConfig {
 export interface GetFeatureEngineeringMaterializedFeatureCronScheduleTrigger {
     /**
      * (string) - The cron expression defining the schedule (e.g., "0 0 * * *" for daily at midnight). The
-     * schedule is interpreted in the UTC time zone. Required when mode is MANUAL (or unset). Left
-     * empty when mode is DERIVED, where the service computes it (aligned to UTC) from the features'
-     * window timing and fills it in on the response
+     * schedule is interpreted in timezoneId (defaults to UTC). Required when mode is MANUAL (or
+     * unset). Left empty when mode is DERIVED, where the service computes it (aligned to UTC) from
+     * the features' window timing and fills it in on the response
      */
     cronExpression?: string;
     /**
      * (string) - The type of streaming mode used by the materialization pipeline. Possible values are: `STREAMING_MODE_TYPE_MBM`, `STREAMING_MODE_TYPE_RTM`
      */
     mode?: string;
+    /**
+     * (string) - A Java timezone ID. The schedule is resolved with respect to this timezone. Defaults to UTC
+     * when omitted. Can only be configured for MANUAL schedules; DERIVED schedules are always aligned
+     * to UTC
+     */
+    timezoneId?: string;
 }
 export interface GetFeatureEngineeringMaterializedFeatureOfflineStoreConfig {
     /**
@@ -20548,15 +20960,21 @@ export interface GetFeatureEngineeringMaterializedFeaturesMaterializedFeature {
 export interface GetFeatureEngineeringMaterializedFeaturesMaterializedFeatureCronScheduleTrigger {
     /**
      * (string) - The cron expression defining the schedule (e.g., "0 0 * * *" for daily at midnight). The
-     * schedule is interpreted in the UTC time zone. Required when mode is MANUAL (or unset). Left
-     * empty when mode is DERIVED, where the service computes it (aligned to UTC) from the features'
-     * window timing and fills it in on the response
+     * schedule is interpreted in timezoneId (defaults to UTC). Required when mode is MANUAL (or
+     * unset). Left empty when mode is DERIVED, where the service computes it (aligned to UTC) from
+     * the features' window timing and fills it in on the response
      */
     cronExpression?: string;
     /**
      * (string) - The type of streaming mode used by the materialization pipeline. Possible values are: `STREAMING_MODE_TYPE_MBM`, `STREAMING_MODE_TYPE_RTM`
      */
     mode?: string;
+    /**
+     * (string) - A Java timezone ID. The schedule is resolved with respect to this timezone. Defaults to UTC
+     * when omitted. Can only be configured for MANUAL schedules; DERIVED schedules are always aligned
+     * to UTC
+     */
+    timezoneId?: string;
 }
 export interface GetFeatureEngineeringMaterializedFeaturesMaterializedFeatureOfflineStoreConfig {
     /**
@@ -23192,7 +23610,7 @@ export interface GetPolicyInfosPolicy {
     exceptPrincipals: string[];
     /**
      * (string) - Type of securables that the policy should take effect on.
-     * Required on create and optional on update. Possible values are: `CATALOG`, `CLEAN_ROOM`, `CONNECTION`, `CREDENTIAL`, `EXTERNAL_LOCATION`, `EXTERNAL_METADATA`, `FUNCTION`, `MCP_SERVICE`, `METASTORE`, `MODEL`, `MODEL_PROVIDER_SERVICE`, `MODEL_SERVICE`, `PIPELINE`, `PROVIDER`, `RECIPIENT`, `SCHEMA`, `SHARE`, `STAGING_TABLE`, `STORAGE_CREDENTIAL`, `TABLE`, `VOLUME`
+     * Required on create and optional on update. Possible values are: `AGENT_SERVICE`, `CATALOG`, `CLEAN_ROOM`, `CONNECTION`, `CREDENTIAL`, `EXTERNAL_LOCATION`, `EXTERNAL_METADATA`, `FUNCTION`, `MCP_SERVICE`, `METASTORE`, `MODEL`, `MODEL_PROVIDER_SERVICE`, `MODEL_SERVICE`, `PIPELINE`, `PROVIDER`, `RECIPIENT`, `SCHEMA`, `SHARE`, `SKILL`, `STAGING_TABLE`, `STORAGE_CREDENTIAL`, `TABLE`, `VOLUME`
      */
     forSecurableType: string;
     /**
@@ -25817,7 +26235,7 @@ export interface GetRfaAccessRequestDestinationsDestinationSourceSecurable {
     providerShare?: string;
     /**
      * (string) - Required. The type of securable (catalog/schema/table).
