mcp-google-multi 5.2.0-alpha.2 → 5.2.0-alpha.4

package/dist/tools/generated/cloudidentity.js

@@ -0,0 +1,955 @@
+// GENERATED by scripts/gen-tools.ts — do not edit. Regenerate: npm run gen:tools
+import { z } from 'zod';
+import { coerceJson } from '../_coerce.js';
+import { accountField, registerGeneratedTool } from './_shared.js';
+export function registerCloudidentityGeneratedTools(registry) {
+    registerGeneratedTool(registry, {
+        name: "cloudidentity_customers_userinvitations_cancel",
+        cud: "create",
+        description: "Cancels a UserInvitation that was already sent.",
+        method: { id: "cloudidentity.customers.userinvitations.cancel", httpMethod: "POST", path: "v1/{+name}:cancel", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"] },
+        params: [{ "field": "name", "api": "name", "location": "path" }, { "field": "fields", "api": "fields", "location": "query" }],
+        hasBody: true,
+        shape: {
+            account: accountField(),
+            name: z.string().describe("Required. `UserInvitation` name in the format `customers/{customer}/userinvitations/{user_email_address}`"),
+            body: coerceJson(z.record(z.string(), z.unknown())).describe("CancelUserInvitationRequest JSON request body."),
+            fields: z.string().optional().describe('Response field mask.'),
+        },
+    });
+    registerGeneratedTool(registry, {
+        name: "cloudidentity_customers_userinvitations_get",
+        cud: "read",
+        description: "Retrieves a UserInvitation resource. **Note:** New consumer accounts with the customer's verified domain created within the previous 48 hours will not appear in",
+        method: { id: "cloudidentity.customers.userinvitations.get", httpMethod: "GET", path: "v1/{+name}", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"] },
+        params: [{ "field": "name", "api": "name", "location": "path" }, { "field": "fields", "api": "fields", "location": "query" }],
+        hasBody: false,
+        shape: {
+            account: accountField(),
+            name: z.string().describe("Required. `UserInvitation` name in the format `customers/{customer}/userinvitations/{user_email_address}`"),
+            fields: z.string().optional().describe('Response field mask.'),
+        },
+    });
+    registerGeneratedTool(registry, {
+        name: "cloudidentity_customers_userinvitations_is_invitable_user",
+        cud: "read",
+        description: "Verifies whether a user account is eligible to receive a UserInvitation (is an unmanaged account). Eligibility is based on the following criteria: * the email a",
+        method: { id: "cloudidentity.customers.userinvitations.isInvitableUser", httpMethod: "GET", path: "v1/{+name}:isInvitableUser", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"] },
+        params: [{ "field": "name", "api": "name", "location": "path" }, { "field": "fields", "api": "fields", "location": "query" }],
+        hasBody: false,
+        shape: {
+            account: accountField(),
+            name: z.string().describe("Required. `UserInvitation` name in the format `customers/{customer}/userinvitations/{user_email_address}`"),
+            fields: z.string().optional().describe('Response field mask.'),
+        },
+    });
+    registerGeneratedTool(registry, {
+        name: "cloudidentity_customers_userinvitations_list",
+        cud: "read",
+        description: "Retrieves a list of UserInvitation resources. **Note:** New consumer accounts with the customer's verified domain created within the previous 48 hours will not",
+        method: { id: "cloudidentity.customers.userinvitations.list", httpMethod: "GET", path: "v1/{+parent}/userinvitations", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["parent"] },
+        params: [{ "field": "parent", "api": "parent", "location": "path" }, { "field": "filter", "api": "filter", "location": "query" }, { "field": "orderBy", "api": "orderBy", "location": "query" }, { "field": "pageSize", "api": "pageSize", "location": "query" }, { "field": "pageToken", "api": "pageToken", "location": "query" }, { "field": "fields", "api": "fields", "location": "query" }],
+        hasBody: false,
+        shape: {
+            account: accountField(),
+            parent: z.string().describe("Required. The customer ID of the Google Workspace or Cloud Identity account the UserInvitation resources are associated with."),
+            filter: z.string().describe("Optional. A query string for filtering `UserInvitation` results by their current state, in the format: `\"state=='invited'\"`.").optional(),
+            orderBy: z.string().describe("Optional. The sort order of the list results. You can sort the results in descending order based on either email or last update timestamp but not both, using `order_by=\"email desc\"`. Currently, sortin").optional(),
+            pageSize: z.number().describe("Optional. The maximum number of UserInvitation resources to return. If unspecified, at most 100 resources will be returned. The maximum value is 200; values above 200 will be set to 200.").optional(),
+            pageToken: z.string().describe("Optional. A page token, received from a previous `ListUserInvitations` call. Provide this to retrieve the subsequent page. When paginating, all other parameters provided to `ListBooks` must match the ").optional(),
+            fields: z.string().optional().describe('Response field mask.'),
+        },
+    });
+    registerGeneratedTool(registry, {
+        name: "cloudidentity_customers_userinvitations_send",
+        cud: "create",
+        description: "Sends a UserInvitation to email. If the `UserInvitation` does not exist for this request and it is a valid request, the request creates a `UserInvitation`. **No",
+        method: { id: "cloudidentity.customers.userinvitations.send", httpMethod: "POST", path: "v1/{+name}:send", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"] },
+        params: [{ "field": "name", "api": "name", "location": "path" }, { "field": "fields", "api": "fields", "location": "query" }],
+        hasBody: true,
+        shape: {
+            account: accountField(),
+            name: z.string().describe("Required. `UserInvitation` name in the format `customers/{customer}/userinvitations/{user_email_address}`"),
+            body: coerceJson(z.record(z.string(), z.unknown())).describe("SendUserInvitationRequest JSON request body."),
+            fields: z.string().optional().describe('Response field mask.'),
+        },
+    });
+    registerGeneratedTool(registry, {
+        name: "cloudidentity_devices_cancel_wipe",
+        cud: "create",
+        description: "Cancels an unfinished device wipe. This operation can be used to cancel device wipe in the gap between the wipe operation returning success and the device being",
+        method: { id: "cloudidentity.devices.cancelWipe", httpMethod: "POST", path: "v1/{+name}:cancelWipe", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"] },
+        params: [{ "field": "name", "api": "name", "location": "path" }, { "field": "fields", "api": "fields", "location": "query" }],
+        hasBody: true,
+        shape: {
+            account: accountField(),
+            name: z.string().describe("Required. [Resource name](https://cloud.google.com/apis/design/resource_names) of the Device in format: `devices/{device}`, where device is the unique ID assigned to the Device."),
+            body: coerceJson(z.record(z.string(), z.unknown())).describe("GoogleAppsCloudidentityDevicesV1CancelWipeDeviceRequest JSON request body. Top-level fields: customer."),
+            fields: z.string().optional().describe('Response field mask.'),
+        },
+    });
+    registerGeneratedTool(registry, {
+        name: "cloudidentity_devices_create",
+        cud: "create",
+        description: "Creates a device. Only company-owned device may be created. **Note**: This method is available only to customers who have one of the following SKUs: Enterprise",
+        method: { id: "cloudidentity.devices.create", httpMethod: "POST", path: "v1/devices", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: [] },
+        params: [{ "field": "customer", "api": "customer", "location": "query" }, { "field": "fields", "api": "fields", "location": "query" }],
+        hasBody: true,
+        shape: {
+            account: accountField(),
+            customer: z.string().describe("Optional. [Resource name](https://cloud.google.com/apis/design/resource_names) of the customer. If you're using this API for your own organization, use `customers/my_customer` If you're using this API").optional(),
+            body: coerceJson(z.record(z.string(), z.unknown())).describe("GoogleAppsCloudidentityDevicesV1Device JSON request body. Top-level fields: androidSpecificAttributes, assetTag, basebandVersion, bootloaderVersion, brand, buildNumber, compromisedState, createTime, deviceId, deviceType, enabledDeveloperOptions, enabledUsbDebugging, +20 more."),
+            fields: z.string().optional().describe('Response field mask.'),
+        },
+    });
+    registerGeneratedTool(registry, {
+        name: "cloudidentity_devices_delete",
+        cud: "delete",
+        description: "Deletes the specified device.",
+        method: { id: "cloudidentity.devices.delete", httpMethod: "DELETE", path: "v1/{+name}", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"] },
+        params: [{ "field": "name", "api": "name", "location": "path" }, { "field": "customer", "api": "customer", "location": "query" }, { "field": "fields", "api": "fields", "location": "query" }],
+        hasBody: false,
+        shape: {
+            account: accountField(),
+            name: z.string().describe("Required. [Resource name](https://cloud.google.com/apis/design/resource_names) of the Device in format: `devices/{device}`, where device is the unique ID assigned to the Device."),
+            customer: z.string().describe("Optional. [Resource name](https://cloud.google.com/apis/design/resource_names) of the customer. If you're using this API for your own organization, use `customers/my_customer` If you're using this API").optional(),
+            fields: z.string().optional().describe('Response field mask.'),
+        },
+    });
+    registerGeneratedTool(registry, {
+        name: "cloudidentity_devices_device_users_approve",
+        cud: "create",
+        description: "Approves device to access user data.",
+        method: { id: "cloudidentity.devices.deviceUsers.approve", httpMethod: "POST", path: "v1/{+name}:approve", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"] },