-     * Optional if resourceName is present. Possible values are: `CATALOG`, `CLEAN_ROOM`, `CONNECTION`, `CREDENTIAL`, `EXTERNAL_LOCATION`, `EXTERNAL_METADATA`, `FUNCTION`, `MCP_SERVICE`, `METASTORE`, `MODEL`, `MODEL_PROVIDER_SERVICE`, `MODEL_SERVICE`, `PIPELINE`, `PROVIDER`, `RECIPIENT`, `SCHEMA`, `SHARE`, `STAGING_TABLE`, `STORAGE_CREDENTIAL`, `TABLE`, `VOLUME`
+     * Optional if resourceName is present. Possible values are: `AGENT_SERVICE`, `CATALOG`, `CLEAN_ROOM`, `CONNECTION`, `CREDENTIAL`, `EXTERNAL_LOCATION`, `EXTERNAL_METADATA`, `FUNCTION`, `MCP_SERVICE`, `METASTORE`, `MODEL`, `MODEL_PROVIDER_SERVICE`, `MODEL_SERVICE`, `PIPELINE`, `PROVIDER`, `RECIPIENT`, `SCHEMA`, `SHARE`, `SKILL`, `STAGING_TABLE`, `STORAGE_CREDENTIAL`, `TABLE`, `VOLUME`
      */
     type?: string;
 }
@@ -25839,7 +26257,7 @@ export interface GetRfaAccessRequestDestinationsSecurable {
     providerShare?: string;
     /**
      * (string) - Required. The type of securable (catalog/schema/table).
-     * Optional if resourceName is present. Possible values are: `CATALOG`, `CLEAN_ROOM`, `CONNECTION`, `CREDENTIAL`, `EXTERNAL_LOCATION`, `EXTERNAL_METADATA`, `FUNCTION`, `MCP_SERVICE`, `METASTORE`, `MODEL`, `MODEL_PROVIDER_SERVICE`, `MODEL_SERVICE`, `PIPELINE`, `PROVIDER`, `RECIPIENT`, `SCHEMA`, `SHARE`, `STAGING_TABLE`, `STORAGE_CREDENTIAL`, `TABLE`, `VOLUME`
+     * Optional if resourceName is present. Possible values are: `AGENT_SERVICE`, `CATALOG`, `CLEAN_ROOM`, `CONNECTION`, `CREDENTIAL`, `EXTERNAL_LOCATION`, `EXTERNAL_METADATA`, `FUNCTION`, `MCP_SERVICE`, `METASTORE`, `MODEL`, `MODEL_PROVIDER_SERVICE`, `MODEL_SERVICE`, `PIPELINE`, `PROVIDER`, `RECIPIENT`, `SCHEMA`, `SHARE`, `SKILL`, `STAGING_TABLE`, `STORAGE_CREDENTIAL`, `TABLE`, `VOLUME`
      */
     type?: string;
 }
@@ -25879,11 +26297,12 @@ export interface GetSandboxesSandbox {
      */
     createTime: string;
     /**
-     * (string) - Human-readable display label for the sandbox. At most 256 bytes
+     * (string) - Human-readable display label for the sandbox. At most 256 characters
      */
     displayName: string;
     /**
-     * (string) - The AIP-compliant resource name, such as "sandboxes/my-sandbox"
+     * (string) - The sandbox resource name, in the form `sandboxes/{sandbox_id}`. Derived from
+     * `sandboxId`; any value supplied in a create or update request body is ignored
      */
     name: string;
     /**
@@ -26411,6 +26830,7 @@ export interface GetServingEndpointsEndpointConfigServedEntityExternalModelAmazo
     awsSecretAccessKeyPlaintext: string;
     bedrockProvider: string;
     instanceProfileArn?: string;
+    ucServiceCredentialName?: string;
 }
 export interface GetServingEndpointsEndpointConfigServedEntityExternalModelAnthropicConfig {
     anthropicApiKey?: string;
@@ -27465,7 +27885,7 @@ export interface GetWorkspaceEntityTagAssignmentsTagAssignment {
      */
     entityId: string;
     /**
-     * The type of entity to which the tag is assigned. Allowed values are apps, dashboards, geniespaces, notebooks
+     * The type of entity to which the tag is assigned. Allowed values are apps, dashboards, designerfiles, geniespaces, notebooks
      */
     entityType: string;
     /**
@@ -28005,6 +28425,16 @@ export interface GetWorkspaceSettingV2EffectiveStringVal {
      */
     value?: string;
 }
+export interface GetWorkspaceSettingV2EffectiveWorkspaceLabel {
+    /**
+     * (string)
+     */
+    color?: string;
+    /**
+     * (string)
+     */
+    label?: string;
+}
 export interface GetWorkspaceSettingV2IntegerVal {
     /**
      * (string) - Represents a generic string value
@@ -28046,6 +28476,16 @@ export interface GetWorkspaceSettingV2StringVal {
      */
     value?: string;
 }
+export interface GetWorkspaceSettingV2WorkspaceLabel {
+    /**
+     * (string)
+     */
+    color?: string;
+    /**
+     * (string)
+     */
+    label?: string;
+}
 export interface GetZonesProviderConfig {
     /**
      * Workspace ID which the resource belongs to. This workspace must be part of the account which the provider is configured with.
@@ -29182,6 +29622,8 @@ export interface JobTaskAiRuntimeTask {
     mlflowArtifactLocation?: string;
     mlflowExperimentDirectory?: string;
     mlflowRun?: string;
+    priorityClass?: string;
+    unityCatalogImagePath?: string;
 }
 export interface JobTaskAiRuntimeTaskDeployment {
     commandPath: string;
@@ -29522,6 +29964,8 @@ export interface JobTaskForEachTaskTaskAiRuntimeTask {
     mlflowArtifactLocation?: string;
     mlflowExperimentDirectory?: string;
     mlflowRun?: string;
+    priorityClass?: string;
+    unityCatalogImagePath?: string;
 }
 export interface JobTaskForEachTaskTaskAiRuntimeTaskDeployment {
     commandPath: string;
@@ -31967,6 +32411,7 @@ export interface ModelServingConfigServedEntityExternalModelAmazonBedrockConfig
      */
     bedrockProvider: string;
     instanceProfileArn?: string;
+    ucServiceCredentialName?: string;
 }
 export interface ModelServingConfigServedEntityExternalModelAnthropicConfig {
     /**
@@ -32597,11 +33042,11 @@ export interface MwsNetworksGcpNetworkInfo {
      */
     networkProjectId: string;
     /**
-     * @deprecated gcp_network_info.pod_ip_range_name is deprecated and will be removed in a future release. For more information, review the documentation at https://registry.terraform.io/providers/databricks/databricks/1.133.0/docs/guides/gcp-workspace#creating-a-vpc
+     * @deprecated gcp_network_info.pod_ip_range_name is deprecated and will be removed in a future release. For more information, review the documentation at https://registry.terraform.io/providers/databricks/databricks/1.134.0/docs/guides/gcp-workspace#creating-a-vpc
      */
     podIpRangeName?: string;
     /**
-     * @deprecated gcp_network_info.service_ip_range_name is deprecated and will be removed in a future release. For more information, review the documentation at https://registry.terraform.io/providers/databricks/databricks/1.133.0/docs/guides/gcp-workspace#creating-a-vpc
+     * @deprecated gcp_network_info.service_ip_range_name is deprecated and will be removed in a future release. For more information, review the documentation at https://registry.terraform.io/providers/databricks/databricks/1.134.0/docs/guides/gcp-workspace#creating-a-vpc
      */
     serviceIpRangeName?: string;
     /**
@@ -32662,11 +33107,11 @@ export interface MwsWorkspacesExternalCustomerInfo {
 }
 export interface MwsWorkspacesGcpManagedNetworkConfig {
     /**
-     * @deprecated gcp_managed_network_config.gke_cluster_pod_ip_range is deprecated and will be removed in a future release. For more information, review the documentation at https://registry.terraform.io/providers/databricks/databricks/1.133.0/docs/guides/gcp-workspace#creating-a-databricks-workspace
+     * @deprecated gcp_managed_network_config.gke_cluster_pod_ip_range is deprecated and will be removed in a future release. For more information, review the documentation at https://registry.terraform.io/providers/databricks/databricks/1.134.0/docs/guides/gcp-workspace#creating-a-databricks-workspace
      */
     gkeClusterPodIpRange?: string;
     /**
-     * @deprecated gcp_managed_network_config.gke_cluster_service_ip_range is deprecated and will be removed in a future release. For more information, review the documentation at https://registry.terraform.io/providers/databricks/databricks/1.133.0/docs/guides/gcp-workspace#creating-a-databricks-workspace
+     * @deprecated gcp_managed_network_config.gke_cluster_service_ip_range is deprecated and will be removed in a future release. For more information, review the documentation at https://registry.terraform.io/providers/databricks/databricks/1.134.0/docs/guides/gcp-workspace#creating-a-databricks-workspace
      */
     gkeClusterServiceIpRange?: string;
     subnetCidr: string;
@@ -33314,10 +33759,29 @@ export interface PipelineIngestionDefinitionObjectSchemaConnectorOptionsKafkaOpt