+        params: [{ "field": "name", "api": "name", "location": "path" }, { "field": "fields", "api": "fields", "location": "query" }],
+        hasBody: true,
+        shape: {
+            account: accountField(),
+            name: z.string().describe("Required. [Resource name](https://cloud.google.com/apis/design/resource_names) of the Device in format: `devices/{device}/deviceUsers/{device_user}`, where device is the unique ID assigned to the Devi"),
+            body: coerceJson(z.record(z.string(), z.unknown())).describe("GoogleAppsCloudidentityDevicesV1ApproveDeviceUserRequest JSON request body. Top-level fields: customer."),
+            fields: z.string().optional().describe('Response field mask.'),
+        },
+    });
+    registerGeneratedTool(registry, {
+        name: "cloudidentity_devices_device_users_block",
+        cud: "create",
+        description: "Blocks device from accessing user data",
+        method: { id: "cloudidentity.devices.deviceUsers.block", httpMethod: "POST", path: "v1/{+name}:block", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"] },
+        params: [{ "field": "name", "api": "name", "location": "path" }, { "field": "fields", "api": "fields", "location": "query" }],
+        hasBody: true,
+        shape: {
+            account: accountField(),
+            name: z.string().describe("Required. [Resource name](https://cloud.google.com/apis/design/resource_names) of the Device in format: `devices/{device}/deviceUsers/{device_user}`, where device is the unique ID assigned to the Devi"),
+            body: coerceJson(z.record(z.string(), z.unknown())).describe("GoogleAppsCloudidentityDevicesV1BlockDeviceUserRequest JSON request body. Top-level fields: customer."),
+            fields: z.string().optional().describe('Response field mask.'),
+        },
+    });
+    registerGeneratedTool(registry, {
+        name: "cloudidentity_devices_device_users_cancel_wipe",
+        cud: "create",
+        description: "Cancels an unfinished user account wipe. This operation can be used to cancel device wipe in the gap between the wipe operation returning success and the device",
+        method: { id: "cloudidentity.devices.deviceUsers.cancelWipe", httpMethod: "POST", path: "v1/{+name}:cancelWipe", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"] },
+        params: [{ "field": "name", "api": "name", "location": "path" }, { "field": "fields", "api": "fields", "location": "query" }],
+        hasBody: true,
+        shape: {
+            account: accountField(),
+            name: z.string().describe("Required. [Resource name](https://cloud.google.com/apis/design/resource_names) of the Device in format: `devices/{device}/deviceUsers/{device_user}`, where device is the unique ID assigned to the Devi"),
+            body: coerceJson(z.record(z.string(), z.unknown())).describe("GoogleAppsCloudidentityDevicesV1CancelWipeDeviceUserRequest JSON request body. Top-level fields: customer."),
+            fields: z.string().optional().describe('Response field mask.'),
+        },
+    });
+    registerGeneratedTool(registry, {
+        name: "cloudidentity_devices_device_users_client_states_get",
+        cud: "read",
+        description: "Gets the client state for the device user",
+        method: { id: "cloudidentity.devices.deviceUsers.clientStates.get", httpMethod: "GET", path: "v1/{+name}", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"] },
+        params: [{ "field": "name", "api": "name", "location": "path" }, { "field": "customer", "api": "customer", "location": "query" }, { "field": "fields", "api": "fields", "location": "query" }],
+        hasBody: false,
+        shape: {
+            account: accountField(),
+            name: z.string().describe("Required. [Resource name](https://cloud.google.com/apis/design/resource_names) of the ClientState in format: `devices/{device}/deviceUsers/{device_user}/clientStates/{partner}`, where `device` is the "),
+            customer: z.string().describe("Optional. [Resource name](https://cloud.google.com/apis/design/resource_names) of the customer. If you're using this API for your own organization, use `customers/my_customer` If you're using this API").optional(),
+            fields: z.string().optional().describe('Response field mask.'),
+        },
+    });
+    registerGeneratedTool(registry, {
+        name: "cloudidentity_devices_device_users_client_states_list",
+        cud: "read",
+        description: "Lists the client states for the given search query.",
+        method: { id: "cloudidentity.devices.deviceUsers.clientStates.list", httpMethod: "GET", path: "v1/{+parent}/clientStates", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["parent"] },
+        params: [{ "field": "parent", "api": "parent", "location": "path" }, { "field": "customer", "api": "customer", "location": "query" }, { "field": "filter", "api": "filter", "location": "query" }, { "field": "orderBy", "api": "orderBy", "location": "query" }, { "field": "pageToken", "api": "pageToken", "location": "query" }, { "field": "fields", "api": "fields", "location": "query" }],
+        hasBody: false,
+        shape: {
+            account: accountField(),
+            parent: z.string().describe("Required. To list all ClientStates, set this to \"devices/-/deviceUsers/-\". To list all ClientStates owned by a DeviceUser, set this to the resource name of the DeviceUser. Format: devices/{device}/dev"),
+            customer: z.string().describe("Optional. [Resource name](https://cloud.google.com/apis/design/resource_names) of the customer. If you're using this API for your own organization, use `customers/my_customer` If you're using this API").optional(),
+            filter: z.string().describe("Optional. Additional restrictions when fetching list of client states.").optional(),
+            orderBy: z.string().describe("Optional. Order specification for client states in the response.").optional(),
+            pageToken: z.string().describe("Optional. A page token, received from a previous `ListClientStates` call. Provide this to retrieve the subsequent page. When paginating, all other parameters provided to `ListClientStates` must match ").optional(),
+            fields: z.string().optional().describe('Response field mask.'),
+        },
+    });
+    registerGeneratedTool(registry, {
+        name: "cloudidentity_devices_device_users_client_states_patch",
+        cud: "update",
+        description: "Updates the client state for the device user **Note**: This method is available only to customers who have one of the following SKUs: Enterprise Standard, Enter",
+        method: { id: "cloudidentity.devices.deviceUsers.clientStates.patch", httpMethod: "PATCH", path: "v1/{+name}", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"] },
+        params: [{ "field": "name", "api": "name", "location": "path" }, { "field": "customer", "api": "customer", "location": "query" }, { "field": "updateMask", "api": "updateMask", "location": "query" }, { "field": "fields", "api": "fields", "location": "query" }],
+        hasBody: true,
+        shape: {
+            account: accountField(),
+            name: z.string().describe("Output only. [Resource name](https://cloud.google.com/apis/design/resource_names) of the ClientState in format: `devices/{device}/deviceUsers/{device_user}/clientState/{partner}`, where partner corres"),
+            customer: z.string().describe("Optional. [Resource name](https://cloud.google.com/apis/design/resource_names) of the customer. If you're using this API for your own organization, use `customers/my_customer` If you're using this API").optional(),
+            updateMask: z.string().describe("Optional. Comma-separated list of fully qualified names of fields to be updated. If not specified, all updatable fields in ClientState are updated.").optional(),
+            body: coerceJson(z.record(z.string(), z.unknown())).describe("GoogleAppsCloudidentityDevicesV1ClientState JSON request body. Top-level fields: assetTags, complianceState, createTime, customId, etag, healthScore, keyValuePairs, lastUpdateTime, managed, name, ownerType, scoreReason."),
+            fields: z.string().optional().describe('Response field mask.'),
+        },
+    });
+    registerGeneratedTool(registry, {
+        name: "cloudidentity_devices_device_users_delete",
+        cud: "delete",
+        description: "Deletes the specified DeviceUser. This also revokes the user's access to device data.",
+        method: { id: "cloudidentity.devices.deviceUsers.delete", httpMethod: "DELETE", path: "v1/{+name}", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"] },
+        params: [{ "field": "name", "api": "name", "location": "path" }, { "field": "customer", "api": "customer", "location": "query" }, { "field": "fields", "api": "fields", "location": "query" }],
+        hasBody: false,
+        shape: {
+            account: accountField(),
+            name: z.string().describe("Required. [Resource name](https://cloud.google.com/apis/design/resource_names) of the Device in format: `devices/{device}/deviceUsers/{device_user}`, where device is the unique ID assigned to the Devi"),
+            customer: z.string().describe("Optional. [Resource name](https://cloud.google.com/apis/design/resource_names) of the customer. If you're using this API for your own organization, use `customers/my_customer` If you're using this API").optional(),
+            fields: z.string().optional().describe('Response field mask.'),
+        },
+    });
+    registerGeneratedTool(registry, {
+        name: "cloudidentity_devices_device_users_get",
+        cud: "read",
+        description: "Retrieves the specified DeviceUser",
+        method: { id: "cloudidentity.devices.deviceUsers.get", httpMethod: "GET", path: "v1/{+name}", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"] },
+        params: [{ "field": "name", "api": "name", "location": "path" }, { "field": "customer", "api": "customer", "location": "query" }, { "field": "fields", "api": "fields", "location": "query" }],
+        hasBody: false,
+        shape: {
+            account: accountField(),
+            name: z.string().describe("Required. [Resource name](https://cloud.google.com/apis/design/resource_names) of the Device in format: `devices/{device}/deviceUsers/{device_user}`, where device is the unique ID assigned to the Devi"),
+            customer: z.string().describe("Optional. [Resource name](https://cloud.google.com/apis/design/resource_names) of the customer. If you're using this API for your own organization, use `customers/my_customer` If you're using this API").optional(),