     valueTransformer?: outputs.PipelineIngestionDefinitionObjectSchemaConnectorOptionsKafkaOptionsValueTransformer;
 }
 export interface PipelineIngestionDefinitionObjectSchemaConnectorOptionsKafkaOptionsKeyTransformer {
+    avroOptions?: outputs.PipelineIngestionDefinitionObjectSchemaConnectorOptionsKafkaOptionsKeyTransformerAvroOptions;
     format?: string;
     inputColumn?: string;
     jsonOptions?: outputs.PipelineIngestionDefinitionObjectSchemaConnectorOptionsKafkaOptionsKeyTransformerJsonOptions;
     outputColumn?: string;
+    protobufOptions?: outputs.PipelineIngestionDefinitionObjectSchemaConnectorOptionsKafkaOptionsKeyTransformerProtobufOptions;
+}
+export interface PipelineIngestionDefinitionObjectSchemaConnectorOptionsKafkaOptionsKeyTransformerAvroOptions {
+    parseMode?: string;
+    /**
+     * The default schema (database) where tables are read from or published to. The presence of this attribute implies that the pipeline is in direct publishing mode.
+     */
+    schema?: string;
+    schemaFilePath?: string;
+    schemaRegistry?: outputs.PipelineIngestionDefinitionObjectSchemaConnectorOptionsKafkaOptionsKeyTransformerAvroOptionsSchemaRegistry;
+}
+export interface PipelineIngestionDefinitionObjectSchemaConnectorOptionsKafkaOptionsKeyTransformerAvroOptionsSchemaRegistry {
+    confluentOptions?: outputs.PipelineIngestionDefinitionObjectSchemaConnectorOptionsKafkaOptionsKeyTransformerAvroOptionsSchemaRegistryConfluentOptions;
+    connectionName?: string;
+    protobufMessageName?: string;
+}
+export interface PipelineIngestionDefinitionObjectSchemaConnectorOptionsKafkaOptionsKeyTransformerAvroOptionsSchemaRegistryConfluentOptions {
+    subject?: string;
 }
 export interface PipelineIngestionDefinitionObjectSchemaConnectorOptionsKafkaOptionsKeyTransformerJsonOptions {
     asVariant?: boolean;
@@ -33329,11 +33793,45 @@ export interface PipelineIngestionDefinitionObjectSchemaConnectorOptionsKafkaOpt
     schemaFilePath?: string;
     schemaHints?: string;
 }
+export interface PipelineIngestionDefinitionObjectSchemaConnectorOptionsKafkaOptionsKeyTransformerProtobufOptions {
+    descFilePath?: string;
+    messageName?: string;
+    parseMode?: string;
+    recursiveFieldsMaxDepth?: number;
+    schemaRegistry?: outputs.PipelineIngestionDefinitionObjectSchemaConnectorOptionsKafkaOptionsKeyTransformerProtobufOptionsSchemaRegistry;
+}
+export interface PipelineIngestionDefinitionObjectSchemaConnectorOptionsKafkaOptionsKeyTransformerProtobufOptionsSchemaRegistry {
+    confluentOptions?: outputs.PipelineIngestionDefinitionObjectSchemaConnectorOptionsKafkaOptionsKeyTransformerProtobufOptionsSchemaRegistryConfluentOptions;
+    connectionName?: string;
+    protobufMessageName?: string;
+}
+export interface PipelineIngestionDefinitionObjectSchemaConnectorOptionsKafkaOptionsKeyTransformerProtobufOptionsSchemaRegistryConfluentOptions {
+    subject?: string;
+}
 export interface PipelineIngestionDefinitionObjectSchemaConnectorOptionsKafkaOptionsValueTransformer {
+    avroOptions?: outputs.PipelineIngestionDefinitionObjectSchemaConnectorOptionsKafkaOptionsValueTransformerAvroOptions;
     format?: string;
     inputColumn?: string;
     jsonOptions?: outputs.PipelineIngestionDefinitionObjectSchemaConnectorOptionsKafkaOptionsValueTransformerJsonOptions;
     outputColumn?: string;
+    protobufOptions?: outputs.PipelineIngestionDefinitionObjectSchemaConnectorOptionsKafkaOptionsValueTransformerProtobufOptions;
+}
+export interface PipelineIngestionDefinitionObjectSchemaConnectorOptionsKafkaOptionsValueTransformerAvroOptions {
+    parseMode?: string;
+    /**
+     * The default schema (database) where tables are read from or published to. The presence of this attribute implies that the pipeline is in direct publishing mode.
+     */
+    schema?: string;
+    schemaFilePath?: string;
+    schemaRegistry?: outputs.PipelineIngestionDefinitionObjectSchemaConnectorOptionsKafkaOptionsValueTransformerAvroOptionsSchemaRegistry;
+}
+export interface PipelineIngestionDefinitionObjectSchemaConnectorOptionsKafkaOptionsValueTransformerAvroOptionsSchemaRegistry {
+    confluentOptions?: outputs.PipelineIngestionDefinitionObjectSchemaConnectorOptionsKafkaOptionsValueTransformerAvroOptionsSchemaRegistryConfluentOptions;
+    connectionName?: string;
+    protobufMessageName?: string;
+}
+export interface PipelineIngestionDefinitionObjectSchemaConnectorOptionsKafkaOptionsValueTransformerAvroOptionsSchemaRegistryConfluentOptions {
+    subject?: string;
 }
 export interface PipelineIngestionDefinitionObjectSchemaConnectorOptionsKafkaOptionsValueTransformerJsonOptions {
     asVariant?: boolean;
@@ -33345,6 +33843,21 @@ export interface PipelineIngestionDefinitionObjectSchemaConnectorOptionsKafkaOpt
     schemaFilePath?: string;
     schemaHints?: string;
 }
+export interface PipelineIngestionDefinitionObjectSchemaConnectorOptionsKafkaOptionsValueTransformerProtobufOptions {
+    descFilePath?: string;
+    messageName?: string;
+    parseMode?: string;
+    recursiveFieldsMaxDepth?: number;
+    schemaRegistry?: outputs.PipelineIngestionDefinitionObjectSchemaConnectorOptionsKafkaOptionsValueTransformerProtobufOptionsSchemaRegistry;
+}
+export interface PipelineIngestionDefinitionObjectSchemaConnectorOptionsKafkaOptionsValueTransformerProtobufOptionsSchemaRegistry {
+    confluentOptions?: outputs.PipelineIngestionDefinitionObjectSchemaConnectorOptionsKafkaOptionsValueTransformerProtobufOptionsSchemaRegistryConfluentOptions;
+    connectionName?: string;
+    protobufMessageName?: string;
+}
+export interface PipelineIngestionDefinitionObjectSchemaConnectorOptionsKafkaOptionsValueTransformerProtobufOptionsSchemaRegistryConfluentOptions {
+    subject?: string;
+}
 export interface PipelineIngestionDefinitionObjectSchemaConnectorOptionsLinkedinAdsOptions {
     customReportOptions?: outputs.PipelineIngestionDefinitionObjectSchemaConnectorOptionsLinkedinAdsOptionsCustomReportOptions;
     lookbackWindowDays?: number;
@@ -33458,10 +33971,29 @@ export interface PipelineIngestionDefinitionObjectSchemaFanoutOptions {
     transforms?: outputs.PipelineIngestionDefinitionObjectSchemaFanoutOptionsTransform[];
 }
 export interface PipelineIngestionDefinitionObjectSchemaFanoutOptionsTransform {
+    avroOptions?: outputs.PipelineIngestionDefinitionObjectSchemaFanoutOptionsTransformAvroOptions;
     format?: string;
     inputColumn?: string;
     jsonOptions?: outputs.PipelineIngestionDefinitionObjectSchemaFanoutOptionsTransformJsonOptions;
     outputColumn?: string;
+    protobufOptions?: outputs.PipelineIngestionDefinitionObjectSchemaFanoutOptionsTransformProtobufOptions;
+}
+export interface PipelineIngestionDefinitionObjectSchemaFanoutOptionsTransformAvroOptions {
+    parseMode?: string;
+    /**
+     * The default schema (database) where tables are read from or published to. The presence of this attribute implies that the pipeline is in direct publishing mode.