+            fields: z.string().optional().describe('Response field mask.'),
+        },
+    });
+    registerGeneratedTool(registry, {
+        name: "cloudidentity_devices_device_users_list",
+        cud: "read",
+        description: "Lists/Searches DeviceUsers.",
+        method: { id: "cloudidentity.devices.deviceUsers.list", httpMethod: "GET", path: "v1/{+parent}/deviceUsers", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["parent"] },
+        params: [{ "field": "parent", "api": "parent", "location": "path" }, { "field": "customer", "api": "customer", "location": "query" }, { "field": "filter", "api": "filter", "location": "query" }, { "field": "orderBy", "api": "orderBy", "location": "query" }, { "field": "pageSize", "api": "pageSize", "location": "query" }, { "field": "pageToken", "api": "pageToken", "location": "query" }, { "field": "fields", "api": "fields", "location": "query" }],
+        hasBody: false,
+        shape: {
+            account: accountField(),
+            parent: z.string().describe("Required. To list all DeviceUsers, set this to \"devices/-\". To list all DeviceUsers owned by a device, set this to the resource name of the device. Format: devices/{device}"),
+            customer: z.string().describe("Optional. [Resource name](https://cloud.google.com/apis/design/resource_names) of the customer. If you're using this API for your own organization, use `customers/my_customer` If you're using this API").optional(),
+            filter: z.string().describe("Optional. Additional restrictions when fetching list of devices. For a list of search fields, refer to [Mobile device search fields](https://developers.google.com/admin-sdk/directory/v1/search-operato").optional(),
+            orderBy: z.string().describe("Optional. Order specification for devices in the response.").optional(),
+            pageSize: z.number().describe("Optional. The maximum number of DeviceUsers to return. If unspecified, at most 5 DeviceUsers will be returned. The maximum value is 20; values above 20 will be coerced to 20.").optional(),
+            pageToken: z.string().describe("Optional. A page token, received from a previous `ListDeviceUsers` call. Provide this to retrieve the subsequent page. When paginating, all other parameters provided to `ListBooks` must match the call").optional(),
+            fields: z.string().optional().describe('Response field mask.'),
+        },
+    });
+    registerGeneratedTool(registry, {
+        name: "cloudidentity_devices_device_users_lookup",
+        cud: "read",
+        description: "Looks up resource names of the DeviceUsers associated with the caller's credentials, as well as the properties provided in the request. This method must be call",
+        method: { id: "cloudidentity.devices.deviceUsers.lookup", httpMethod: "GET", path: "v1/{+parent}:lookup", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["parent"] },
+        params: [{ "field": "parent", "api": "parent", "location": "path" }, { "field": "androidId", "api": "androidId", "location": "query" }, { "field": "iosDeviceId", "api": "iosDeviceId", "location": "query" }, { "field": "pageSize", "api": "pageSize", "location": "query" }, { "field": "pageToken", "api": "pageToken", "location": "query" }, { "field": "partner", "api": "partner", "location": "query" }, { "field": "rawResourceId", "api": "rawResourceId", "location": "query" }, { "field": "userId", "api": "userId", "location": "query" }, { "field": "fields", "api": "fields", "location": "query" }],
+        hasBody: false,
+        shape: {
+            account: accountField(),
+            parent: z.string().describe("Must be set to \"devices/-/deviceUsers\" to search across all DeviceUser belonging to the user."),
+            androidId: z.string().describe("Android Id returned by [Settings.Secure#ANDROID_ID](https://developer.android.com/reference/android/provider/Settings.Secure.html#ANDROID_ID).").optional(),
+            iosDeviceId: z.string().describe("Optional. The partner-specified device identifier assigned to the iOS device that initiated the Lookup API call. This string must match the value of the iosDeviceId key in the app config dictionary pr").optional(),
+            pageSize: z.number().describe("The maximum number of DeviceUsers to return. If unspecified, at most 20 DeviceUsers will be returned. The maximum value is 20; values above 20 will be coerced to 20.").optional(),
+            pageToken: z.string().describe("A page token, received from a previous `LookupDeviceUsers` call. Provide this to retrieve the subsequent page. When paginating, all other parameters provided to `LookupDeviceUsers` must match the call").optional(),
+            partner: z.string().describe("Optional. The partner ID of the calling iOS app. This string must match the value of the partner key within the app configuration dictionary provided to Google Workspace apps.").optional(),
+            rawResourceId: z.string().describe("Raw Resource Id used by Google Endpoint Verification. If the user is enrolled into Google Endpoint Verification, this id will be saved as the 'device_resource_id' field in the following platform depen").optional(),
+            userId: z.string().describe("The user whose DeviceUser's resource name will be fetched. Must be set to 'me' to fetch the DeviceUser's resource name for the calling user.").optional(),
+            fields: z.string().optional().describe('Response field mask.'),
+        },
+    });
+    registerGeneratedTool(registry, {
+        name: "cloudidentity_devices_device_users_wipe",
+        cud: "create",
+        description: "Wipes the user's account on a device. Other data on the device that is not associated with the user's work account is not affected. For example, if a Gmail app",
+        method: { id: "cloudidentity.devices.deviceUsers.wipe", httpMethod: "POST", path: "v1/{+name}:wipe", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"] },
+        params: [{ "field": "name", "api": "name", "location": "path" }, { "field": "fields", "api": "fields", "location": "query" }],
+        hasBody: true,
+        shape: {
+            account: accountField(),
+            name: z.string().describe("Required. [Resource name](https://cloud.google.com/apis/design/resource_names) of the Device in format: `devices/{device}/deviceUsers/{device_user}`, where device is the unique ID assigned to the Devi"),
+            body: coerceJson(z.record(z.string(), z.unknown())).describe("GoogleAppsCloudidentityDevicesV1WipeDeviceUserRequest JSON request body. Top-level fields: customer."),
+            fields: z.string().optional().describe('Response field mask.'),
+        },
+    });
+    registerGeneratedTool(registry, {
+        name: "cloudidentity_devices_get",
+        cud: "read",
+        description: "Retrieves the specified device.",
+        method: { id: "cloudidentity.devices.get", httpMethod: "GET", path: "v1/{+name}", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"] },
+        params: [{ "field": "name", "api": "name", "location": "path" }, { "field": "customer", "api": "customer", "location": "query" }, { "field": "fields", "api": "fields", "location": "query" }],
+        hasBody: false,
+        shape: {
+            account: accountField(),
+            name: z.string().describe("Required. [Resource name](https://cloud.google.com/apis/design/resource_names) of the Device in the format: `devices/{device}`, where device is the unique ID assigned to the Device."),
+            customer: z.string().describe("Optional. [Resource name](https://cloud.google.com/apis/design/resource_names) of the Customer in the format: `customers/{customer}`, where customer is the customer to whom the device belongs. If you'").optional(),
+            fields: z.string().optional().describe('Response field mask.'),
+        },
+    });
+    registerGeneratedTool(registry, {
+        name: "cloudidentity_devices_list",
+        cud: "read",
+        description: "Lists/Searches devices.",
+        method: { id: "cloudidentity.devices.list", httpMethod: "GET", path: "v1/devices", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: [] },
+        params: [{ "field": "customer", "api": "customer", "location": "query" }, { "field": "filter", "api": "filter", "location": "query" }, { "field": "orderBy", "api": "orderBy", "location": "query" }, { "field": "pageSize", "api": "pageSize", "location": "query" }, { "field": "pageToken", "api": "pageToken", "location": "query" }, { "field": "view", "api": "view", "location": "query" }, { "field": "fields", "api": "fields", "location": "query" }],
+        hasBody: false,
+        shape: {
+            account: accountField(),
+            customer: z.string().describe("Optional. [Resource name](https://cloud.google.com/apis/design/resource_names) of the customer in the format: `customers/{customer}`, where customer is the customer to whom the device belongs. If you'").optional(),
+            filter: z.string().describe("Optional. Additional restrictions when fetching list of devices. For a list of search fields, refer to [Mobile device search fields](https://developers.google.com/admin-sdk/directory/v1/search-operato").optional(),
+            orderBy: z.string().describe("Optional. Order specification for devices in the response. Only one of the following field names may be used to specify the order: `create_time`, `last_sync_time`, `model`, `os_version`, `device_type`").optional(),
+            pageSize: z.number().describe("Optional. The maximum number of Devices to return. If unspecified, at most 20 Devices will be returned. The maximum value is 100; values above 100 will be coerced to 100.").optional(),
+            pageToken: z.string().describe("Optional. A page token, received from a previous `ListDevices` call. Provide this to retrieve the subsequent page. When paginating, all other parameters provided to `ListDevices` must match the call t").optional(),
+            view: z.enum(["VIEW_UNSPECIFIED", "COMPANY_INVENTORY", "USER_ASSIGNED_DEVICES"]).describe("Optional. The view to use for the List request.").optional(),
+            fields: z.string().optional().describe('Response field mask.'),
+        },
+    });
+    registerGeneratedTool(registry, {
+        name: "cloudidentity_devices_wipe",
+        cud: "create",
+        description: "Wipes all data on the specified device.",
+        method: { id: "cloudidentity.devices.wipe", httpMethod: "POST", path: "v1/{+name}:wipe", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"] },
+        params: [{ "field": "name", "api": "name", "location": "path" }, { "field": "fields", "api": "fields", "location": "query" }],
+        hasBody: true,
+        shape: {
+            account: accountField(),
+            name: z.string().describe("Required. [Resource name](https://cloud.google.com/apis/design/resource_names) of the Device in format: `devices/{device}/deviceUsers/{device_user}`, where device is the unique ID assigned to the Devi"),
+            body: coerceJson(z.record(z.string(), z.unknown())).describe("GoogleAppsCloudidentityDevicesV1WipeDeviceRequest JSON request body. Top-level fields: customer, removeResetLock."),
+            fields: z.string().optional().describe('Response field mask.'),
+        },
+    });
+    registerGeneratedTool(registry, {
+        name: "cloudidentity_groups_create",
+        cud: "create",
+        description: "Creates a Group.",
+        method: { id: "cloudidentity.groups.create", httpMethod: "POST", path: "v1/groups", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: [] },
+        params: [{ "field": "initialGroupConfig", "api": "initialGroupConfig", "location": "query" }, { "field": "fields", "api": "fields", "location": "query" }],
+        hasBody: true,
+        shape: {
+            account: accountField(),
+            initialGroupConfig: z.enum(["INITIAL_GROUP_CONFIG_UNSPECIFIED", "WITH_INITIAL_OWNER", "EMPTY"]).describe("Optional. The initial configuration option for the `Group`.").optional(),
+            body: coerceJson(z.record(z.string(), z.unknown())).describe("Group JSON request body. Top-level fields: additionalGroupKeys, createTime, description, displayName, dynamicGroupMetadata, groupKey, labels, name, parent, updateTime."),
+            fields: z.string().optional().describe('Response field mask.'),
+        },
+    });
+    registerGeneratedTool(registry, {
+        name: "cloudidentity_groups_delete",
+        cud: "delete",
+        description: "Deletes a `Group`.",
+        method: { id: "cloudidentity.groups.delete", httpMethod: "DELETE", path: "v1/{+name}", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"] },
+        params: [{ "field": "name", "api": "name", "location": "path" }, { "field": "fields", "api": "fields", "location": "query" }],
+        hasBody: false,
+        shape: {
+            account: accountField(),
+            name: z.string().describe("Required. The [resource name](https://cloud.google.com/apis/design/resource_names) of the `Group` to retrieve. Must be of the form `groups/{group}`."),
+            fields: z.string().optional().describe('Response field mask.'),
+        },
+    });
+    registerGeneratedTool(registry, {
+        name: "cloudidentity_groups_get",
+        cud: "read",
+        description: "Retrieves a `Group`.",
+        method: { id: "cloudidentity.groups.get", httpMethod: "GET", path: "v1/{+name}", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"] },
+        params: [{ "field": "name", "api": "name", "location": "path" }, { "field": "fields", "api": "fields", "location": "query" }],
+        hasBody: false,
+        shape: {
+            account: accountField(),
+            name: z.string().describe("Required. The [resource name](https://cloud.google.com/apis/design/resource_names) of the `Group` to retrieve. Must be of the form `groups/{group}`."),
+            fields: z.string().optional().describe('Response field mask.'),
+        },
+    });
+    registerGeneratedTool(registry, {
+        name: "cloudidentity_groups_get_security_settings",
+        cud: "read",
+        description: "Get Security Settings",
+        method: { id: "cloudidentity.groups.getSecuritySettings", httpMethod: "GET", path: "v1/{+name}", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"] },
+        params: [{ "field": "name", "api": "name", "location": "path" }, { "field": "readMask", "api": "readMask", "location": "query" }, { "field": "fields", "api": "fields", "location": "query" }],
+        hasBody: false,
+        shape: {
+            account: accountField(),
+            name: z.string().describe("Required. The security settings to retrieve. Format: `groups/{group_id}/securitySettings`"),
+            readMask: z.string().describe("Field-level read mask of which fields to return. \"*\" returns all fields. If not specified, all fields will be returned. May only contain the following field: `member_restriction`.").optional(),
+            fields: z.string().optional().describe('Response field mask.'),
+        },
+    });
+    registerGeneratedTool(registry, {
+        name: "cloudidentity_groups_list",
+        cud: "read",
+        description: "Lists the `Group` resources under a customer or namespace.",
+        method: { id: "cloudidentity.groups.list", httpMethod: "GET", path: "v1/groups", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: [] },
+        params: [{ "field": "pageSize", "api": "pageSize", "location": "query" }, { "field": "pageToken", "api": "pageToken", "location": "query" }, { "field": "parent", "api": "parent", "location": "query" }, { "field": "view", "api": "view", "location": "query" }, { "field": "fields", "api": "fields", "location": "query" }],
+        hasBody: false,
+        shape: {
+            account: accountField(),
+            pageSize: z.number().describe("The maximum number of results to return. Note that the number of results returned may be less than this value even if there are more available results. To fetch all results, clients must continue call").optional(),
+            pageToken: z.string().describe("The `next_page_token` value returned from a previous list request, if any.").optional(),
+            parent: z.string().describe("Required. The parent resource under which to list all `Group` resources. Must be of the form `identitysources/{identity_source}` for external- identity-mapped groups or `customers/{customer_id}` for G").optional(),
+            view: z.enum(["VIEW_UNSPECIFIED", "BASIC", "FULL"]).describe("The level of detail to be returned. If unspecified, defaults to `View.BASIC`.").optional(),
+            fields: z.string().optional().describe('Response field mask.'),
+        },
+    });
+    registerGeneratedTool(registry, {
+        name: "cloudidentity_groups_lookup",
+        cud: "read",
+        description: "Looks up the [resource name](https://cloud.google.com/apis/design/resource_names) of a `Group` by its `EntityKey`.",
+        method: { id: "cloudidentity.groups.lookup", httpMethod: "GET", path: "v1/groups:lookup", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: [] },
+        params: [{ "field": "groupKey.id", "api": "groupKey.id", "location": "query" }, { "field": "groupKey.namespace", "api": "groupKey.namespace", "location": "query" }, { "field": "fields", "api": "fields", "location": "query" }],
+        hasBody: false,
+        shape: {
+            account: accountField(),
+            "groupKey.id": z.string().describe("The ID of the entity. For Google-managed entities, the `id` should be the email address of an existing group or user. Email addresses need to adhere to [name guidelines for users and groups](https://s").optional(),
+            "groupKey.namespace": z.string().describe("The namespace in which the entity exists. If not specified, the `EntityKey` represents a Google-managed entity such as a Google user or a Google Group. If specified, the `EntityKey` represents an exte").optional(),
+            fields: z.string().optional().describe('Response field mask.'),
+        },
+    });
+    registerGeneratedTool(registry, {
+        name: "cloudidentity_groups_memberships_check_transitive_membership",
+        cud: "read",
+        description: "Check a potential member for membership in a group. **Note:** This feature is only available to Google Workspace Enterprise Standard, Enterprise Plus, and Enter",
+        method: { id: "cloudidentity.groups.memberships.checkTransitiveMembership", httpMethod: "GET", path: "v1/{+parent}/memberships:checkTransitiveMembership", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["parent"] },
+        params: [{ "field": "parent", "api": "parent", "location": "path" }, { "field": "query", "api": "query", "location": "query" }, { "field": "fields", "api": "fields", "location": "query" }],
+        hasBody: false,
+        shape: {
+            account: accountField(),
+            parent: z.string().describe("[Resource name](https://cloud.google.com/apis/design/resource_names) of the group to check the transitive membership in. Format: `groups/{group}`, where `group` is the unique id assigned to the Group "),
+            query: z.string().describe("Required. A CEL expression that MUST include member specification. This is a `required` field. Certain groups are uniquely identified by both a 'member_key_id' and a 'member_key_namespace', which requ").optional(),
+            fields: z.string().optional().describe('Response field mask.'),
+        },
+    });
+    registerGeneratedTool(registry, {
+        name: "cloudidentity_groups_memberships_create",
+        cud: "create",
+        description: "Creates a `Membership`.",
+        method: { id: "cloudidentity.groups.memberships.create", httpMethod: "POST", path: "v1/{+parent}/memberships", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["parent"] },
+        params: [{ "field": "parent", "api": "parent", "location": "path" }, { "field": "fields", "api": "fields", "location": "query" }],
+        hasBody: true,
+        shape: {
+            account: accountField(),
+            parent: z.string().describe("Required. The parent `Group` resource under which to create the `Membership`. Must be of the form `groups/{group}`."),
+            body: coerceJson(z.record(z.string(), z.unknown())).describe("Membership JSON request body. Top-level fields: createTime, deliverySetting, name, preferredMemberKey, roles, type, updateTime."),
+            fields: z.string().optional().describe('Response field mask.'),
+        },
+    });
+    registerGeneratedTool(registry, {
+        name: "cloudidentity_groups_memberships_delete",
+        cud: "delete",
+        description: "Deletes a `Membership`.",
+        method: { id: "cloudidentity.groups.memberships.delete", httpMethod: "DELETE", path: "v1/{+name}", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"] },
+        params: [{ "field": "name", "api": "name", "location": "path" }, { "field": "fields", "api": "fields", "location": "query" }],
+        hasBody: false,
+        shape: {
+            account: accountField(),