+     */
+    schema?: string;
+    schemaFilePath?: string;
+    schemaRegistry?: outputs.PipelineIngestionDefinitionObjectSchemaFanoutOptionsTransformAvroOptionsSchemaRegistry;
+}
+export interface PipelineIngestionDefinitionObjectSchemaFanoutOptionsTransformAvroOptionsSchemaRegistry {
+    confluentOptions?: outputs.PipelineIngestionDefinitionObjectSchemaFanoutOptionsTransformAvroOptionsSchemaRegistryConfluentOptions;
+    connectionName?: string;
+    protobufMessageName?: string;
+}
+export interface PipelineIngestionDefinitionObjectSchemaFanoutOptionsTransformAvroOptionsSchemaRegistryConfluentOptions {
+    subject?: string;
 }
 export interface PipelineIngestionDefinitionObjectSchemaFanoutOptionsTransformJsonOptions {
     asVariant?: boolean;
@@ -33473,6 +34005,21 @@ export interface PipelineIngestionDefinitionObjectSchemaFanoutOptionsTransformJs
     schemaFilePath?: string;
     schemaHints?: string;
 }
+export interface PipelineIngestionDefinitionObjectSchemaFanoutOptionsTransformProtobufOptions {
+    descFilePath?: string;
+    messageName?: string;
+    parseMode?: string;
+    recursiveFieldsMaxDepth?: number;
+    schemaRegistry?: outputs.PipelineIngestionDefinitionObjectSchemaFanoutOptionsTransformProtobufOptionsSchemaRegistry;
+}
+export interface PipelineIngestionDefinitionObjectSchemaFanoutOptionsTransformProtobufOptionsSchemaRegistry {
+    confluentOptions?: outputs.PipelineIngestionDefinitionObjectSchemaFanoutOptionsTransformProtobufOptionsSchemaRegistryConfluentOptions;
+    connectionName?: string;
+    protobufMessageName?: string;
+}
+export interface PipelineIngestionDefinitionObjectSchemaFanoutOptionsTransformProtobufOptionsSchemaRegistryConfluentOptions {
+    subject?: string;
+}
 export interface PipelineIngestionDefinitionObjectSchemaTableConfiguration {
     autoFullRefreshPolicy?: outputs.PipelineIngestionDefinitionObjectSchemaTableConfigurationAutoFullRefreshPolicy;
     clusteringColumns?: string[];
@@ -33602,10 +34149,29 @@ export interface PipelineIngestionDefinitionObjectTableConnectorOptionsKafkaOpti
     valueTransformer?: outputs.PipelineIngestionDefinitionObjectTableConnectorOptionsKafkaOptionsValueTransformer;
 }
 export interface PipelineIngestionDefinitionObjectTableConnectorOptionsKafkaOptionsKeyTransformer {
+    avroOptions?: outputs.PipelineIngestionDefinitionObjectTableConnectorOptionsKafkaOptionsKeyTransformerAvroOptions;
     format?: string;
     inputColumn?: string;
     jsonOptions?: outputs.PipelineIngestionDefinitionObjectTableConnectorOptionsKafkaOptionsKeyTransformerJsonOptions;
     outputColumn?: string;
+    protobufOptions?: outputs.PipelineIngestionDefinitionObjectTableConnectorOptionsKafkaOptionsKeyTransformerProtobufOptions;
+}
+export interface PipelineIngestionDefinitionObjectTableConnectorOptionsKafkaOptionsKeyTransformerAvroOptions {
+    parseMode?: string;
+    /**
+     * The default schema (database) where tables are read from or published to. The presence of this attribute implies that the pipeline is in direct publishing mode.