+            name: z.string().describe("Required. The [resource name](https://cloud.google.com/apis/design/resource_names) of the `Membership` to delete. Must be of the form `groups/{group}/memberships/{membership}`"),
+            fields: z.string().optional().describe('Response field mask.'),
+        },
+    });
+    registerGeneratedTool(registry, {
+        name: "cloudidentity_groups_memberships_get",
+        cud: "read",
+        description: "Retrieves a `Membership`.",
+        method: { id: "cloudidentity.groups.memberships.get", httpMethod: "GET", path: "v1/{+name}", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"] },
+        params: [{ "field": "name", "api": "name", "location": "path" }, { "field": "fields", "api": "fields", "location": "query" }],
+        hasBody: false,
+        shape: {
+            account: accountField(),
+            name: z.string().describe("Required. The [resource name](https://cloud.google.com/apis/design/resource_names) of the `Membership` to retrieve. Must be of the form `groups/{group}/memberships/{membership}`."),
+            fields: z.string().optional().describe('Response field mask.'),
+        },
+    });
+    registerGeneratedTool(registry, {
+        name: "cloudidentity_groups_memberships_get_membership_graph",
+        cud: "read",
+        description: "Get a membership graph of just a member or both a member and a group. **Note:** This feature is only available to Google Workspace Enterprise Standard, Enterpri",
+        method: { id: "cloudidentity.groups.memberships.getMembershipGraph", httpMethod: "GET", path: "v1/{+parent}/memberships:getMembershipGraph", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["parent"] },
+        params: [{ "field": "parent", "api": "parent", "location": "path" }, { "field": "query", "api": "query", "location": "query" }, { "field": "fields", "api": "fields", "location": "query" }],
+        hasBody: false,
+        shape: {
+            account: accountField(),
+            parent: z.string().describe("Required. [Resource name](https://cloud.google.com/apis/design/resource_names) of the group to search transitive memberships in. Format: `groups/{group}`, where `group` is the unique ID assigned to th"),
+            query: z.string().describe("Required. A CEL expression that MUST include member specification AND label(s). Certain groups are uniquely identified by both a 'member_key_id' and a 'member_key_namespace', which requires an additio").optional(),
+            fields: z.string().optional().describe('Response field mask.'),
+        },
+    });
+    registerGeneratedTool(registry, {
+        name: "cloudidentity_groups_memberships_list",
+        cud: "read",
+        description: "Lists the `Membership`s within a `Group`.",
+        method: { id: "cloudidentity.groups.memberships.list", httpMethod: "GET", path: "v1/{+parent}/memberships", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["parent"] },
+        params: [{ "field": "parent", "api": "parent", "location": "path" }, { "field": "pageSize", "api": "pageSize", "location": "query" }, { "field": "pageToken", "api": "pageToken", "location": "query" }, { "field": "view", "api": "view", "location": "query" }, { "field": "fields", "api": "fields", "location": "query" }],
+        hasBody: false,
+        shape: {
+            account: accountField(),
+            parent: z.string().describe("Required. The parent `Group` resource under which to lookup the `Membership` name. Must be of the form `groups/{group}`."),
+            pageSize: z.number().describe("The maximum number of results to return. Note that the number of results returned may be less than this value even if there are more available results. To fetch all results, clients must continue call").optional(),
+            pageToken: z.string().describe("The `next_page_token` value returned from a previous search request, if any.").optional(),
+            view: z.enum(["VIEW_UNSPECIFIED", "BASIC", "FULL"]).describe("The level of detail to be returned. If unspecified, defaults to `View.BASIC`.").optional(),
+            fields: z.string().optional().describe('Response field mask.'),
+        },
+    });
+    registerGeneratedTool(registry, {
+        name: "cloudidentity_groups_memberships_lookup",
+        cud: "read",
+        description: "Looks up the [resource name](https://cloud.google.com/apis/design/resource_names) of a `Membership` by its `EntityKey`.",
+        method: { id: "cloudidentity.groups.memberships.lookup", httpMethod: "GET", path: "v1/{+parent}/memberships:lookup", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["parent"] },
+        params: [{ "field": "parent", "api": "parent", "location": "path" }, { "field": "memberKey.id", "api": "memberKey.id", "location": "query" }, { "field": "memberKey.namespace", "api": "memberKey.namespace", "location": "query" }, { "field": "fields", "api": "fields", "location": "query" }],
+        hasBody: false,
+        shape: {
+            account: accountField(),
+            parent: z.string().describe("Required. The parent `Group` resource under which to lookup the `Membership` name. Must be of the form `groups/{group}`."),
+            "memberKey.id": z.string().describe("The ID of the entity. For Google-managed entities, the `id` should be the email address of an existing group or user. Email addresses need to adhere to [name guidelines for users and groups](https://s").optional(),
+            "memberKey.namespace": z.string().describe("The namespace in which the entity exists. If not specified, the `EntityKey` represents a Google-managed entity such as a Google user or a Google Group. If specified, the `EntityKey` represents an exte").optional(),
+            fields: z.string().optional().describe('Response field mask.'),
+        },
+    });
+    registerGeneratedTool(registry, {
+        name: "cloudidentity_groups_memberships_modify_membership_roles",
+        cud: "update",
+        description: "Modifies the `MembershipRole`s of a `Membership`.",
+        method: { id: "cloudidentity.groups.memberships.modifyMembershipRoles", httpMethod: "POST", path: "v1/{+name}:modifyMembershipRoles", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"] },
+        params: [{ "field": "name", "api": "name", "location": "path" }, { "field": "fields", "api": "fields", "location": "query" }],
+        hasBody: true,
+        shape: {
+            account: accountField(),
+            name: z.string().describe("Required. The [resource name](https://cloud.google.com/apis/design/resource_names) of the `Membership` whose roles are to be modified. Must be of the form `groups/{group}/memberships/{membership}`."),
+            body: coerceJson(z.record(z.string(), z.unknown())).describe("ModifyMembershipRolesRequest JSON request body. Top-level fields: addRoles, removeRoles, updateRolesParams."),
+            fields: z.string().optional().describe('Response field mask.'),
+        },
+    });
+    registerGeneratedTool(registry, {
+        name: "cloudidentity_groups_memberships_search_direct_groups",
+        cud: "read",
+        description: "Searches direct groups of a member. Groups for which the actor does not have the permission to view memberships are silently filtered out.",
+        method: { id: "cloudidentity.groups.memberships.searchDirectGroups", httpMethod: "GET", path: "v1/{+parent}/memberships:searchDirectGroups", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["parent"] },
+        params: [{ "field": "parent", "api": "parent", "location": "path" }, { "field": "orderBy", "api": "orderBy", "location": "query" }, { "field": "pageSize", "api": "pageSize", "location": "query" }, { "field": "pageToken", "api": "pageToken", "location": "query" }, { "field": "query", "api": "query", "location": "query" }, { "field": "fields", "api": "fields", "location": "query" }],
+        hasBody: false,
+        shape: {
+            account: accountField(),
+            parent: z.string().describe("[Resource name](https://cloud.google.com/apis/design/resource_names) of the group to search transitive memberships in. Format: groups/{group_id}, where group_id is always '-' as this API will search a"),
+            orderBy: z.string().describe("The ordering of membership relation for the display name or email in the response. The syntax for this field can be found at https://cloud.google.com/apis/design/design_patterns#sorting_order. Example").optional(),
+            pageSize: z.number().describe("The default page size is 200 (max 1000).").optional(),
+            pageToken: z.string().describe("The `next_page_token` value returned from a previous list request, if any").optional(),
+            query: z.string().describe("Required. A CEL expression that MUST include member specification AND label(s). Users can search on label attributes of groups. CONTAINS match ('in') is supported on labels. Identity-mapped groups are").optional(),
+            fields: z.string().optional().describe('Response field mask.'),
+        },
+    });
+    registerGeneratedTool(registry, {
+        name: "cloudidentity_groups_memberships_search_transitive_groups",
+        cud: "read",
+        description: "Search transitive groups of a member. **Note:** This feature is only available to Google Workspace Enterprise Standard, Enterprise Plus, and Enterprise for Educ",
+        method: { id: "cloudidentity.groups.memberships.searchTransitiveGroups", httpMethod: "GET", path: "v1/{+parent}/memberships:searchTransitiveGroups", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["parent"] },
+        params: [{ "field": "parent", "api": "parent", "location": "path" }, { "field": "pageSize", "api": "pageSize", "location": "query" }, { "field": "pageToken", "api": "pageToken", "location": "query" }, { "field": "query", "api": "query", "location": "query" }, { "field": "fields", "api": "fields", "location": "query" }],
+        hasBody: false,
+        shape: {
+            account: accountField(),
+            parent: z.string().describe("[Resource name](https://cloud.google.com/apis/design/resource_names) of the group to search transitive memberships in. Format: `groups/{group}`, where `group` is always '-' as this API will search acr"),
+            pageSize: z.number().describe("The default page size is 200 (max 1000).").optional(),
+            pageToken: z.string().describe("The `next_page_token` value returned from a previous list request, if any.").optional(),
+            query: z.string().describe("Required. A CEL expression that MUST include member specification AND label(s). This is a `required` field. Users can search on label attributes of groups. CONTAINS match ('in') is supported on labels").optional(),
+            fields: z.string().optional().describe('Response field mask.'),
+        },
+    });
+    registerGeneratedTool(registry, {
+        name: "cloudidentity_groups_memberships_search_transitive_memberships",
+        cud: "read",
+        description: "Search transitive memberships of a group. **Note:** This feature is only available to Google Workspace Enterprise Standard, Enterprise Plus, and Enterprise for",
+        method: { id: "cloudidentity.groups.memberships.searchTransitiveMemberships", httpMethod: "GET", path: "v1/{+parent}/memberships:searchTransitiveMemberships", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["parent"] },
+        params: [{ "field": "parent", "api": "parent", "location": "path" }, { "field": "pageSize", "api": "pageSize", "location": "query" }, { "field": "pageToken", "api": "pageToken", "location": "query" }, { "field": "fields", "api": "fields", "location": "query" }],
+        hasBody: false,
+        shape: {
+            account: accountField(),
+            parent: z.string().describe("[Resource name](https://cloud.google.com/apis/design/resource_names) of the group to search transitive memberships in. Format: `groups/{group}`, where `group` is the unique ID assigned to the Group."),
+            pageSize: z.number().describe("The default page size is 200 (max 1000).").optional(),
+            pageToken: z.string().describe("The `next_page_token` value returned from a previous list request, if any.").optional(),
+            fields: z.string().optional().describe('Response field mask.'),
+        },
+    });
+    registerGeneratedTool(registry, {
+        name: "cloudidentity_groups_patch",
+        cud: "update",
+        description: "Updates a `Group`.",
+        method: { id: "cloudidentity.groups.patch", httpMethod: "PATCH", path: "v1/{+name}", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"] },
+        params: [{ "field": "name", "api": "name", "location": "path" }, { "field": "updateMask", "api": "updateMask", "location": "query" }, { "field": "fields", "api": "fields", "location": "query" }],
+        hasBody: true,
+        shape: {
+            account: accountField(),
+            name: z.string().describe("Output only. The [resource name](https://cloud.google.com/apis/design/resource_names) of the `Group`. Shall be of the form `groups/{group}`."),
+            updateMask: z.string().describe("Required. The names of fields to update. May only contain the following field names: `display_name`, `description`, `labels`.").optional(),
+            body: coerceJson(z.record(z.string(), z.unknown())).describe("Group JSON request body. Top-level fields: additionalGroupKeys, createTime, description, displayName, dynamicGroupMetadata, groupKey, labels, name, parent, updateTime."),
+            fields: z.string().optional().describe('Response field mask.'),
+        },
+    });
+    registerGeneratedTool(registry, {
+        name: "cloudidentity_groups_search",
+        cud: "read",
+        description: "Searches for `Group` resources matching a specified query.",
+        method: { id: "cloudidentity.groups.search", httpMethod: "GET", path: "v1/groups:search", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: [] },
+        params: [{ "field": "pageSize", "api": "pageSize", "location": "query" }, { "field": "pageToken", "api": "pageToken", "location": "query" }, { "field": "query", "api": "query", "location": "query" }, { "field": "view", "api": "view", "location": "query" }, { "field": "fields", "api": "fields", "location": "query" }],
+        hasBody: false,
+        shape: {
+            account: accountField(),
+            pageSize: z.number().describe("The maximum number of results to return. Note that the number of results returned may be less than this value even if there are more available results. To fetch all results, clients must continue call").optional(),
+            pageToken: z.string().describe("The `next_page_token` value returned from a previous search request, if any.").optional(),
+            query: z.string().describe("Required. The search query. * Must be specified in [Common Expression Language](https://opensource.google/projects/cel). * Must contain equality operators on the parent, e.g. `parent == 'customers/{cu").optional(),
+            view: z.enum(["VIEW_UNSPECIFIED", "BASIC", "FULL"]).describe("The level of detail to be returned. If unspecified, defaults to `View.BASIC`.").optional(),
+            fields: z.string().optional().describe('Response field mask.'),
+        },
+    });
+    registerGeneratedTool(registry, {
+        name: "cloudidentity_groups_update_security_settings",
+        cud: "update",
+        description: "Update Security Settings",
+        method: { id: "cloudidentity.groups.updateSecuritySettings", httpMethod: "PATCH", path: "v1/{+name}", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"] },
+        params: [{ "field": "name", "api": "name", "location": "path" }, { "field": "updateMask", "api": "updateMask", "location": "query" }, { "field": "fields", "api": "fields", "location": "query" }],
+        hasBody: true,
+        shape: {
+            account: accountField(),
+            name: z.string().describe("Output only. The resource name of the security settings. Shall be of the form `groups/{group_id}/securitySettings`."),
+            updateMask: z.string().describe("Required. The fully-qualified names of fields to update. May only contain the following field: `member_restriction.query`.").optional(),
+            body: coerceJson(z.record(z.string(), z.unknown())).describe("SecuritySettings JSON request body. Top-level fields: memberRestriction, name."),
+            fields: z.string().optional().describe('Response field mask.'),
+        },
+    });
+    registerGeneratedTool(registry, {
+        name: "cloudidentity_inbound_oidc_sso_profiles_create",
+        cud: "create",
+        description: "Creates an InboundOidcSsoProfile for a customer. When the target customer has enabled [Multi-party approval for sensitive actions](https://support.google.com/a/",
+        method: { id: "cloudidentity.inboundOidcSsoProfiles.create", httpMethod: "POST", path: "v1/inboundOidcSsoProfiles", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: [] },
+        params: [{ "field": "fields", "api": "fields", "location": "query" }],
+        hasBody: true,
+        shape: {
+            account: accountField(),
+            body: coerceJson(z.record(z.string(), z.unknown())).describe("InboundOidcSsoProfile JSON request body. Top-level fields: customer, displayName, idpConfig, name, rpConfig."),
+            fields: z.string().optional().describe('Response field mask.'),
+        },
+    });
+    registerGeneratedTool(registry, {
+        name: "cloudidentity_inbound_oidc_sso_profiles_delete",
+        cud: "delete",
+        description: "Deletes an InboundOidcSsoProfile.",
+        method: { id: "cloudidentity.inboundOidcSsoProfiles.delete", httpMethod: "DELETE", path: "v1/{+name}", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"] },
+        params: [{ "field": "name", "api": "name", "location": "path" }, { "field": "fields", "api": "fields", "location": "query" }],
+        hasBody: false,
+        shape: {
+            account: accountField(),
+            name: z.string().describe("Required. The [resource name](https://cloud.google.com/apis/design/resource_names) of the InboundOidcSsoProfile to delete. Format: `inboundOidcSsoProfiles/{sso_profile_id}`"),
+            fields: z.string().optional().describe('Response field mask.'),
+        },
+    });
+    registerGeneratedTool(registry, {
+        name: "cloudidentity_inbound_oidc_sso_profiles_get",
+        cud: "read",
+        description: "Gets an InboundOidcSsoProfile.",
+        method: { id: "cloudidentity.inboundOidcSsoProfiles.get", httpMethod: "GET", path: "v1/{+name}", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"] },
+        params: [{ "field": "name", "api": "name", "location": "path" }, { "field": "fields", "api": "fields", "location": "query" }],
+        hasBody: false,
+        shape: {
+            account: accountField(),
+            name: z.string().describe("Required. The [resource name](https://cloud.google.com/apis/design/resource_names) of the InboundOidcSsoProfile to get. Format: `inboundOidcSsoProfiles/{sso_profile_id}`"),
+            fields: z.string().optional().describe('Response field mask.'),
+        },
+    });
+    registerGeneratedTool(registry, {
+        name: "cloudidentity_inbound_oidc_sso_profiles_list",
+        cud: "read",
+        description: "Lists InboundOidcSsoProfile objects for a Google enterprise customer.",
+        method: { id: "cloudidentity.inboundOidcSsoProfiles.list", httpMethod: "GET", path: "v1/inboundOidcSsoProfiles", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: [] },
+        params: [{ "field": "filter", "api": "filter", "location": "query" }, { "field": "pageSize", "api": "pageSize", "location": "query" }, { "field": "pageToken", "api": "pageToken", "location": "query" }, { "field": "fields", "api": "fields", "location": "query" }],
+        hasBody: false,
+        shape: {
+            account: accountField(),
+            filter: z.string().describe("A [Common Expression Language](https://github.com/google/cel-spec) expression to filter the results. The only supported filter is filtering by customer. For example: `customer==\"customers/C0123abc\"`. ").optional(),
+            pageSize: z.number().describe("The maximum number of InboundOidcSsoProfiles to return. The service may return fewer than this value. If omitted (or defaulted to zero) the server will use a sensible default. This default may change ").optional(),
+            pageToken: z.string().describe("A page token, received from a previous `ListInboundOidcSsoProfiles` call. Provide this to retrieve the subsequent page. When paginating, all other parameters provided to `ListInboundOidcSsoProfiles` m").optional(),
+            fields: z.string().optional().describe('Response field mask.'),
+        },
+    });
+    registerGeneratedTool(registry, {
+        name: "cloudidentity_inbound_oidc_sso_profiles_patch",
+        cud: "update",
+        description: "Updates an InboundOidcSsoProfile. When the target customer has enabled [Multi-party approval for sensitive actions](https://support.google.com/a/answer/13790448",
+        method: { id: "cloudidentity.inboundOidcSsoProfiles.patch", httpMethod: "PATCH", path: "v1/{+name}", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"] },