+     */
+    schema?: string;
+    schemaFilePath?: string;
+    schemaRegistry?: outputs.PipelineIngestionDefinitionObjectTableConnectorOptionsKafkaOptionsKeyTransformerAvroOptionsSchemaRegistry;
+}
+export interface PipelineIngestionDefinitionObjectTableConnectorOptionsKafkaOptionsKeyTransformerAvroOptionsSchemaRegistry {
+    confluentOptions?: outputs.PipelineIngestionDefinitionObjectTableConnectorOptionsKafkaOptionsKeyTransformerAvroOptionsSchemaRegistryConfluentOptions;
+    connectionName?: string;
+    protobufMessageName?: string;
+}
+export interface PipelineIngestionDefinitionObjectTableConnectorOptionsKafkaOptionsKeyTransformerAvroOptionsSchemaRegistryConfluentOptions {
+    subject?: string;
 }
 export interface PipelineIngestionDefinitionObjectTableConnectorOptionsKafkaOptionsKeyTransformerJsonOptions {
     asVariant?: boolean;
@@ -33617,11 +34183,45 @@ export interface PipelineIngestionDefinitionObjectTableConnectorOptionsKafkaOpti
     schemaFilePath?: string;
     schemaHints?: string;
 }
+export interface PipelineIngestionDefinitionObjectTableConnectorOptionsKafkaOptionsKeyTransformerProtobufOptions {
+    descFilePath?: string;
+    messageName?: string;
+    parseMode?: string;
+    recursiveFieldsMaxDepth?: number;
+    schemaRegistry?: outputs.PipelineIngestionDefinitionObjectTableConnectorOptionsKafkaOptionsKeyTransformerProtobufOptionsSchemaRegistry;
+}
+export interface PipelineIngestionDefinitionObjectTableConnectorOptionsKafkaOptionsKeyTransformerProtobufOptionsSchemaRegistry {
+    confluentOptions?: outputs.PipelineIngestionDefinitionObjectTableConnectorOptionsKafkaOptionsKeyTransformerProtobufOptionsSchemaRegistryConfluentOptions;
+    connectionName?: string;
+    protobufMessageName?: string;
+}
+export interface PipelineIngestionDefinitionObjectTableConnectorOptionsKafkaOptionsKeyTransformerProtobufOptionsSchemaRegistryConfluentOptions {
+    subject?: string;
+}
 export interface PipelineIngestionDefinitionObjectTableConnectorOptionsKafkaOptionsValueTransformer {
+    avroOptions?: outputs.PipelineIngestionDefinitionObjectTableConnectorOptionsKafkaOptionsValueTransformerAvroOptions;
     format?: string;
     inputColumn?: string;
     jsonOptions?: outputs.PipelineIngestionDefinitionObjectTableConnectorOptionsKafkaOptionsValueTransformerJsonOptions;
     outputColumn?: string;
+    protobufOptions?: outputs.PipelineIngestionDefinitionObjectTableConnectorOptionsKafkaOptionsValueTransformerProtobufOptions;
+}
+export interface PipelineIngestionDefinitionObjectTableConnectorOptionsKafkaOptionsValueTransformerAvroOptions {
+    parseMode?: string;
+    /**
+     * The default schema (database) where tables are read from or published to. The presence of this attribute implies that the pipeline is in direct publishing mode.
+     */
+    schema?: string;
+    schemaFilePath?: string;
+    schemaRegistry?: outputs.PipelineIngestionDefinitionObjectTableConnectorOptionsKafkaOptionsValueTransformerAvroOptionsSchemaRegistry;
+}
+export interface PipelineIngestionDefinitionObjectTableConnectorOptionsKafkaOptionsValueTransformerAvroOptionsSchemaRegistry {
+    confluentOptions?: outputs.PipelineIngestionDefinitionObjectTableConnectorOptionsKafkaOptionsValueTransformerAvroOptionsSchemaRegistryConfluentOptions;
+    connectionName?: string;
+    protobufMessageName?: string;
+}
+export interface PipelineIngestionDefinitionObjectTableConnectorOptionsKafkaOptionsValueTransformerAvroOptionsSchemaRegistryConfluentOptions {
+    subject?: string;
 }
 export interface PipelineIngestionDefinitionObjectTableConnectorOptionsKafkaOptionsValueTransformerJsonOptions {
     asVariant?: boolean;
@@ -33633,6 +34233,21 @@ export interface PipelineIngestionDefinitionObjectTableConnectorOptionsKafkaOpti
     schemaFilePath?: string;
     schemaHints?: string;
 }
+export interface PipelineIngestionDefinitionObjectTableConnectorOptionsKafkaOptionsValueTransformerProtobufOptions {
+    descFilePath?: string;
+    messageName?: string;
+    parseMode?: string;
+    recursiveFieldsMaxDepth?: number;
+    schemaRegistry?: outputs.PipelineIngestionDefinitionObjectTableConnectorOptionsKafkaOptionsValueTransformerProtobufOptionsSchemaRegistry;
+}
+export interface PipelineIngestionDefinitionObjectTableConnectorOptionsKafkaOptionsValueTransformerProtobufOptionsSchemaRegistry {
+    confluentOptions?: outputs.PipelineIngestionDefinitionObjectTableConnectorOptionsKafkaOptionsValueTransformerProtobufOptionsSchemaRegistryConfluentOptions;
+    connectionName?: string;
+    protobufMessageName?: string;
+}
+export interface PipelineIngestionDefinitionObjectTableConnectorOptionsKafkaOptionsValueTransformerProtobufOptionsSchemaRegistryConfluentOptions {
+    subject?: string;
+}
 export interface PipelineIngestionDefinitionObjectTableConnectorOptionsLinkedinAdsOptions {
     customReportOptions?: outputs.PipelineIngestionDefinitionObjectTableConnectorOptionsLinkedinAdsOptionsCustomReportOptions;
     lookbackWindowDays?: number;
@@ -33909,6 +34524,7 @@ export interface PipelineRestartWindow {
     timeZoneId?: string;
 }
 export interface PipelineRunAs {
+    groupName?: string;
     /**
      * The application ID of an active service principal. Setting this field requires the `servicePrincipal/user` role.