+        params: [{ "field": "name", "api": "name", "location": "path" }, { "field": "updateMask", "api": "updateMask", "location": "query" }, { "field": "fields", "api": "fields", "location": "query" }],
+        hasBody: true,
+        shape: {
+            account: accountField(),
+            name: z.string().describe("Output only. [Resource name](https://cloud.google.com/apis/design/resource_names) of the OIDC SSO profile."),
+            updateMask: z.string().describe("Required. The list of fields to be updated.").optional(),
+            body: coerceJson(z.record(z.string(), z.unknown())).describe("InboundOidcSsoProfile JSON request body. Top-level fields: customer, displayName, idpConfig, name, rpConfig."),
+            fields: z.string().optional().describe('Response field mask.'),
+        },
+    });
+    registerGeneratedTool(registry, {
+        name: "cloudidentity_inbound_saml_sso_profiles_create",
+        cud: "create",
+        description: "Creates an InboundSamlSsoProfile for a customer. When the target customer has enabled [Multi-party approval for sensitive actions](https://support.google.com/a/",
+        method: { id: "cloudidentity.inboundSamlSsoProfiles.create", httpMethod: "POST", path: "v1/inboundSamlSsoProfiles", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: [] },
+        params: [{ "field": "fields", "api": "fields", "location": "query" }],
+        hasBody: true,
+        shape: {
+            account: accountField(),
+            body: coerceJson(z.record(z.string(), z.unknown())).describe("InboundSamlSsoProfile JSON request body. Top-level fields: customer, displayName, idpConfig, name, spConfig."),
+            fields: z.string().optional().describe('Response field mask.'),
+        },
+    });
+    registerGeneratedTool(registry, {
+        name: "cloudidentity_inbound_saml_sso_profiles_delete",
+        cud: "delete",
+        description: "Deletes an InboundSamlSsoProfile.",
+        method: { id: "cloudidentity.inboundSamlSsoProfiles.delete", httpMethod: "DELETE", path: "v1/{+name}", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"] },
+        params: [{ "field": "name", "api": "name", "location": "path" }, { "field": "fields", "api": "fields", "location": "query" }],
+        hasBody: false,
+        shape: {
+            account: accountField(),
+            name: z.string().describe("Required. The [resource name](https://cloud.google.com/apis/design/resource_names) of the InboundSamlSsoProfile to delete. Format: `inboundSamlSsoProfiles/{sso_profile_id}`"),
+            fields: z.string().optional().describe('Response field mask.'),
+        },
+    });
+    registerGeneratedTool(registry, {
+        name: "cloudidentity_inbound_saml_sso_profiles_get",
+        cud: "read",
+        description: "Gets an InboundSamlSsoProfile.",
+        method: { id: "cloudidentity.inboundSamlSsoProfiles.get", httpMethod: "GET", path: "v1/{+name}", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"] },
+        params: [{ "field": "name", "api": "name", "location": "path" }, { "field": "fields", "api": "fields", "location": "query" }],
+        hasBody: false,
+        shape: {
+            account: accountField(),
+            name: z.string().describe("Required. The [resource name](https://cloud.google.com/apis/design/resource_names) of the InboundSamlSsoProfile to get. Format: `inboundSamlSsoProfiles/{sso_profile_id}`"),
+            fields: z.string().optional().describe('Response field mask.'),
+        },
+    });
+    registerGeneratedTool(registry, {
+        name: "cloudidentity_inbound_saml_sso_profiles_idp_credentials_add",
+        cud: "create",
+        description: "Adds an IdpCredential. Up to 2 credentials are allowed. When the target customer has enabled [Multi-party approval for sensitive actions](https://support.google",
+        method: { id: "cloudidentity.inboundSamlSsoProfiles.idpCredentials.add", httpMethod: "POST", path: "v1/{+parent}/idpCredentials:add", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["parent"] },
+        params: [{ "field": "parent", "api": "parent", "location": "path" }, { "field": "fields", "api": "fields", "location": "query" }],
+        hasBody: true,
+        shape: {
+            account: accountField(),
+            parent: z.string().describe("Required. The InboundSamlSsoProfile that owns the IdpCredential. Format: `inboundSamlSsoProfiles/{sso_profile_id}`"),
+            body: coerceJson(z.record(z.string(), z.unknown())).describe("AddIdpCredentialRequest JSON request body. Top-level fields: pemData."),
+            fields: z.string().optional().describe('Response field mask.'),
+        },
+    });
+    registerGeneratedTool(registry, {
+        name: "cloudidentity_inbound_saml_sso_profiles_idp_credentials_delete",
+        cud: "delete",
+        description: "Deletes an IdpCredential.",
+        method: { id: "cloudidentity.inboundSamlSsoProfiles.idpCredentials.delete", httpMethod: "DELETE", path: "v1/{+name}", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"] },
+        params: [{ "field": "name", "api": "name", "location": "path" }, { "field": "fields", "api": "fields", "location": "query" }],
+        hasBody: false,
+        shape: {
+            account: accountField(),
+            name: z.string().describe("Required. The [resource name](https://cloud.google.com/apis/design/resource_names) of the IdpCredential to delete. Format: `inboundSamlSsoProfiles/{sso_profile_id}/idpCredentials/{idp_credential_id}`"),
+            fields: z.string().optional().describe('Response field mask.'),
+        },
+    });
+    registerGeneratedTool(registry, {
+        name: "cloudidentity_inbound_saml_sso_profiles_idp_credentials_get",
+        cud: "read",
+        description: "Gets an IdpCredential.",
+        method: { id: "cloudidentity.inboundSamlSsoProfiles.idpCredentials.get", httpMethod: "GET", path: "v1/{+name}", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"] },
+        params: [{ "field": "name", "api": "name", "location": "path" }, { "field": "fields", "api": "fields", "location": "query" }],
+        hasBody: false,
+        shape: {
+            account: accountField(),
+            name: z.string().describe("Required. The [resource name](https://cloud.google.com/apis/design/resource_names) of the IdpCredential to retrieve. Format: `inboundSamlSsoProfiles/{sso_profile_id}/idpCredentials/{idp_credential_id}"),
+            fields: z.string().optional().describe('Response field mask.'),
+        },
+    });
+    registerGeneratedTool(registry, {
+        name: "cloudidentity_inbound_saml_sso_profiles_idp_credentials_list",
+        cud: "read",
+        description: "Returns a list of IdpCredentials in an InboundSamlSsoProfile.",
+        method: { id: "cloudidentity.inboundSamlSsoProfiles.idpCredentials.list", httpMethod: "GET", path: "v1/{+parent}/idpCredentials", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["parent"] },
+        params: [{ "field": "parent", "api": "parent", "location": "path" }, { "field": "pageSize", "api": "pageSize", "location": "query" }, { "field": "pageToken", "api": "pageToken", "location": "query" }, { "field": "fields", "api": "fields", "location": "query" }],
+        hasBody: false,
+        shape: {
+            account: accountField(),
+            parent: z.string().describe("Required. The parent, which owns this collection of `IdpCredential`s. Format: `inboundSamlSsoProfiles/{sso_profile_id}`"),
+            pageSize: z.number().describe("The maximum number of `IdpCredential`s to return. The service may return fewer than this value.").optional(),
+            pageToken: z.string().describe("A page token, received from a previous `ListIdpCredentials` call. Provide this to retrieve the subsequent page. When paginating, all other parameters provided to `ListIdpCredentials` must match the ca").optional(),
+            fields: z.string().optional().describe('Response field mask.'),
+        },
+    });
+    registerGeneratedTool(registry, {
+        name: "cloudidentity_inbound_saml_sso_profiles_list",
+        cud: "read",
+        description: "Lists InboundSamlSsoProfiles for a customer.",
+        method: { id: "cloudidentity.inboundSamlSsoProfiles.list", httpMethod: "GET", path: "v1/inboundSamlSsoProfiles", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: [] },
+        params: [{ "field": "filter", "api": "filter", "location": "query" }, { "field": "pageSize", "api": "pageSize", "location": "query" }, { "field": "pageToken", "api": "pageToken", "location": "query" }, { "field": "fields", "api": "fields", "location": "query" }],
+        hasBody: false,
+        shape: {
+            account: accountField(),
+            filter: z.string().describe("A [Common Expression Language](https://github.com/google/cel-spec) expression to filter the results. The only supported filter is filtering by customer. For example: `customer==\"customers/C0123abc\"`. ").optional(),
+            pageSize: z.number().describe("The maximum number of InboundSamlSsoProfiles to return. The service may return fewer than this value. If omitted (or defaulted to zero) the server will use a sensible default. This default may change ").optional(),
+            pageToken: z.string().describe("A page token, received from a previous `ListInboundSamlSsoProfiles` call. Provide this to retrieve the subsequent page. When paginating, all other parameters provided to `ListInboundSamlSsoProfiles` m").optional(),
+            fields: z.string().optional().describe('Response field mask.'),
+        },
+    });
+    registerGeneratedTool(registry, {
+        name: "cloudidentity_inbound_saml_sso_profiles_patch",
+        cud: "update",
+        description: "Updates an InboundSamlSsoProfile. When the target customer has enabled [Multi-party approval for sensitive actions](https://support.google.com/a/answer/13790448",
+        method: { id: "cloudidentity.inboundSamlSsoProfiles.patch", httpMethod: "PATCH", path: "v1/{+name}", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"] },
+        params: [{ "field": "name", "api": "name", "location": "path" }, { "field": "updateMask", "api": "updateMask", "location": "query" }, { "field": "fields", "api": "fields", "location": "query" }],
+        hasBody: true,
+        shape: {
+            account: accountField(),
+            name: z.string().describe("Output only. [Resource name](https://cloud.google.com/apis/design/resource_names) of the SAML SSO profile."),
+            updateMask: z.string().describe("Required. The list of fields to be updated.").optional(),
+            body: coerceJson(z.record(z.string(), z.unknown())).describe("InboundSamlSsoProfile JSON request body. Top-level fields: customer, displayName, idpConfig, name, spConfig."),
+            fields: z.string().optional().describe('Response field mask.'),
+        },
+    });
+    registerGeneratedTool(registry, {
+        name: "cloudidentity_inbound_sso_assignments_create",
+        cud: "create",
+        description: "Creates an InboundSsoAssignment for users and devices in a `Customer` under a given `Group` or `OrgUnit`.",
+        method: { id: "cloudidentity.inboundSsoAssignments.create", httpMethod: "POST", path: "v1/inboundSsoAssignments", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: [] },
+        params: [{ "field": "fields", "api": "fields", "location": "query" }],
+        hasBody: true,
+        shape: {
+            account: accountField(),
+            body: coerceJson(z.record(z.string(), z.unknown())).describe("InboundSsoAssignment JSON request body. Top-level fields: customer, name, oidcSsoInfo, rank, samlSsoInfo, signInBehavior, ssoMode, targetGroup, targetOrgUnit."),
+            fields: z.string().optional().describe('Response field mask.'),
+        },
+    });
+    registerGeneratedTool(registry, {
+        name: "cloudidentity_inbound_sso_assignments_delete",
+        cud: "delete",
+        description: "Deletes an InboundSsoAssignment. To disable SSO, Create (or Update) an assignment that has `sso_mode` == `SSO_OFF`.",
+        method: { id: "cloudidentity.inboundSsoAssignments.delete", httpMethod: "DELETE", path: "v1/{+name}", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"] },
+        params: [{ "field": "name", "api": "name", "location": "path" }, { "field": "fields", "api": "fields", "location": "query" }],
+        hasBody: false,
+        shape: {
+            account: accountField(),
+            name: z.string().describe("Required. The [resource name](https://cloud.google.com/apis/design/resource_names) of the InboundSsoAssignment to delete. Format: `inboundSsoAssignments/{assignment}`"),
+            fields: z.string().optional().describe('Response field mask.'),
+        },
+    });
+    registerGeneratedTool(registry, {
+        name: "cloudidentity_inbound_sso_assignments_get",
+        cud: "read",
+        description: "Gets an InboundSsoAssignment.",
+        method: { id: "cloudidentity.inboundSsoAssignments.get", httpMethod: "GET", path: "v1/{+name}", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"] },
+        params: [{ "field": "name", "api": "name", "location": "path" }, { "field": "fields", "api": "fields", "location": "query" }],
+        hasBody: false,
+        shape: {
+            account: accountField(),
+            name: z.string().describe("Required. The [resource name](https://cloud.google.com/apis/design/resource_names) of the InboundSsoAssignment to fetch. Format: `inboundSsoAssignments/{assignment}`"),
+            fields: z.string().optional().describe('Response field mask.'),
+        },
+    });
+    registerGeneratedTool(registry, {
+        name: "cloudidentity_inbound_sso_assignments_list",
+        cud: "read",
+        description: "Lists the InboundSsoAssignments for a `Customer`.",
+        method: { id: "cloudidentity.inboundSsoAssignments.list", httpMethod: "GET", path: "v1/inboundSsoAssignments", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: [] },
+        params: [{ "field": "filter", "api": "filter", "location": "query" }, { "field": "pageSize", "api": "pageSize", "location": "query" }, { "field": "pageToken", "api": "pageToken", "location": "query" }, { "field": "fields", "api": "fields", "location": "query" }],
+        hasBody: false,
+        shape: {
+            account: accountField(),
+            filter: z.string().describe("A CEL expression to filter the results. The only supported filter is filtering by customer. For example: `customer==customers/C0123abc`. Omitting the filter or specifying a filter of `customer==custom").optional(),
+            pageSize: z.number().describe("The maximum number of assignments to return. The service may return fewer than this value. If omitted (or defaulted to zero) the server will use a sensible default. This default may change over time. ").optional(),
+            pageToken: z.string().describe("A page token, received from a previous `ListInboundSsoAssignments` call. Provide this to retrieve the subsequent page. When paginating, all other parameters provided to `ListInboundSsoAssignments` mus").optional(),
+            fields: z.string().optional().describe('Response field mask.'),
+        },
+    });
+    registerGeneratedTool(registry, {
+        name: "cloudidentity_inbound_sso_assignments_patch",
+        cud: "update",
+        description: "Updates an InboundSsoAssignment. The body of this request is the `inbound_sso_assignment` field and the `update_mask` is relative to that. For example: a PATCH",
+        method: { id: "cloudidentity.inboundSsoAssignments.patch", httpMethod: "PATCH", path: "v1/{+name}", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"] },
+        params: [{ "field": "name", "api": "name", "location": "path" }, { "field": "updateMask", "api": "updateMask", "location": "query" }, { "field": "fields", "api": "fields", "location": "query" }],
+        hasBody: true,
+        shape: {
+            account: accountField(),
+            name: z.string().describe("Output only. [Resource name](https://cloud.google.com/apis/design/resource_names) of the Inbound SSO Assignment."),
+            updateMask: z.string().describe("Required. The list of fields to be updated.").optional(),
+            body: coerceJson(z.record(z.string(), z.unknown())).describe("InboundSsoAssignment JSON request body. Top-level fields: customer, name, oidcSsoInfo, rank, samlSsoInfo, signInBehavior, ssoMode, targetGroup, targetOrgUnit."),
+            fields: z.string().optional().describe('Response field mask.'),
+        },
+    });
+    registerGeneratedTool(registry, {
+        name: "cloudidentity_policies_create",
+        cud: "create",
+        description: "Create a policy.",
+        method: { id: "cloudidentity.policies.create", httpMethod: "POST", path: "v1/policies", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: [] },
+        params: [{ "field": "fields", "api": "fields", "location": "query" }],
+        hasBody: true,
+        shape: {
+            account: accountField(),
+            body: coerceJson(z.record(z.string(), z.unknown())).describe("Policy JSON request body. Top-level fields: customer, name, policyQuery, setting, type."),
+            fields: z.string().optional().describe('Response field mask.'),
+        },
+    });
+    registerGeneratedTool(registry, {
+        name: "cloudidentity_policies_delete",
+        cud: "delete",
+        description: "Delete a policy.",
+        method: { id: "cloudidentity.policies.delete", httpMethod: "DELETE", path: "v1/{+name}", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"] },
+        params: [{ "field": "name", "api": "name", "location": "path" }, { "field": "fields", "api": "fields", "location": "query" }],
+        hasBody: false,
+        shape: {
+            account: accountField(),
+            name: z.string().describe("Required. The name of the policy to delete. Format: `policies/{policy}`."),
+            fields: z.string().optional().describe('Response field mask.'),
+        },
+    });
+    registerGeneratedTool(registry, {
+        name: "cloudidentity_policies_get",
+        cud: "read",
+        description: "Get a policy.",
+        method: { id: "cloudidentity.policies.get", httpMethod: "GET", path: "v1/{+name}", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"] },
+        params: [{ "field": "name", "api": "name", "location": "path" }, { "field": "fields", "api": "fields", "location": "query" }],
+        hasBody: false,
+        shape: {
+            account: accountField(),
+            name: z.string().describe("Required. The name of the policy to retrieve. Format: `policies/{policy}`."),
+            fields: z.string().optional().describe('Response field mask.'),
+        },
+    });
+    registerGeneratedTool(registry, {
+        name: "cloudidentity_policies_list",
+        cud: "read",
+        description: "List policies.",
+        method: { id: "cloudidentity.policies.list", httpMethod: "GET", path: "v1/policies", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: [] },
+        params: [{ "field": "filter", "api": "filter", "location": "query" }, { "field": "pageSize", "api": "pageSize", "location": "query" }, { "field": "pageToken", "api": "pageToken", "location": "query" }, { "field": "fields", "api": "fields", "location": "query" }],
+        hasBody: false,
+        shape: {
+            account: accountField(),
+            filter: z.string().describe("Optional. A CEL expression for filtering the results. Policies can be filtered using the expression in the following ways: - Filter by application: `setting.type.matches('^settings/gmail\\\\..*$')` - Fi").optional(),
+            pageSize: z.number().describe("Optional. The maximum number of results to return. The service can return fewer than this number. If omitted or set to `0`, the default is `50` results per page. The maximum allowed value is `100`. `p").optional(),
+            pageToken: z.string().describe("Optional. The pagination token received from a prior call to PoliciesService.ListPolicies to retrieve the next page of results. When paginating, all other parameters provided to `ListPoliciesRequest` ").optional(),
+            fields: z.string().optional().describe('Response field mask.'),
+        },
+    });
+    registerGeneratedTool(registry, {
+        name: "cloudidentity_policies_patch",
+        cud: "update",
+        description: "Update a policy.",
+        method: { id: "cloudidentity.policies.patch", httpMethod: "PATCH", path: "v1/{+name}", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"] },
+        params: [{ "field": "name", "api": "name", "location": "path" }, { "field": "fields", "api": "fields", "location": "query" }],
+        hasBody: true,
+        shape: {
+            account: accountField(),
+            name: z.string().describe("Output only. Identifier. The [resource name](https://cloud.google.com/apis/design/resource_names) of the Policy. Format: policies/{policy}."),
+            body: coerceJson(z.record(z.string(), z.unknown())).describe("Policy JSON request body. Top-level fields: customer, name, policyQuery, setting, type."),
+            fields: z.string().optional().describe('Response field mask.'),
+        },
+    });
+}