      *
@@ -35371,7 +35987,7 @@ export interface RfaAccessRequestDestinationsDestinationSourceSecurable {
     providerShare?: string;
     /**
      * Required. The type of securable (catalog/schema/table).
-     * Optional if resourceName is present. Possible values are: `CATALOG`, `CLEAN_ROOM`, `CONNECTION`, `CREDENTIAL`, `EXTERNAL_LOCATION`, `EXTERNAL_METADATA`, `FUNCTION`, `MCP_SERVICE`, `METASTORE`, `MODEL`, `MODEL_PROVIDER_SERVICE`, `MODEL_SERVICE`, `PIPELINE`, `PROVIDER`, `RECIPIENT`, `SCHEMA`, `SHARE`, `STAGING_TABLE`, `STORAGE_CREDENTIAL`, `TABLE`, `VOLUME`
+     * Optional if resourceName is present. Possible values are: `AGENT_SERVICE`, `CATALOG`, `CLEAN_ROOM`, `CONNECTION`, `CREDENTIAL`, `EXTERNAL_LOCATION`, `EXTERNAL_METADATA`, `FUNCTION`, `MCP_SERVICE`, `METASTORE`, `MODEL`, `MODEL_PROVIDER_SERVICE`, `MODEL_SERVICE`, `PIPELINE`, `PROVIDER`, `RECIPIENT`, `SCHEMA`, `SHARE`, `SKILL`, `STAGING_TABLE`, `STORAGE_CREDENTIAL`, `TABLE`, `VOLUME`
      */
     type?: string;
 }
@@ -35394,7 +36010,7 @@ export interface RfaAccessRequestDestinationsSecurable {
     providerShare?: string;
     /**
      * Required. The type of securable (catalog/schema/table).
-     * Optional if resourceName is present. Possible values are: `CATALOG`, `CLEAN_ROOM`, `CONNECTION`, `CREDENTIAL`, `EXTERNAL_LOCATION`, `EXTERNAL_METADATA`, `FUNCTION`, `MCP_SERVICE`, `METASTORE`, `MODEL`, `MODEL_PROVIDER_SERVICE`, `MODEL_SERVICE`, `PIPELINE`, `PROVIDER`, `RECIPIENT`, `SCHEMA`, `SHARE`, `STAGING_TABLE`, `STORAGE_CREDENTIAL`, `TABLE`, `VOLUME`
+     * Optional if resourceName is present. Possible values are: `AGENT_SERVICE`, `CATALOG`, `CLEAN_ROOM`, `CONNECTION`, `CREDENTIAL`, `EXTERNAL_LOCATION`, `EXTERNAL_METADATA`, `FUNCTION`, `MCP_SERVICE`, `METASTORE`, `MODEL`, `MODEL_PROVIDER_SERVICE`, `MODEL_SERVICE`, `PIPELINE`, `PROVIDER`, `RECIPIENT`, `SCHEMA`, `SHARE`, `SKILL`, `STAGING_TABLE`, `STORAGE_CREDENTIAL`, `TABLE`, `VOLUME`
      */
     type?: string;
 }
@@ -36457,6 +37073,10 @@ export interface WorkspaceSettingV2EffectiveRestrictWorkspaceAdmins {
 export interface WorkspaceSettingV2EffectiveStringVal {
     value?: string;
 }
+export interface WorkspaceSettingV2EffectiveWorkspaceLabel {
+    color?: string;
+    label?: string;
+}
 export interface WorkspaceSettingV2IntegerVal {
     value?: number;
 }
@@ -36486,4 +37106,8 @@ export interface WorkspaceSettingV2RestrictWorkspaceAdmins {
 export interface WorkspaceSettingV2StringVal {
     value?: string;
 }
+export interface WorkspaceSettingV2WorkspaceLabel {
+    color?: string;
+    label?: string;
+}
 //# sourceMappingURL=output.d.ts.map