feat: run the generator

discovery/accesscontextmanager-v1.json

@@ -809,6 +809,21 @@
                 "name"
               ],
               "parameters": {
+                "deletedPrincipalSyntax": {
+                  "description": "Optional. If true, the response will contain the deleted principal syntax for identities that support it.",
+                  "enum": [
+                    "DELETED_PRINCIPAL_SYNTAX_SUPPORT_UNSPECIFIED",
+                    "DELETED_PRINCIPAL_SYNTAX_SUPPORT_DISABLED",
+                    "DELETED_PRINCIPAL_SYNTAX_SUPPORT_ENABLED"
+                  ],
+                  "enumDescriptions": [
+                    "Deleted principal syntax support was not specified.",
+                    "Deleted principal syntax is disabled and no identities in the request or response will contain deleted principal syntax.",
+                    "The request and response can contain identities with deleted IAM principal syntax."
+                  ],
+                  "location": "query",
+                  "type": "string"
+                },
                 "name": {
                   "description": "Required. Resource name for the Service Perimeter. Format: `accessPolicies/{policy_id}/servicePerimeters/{service_perimeters_id}`",
                   "location": "path",
@@ -834,6 +849,21 @@
                 "parent"
               ],
               "parameters": {
+                "deletedPrincipalSyntax": {
+                  "description": "Optional. If true, the response will contain the deleted principal syntax for identities that support it.",
+                  "enum": [
+                    "DELETED_PRINCIPAL_SYNTAX_SUPPORT_UNSPECIFIED",
+                    "DELETED_PRINCIPAL_SYNTAX_SUPPORT_DISABLED",
+                    "DELETED_PRINCIPAL_SYNTAX_SUPPORT_ENABLED"
+                  ],
+                  "enumDescriptions": [
+                    "Deleted principal syntax support was not specified.",
+                    "Deleted principal syntax is disabled and no identities in the request or response will contain deleted principal syntax.",
+                    "The request and response can contain identities with deleted IAM principal syntax."
+                  ],
+                  "location": "query",
+                  "type": "string"
+                },
                 "pageSize": {
                   "description": "Number of Service Perimeters to include in the list. Default 100.",
                   "format": "int32",
@@ -870,6 +900,21 @@
                 "name"
               ],
               "parameters": {
+                "deletedPrincipalSyntax": {
+                  "description": "Optional. If true, the response will contain the deleted principal syntax for identities that support it and the request can contain identities with deleted principal syntax.",
+                  "enum": [
+                    "DELETED_PRINCIPAL_SYNTAX_SUPPORT_UNSPECIFIED",
+                    "DELETED_PRINCIPAL_SYNTAX_SUPPORT_DISABLED",
+                    "DELETED_PRINCIPAL_SYNTAX_SUPPORT_ENABLED"
+                  ],
+                  "enumDescriptions": [
+                    "Deleted principal syntax support was not specified.",
+                    "Deleted principal syntax is disabled and no identities in the request or response will contain deleted principal syntax.",
+                    "The request and response can contain identities with deleted IAM principal syntax."
+                  ],
+                  "location": "query",
+                  "type": "string"
+                },
                 "name": {
                   "description": "Identifier. Resource name for the `ServicePerimeter`. Format: `accessPolicies/{access_policy}/servicePerimeters/{service_perimeter}`. The `service_perimeter` component must begin with a letter, followed by alphanumeric characters or `_`. After you create a `ServicePerimeter`, you cannot change its `name`.",
                   "location": "path",
@@ -1336,7 +1381,7 @@
       }
     }
   },
-  "revision": "20260809",
+  "revision": "20260819",
   "rootUrl": "https://accesscontextmanager.googleapis.com/",
   "schemas": {
     "AccessContextManagerOperationMetadata": {
@@ -1650,7 +1695,7 @@
         },
         "restrictedProject": {
           "$ref": "Project",
-          "description": "Optional. The GCP project that is subject to this binding's scope."
+          "description": "Optional. The Google Cloud project that is subject to this binding's scope."
         }
       },
       "type": "object"
@@ -2427,7 +2472,7 @@
       "id": "Principal",
       "properties": {
         "federatedPrincipal": {
-          "description": "Immutable. IAM federated principal name to assign policies to workforce/workload federated identities. Can be principal set or single principal, here are some examples: Single principal: principal://iam.googleapis.com/projects/{project_number}/locations/global/workloadIdentityPools/{pool_id}/subject/{subject_attribute_value} PrincipalSet: principalSet://iam.googleapis.com/projects/{project_number}/locations/global/workloadIdentityPools/{pool_id}/*",
+          "description": "Immutable. The IAM principal identifier of the federated workforce or workload to assign the policy to. Examples include the following: * Single principal: `principal://iam.googleapis.com/projects/{project_number}/locations/global/workloadIdentityPools/{pool_id}/subject/{subject_attribute_value}` * All workloads in a workload identity pool: `principalSet://iam.googleapis.com/projects/{project_number}/locations/global/workloadIdentityPools/{pool_id}/*` * All Workforce Pools in a Google Cloud organization: `principalSet://cloudresourcemanager.googleapis.com/organizations/{organization_id}/type/WorkforcePool` Bindings created for all Workforce Pools in a Google Cloud organization support only `scoped_access_settings` with the `restricted_project` client scope and active `session_settings`. No other configurations are allowed.",
           "type": "string"
         },
         "serviceAccount": {
@@ -2453,11 +2498,11 @@
       "type": "object"
     },
     "Project": {
-      "description": "A GCP project which contains applications and resources that users can access.",
+      "description": "A Google Cloud project which contains applications and resources that users can access.",
       "id": "Project",
       "properties": {
         "name": {
-          "description": "The GCP project resource name. Format: \"projects/{project_number}\" (Only the numeric project name variation is supported). Example: \"projects/1234567890\"",
+          "description": "The Google Cloud project resource name. Format: `projects/{project_number}`. Only the project number is supported. Example: `projects/1234567890`",
           "type": "string"
         }
       },
@@ -2671,7 +2716,7 @@
           "type": "string"
         },
         "sessionLength": {
-          "description": "Optional. The session length. Setting this field to zero allows for sessions that are active indefinitely. Also, setting `session_length_enabled` to false disregards session limits, which means that sessions never expire. If use_oidc_max_age is true, for OIDC apps, the session length will be the minimum of this field and the OIDC max_age param. If this field is set to zero, `session_length_enabled` must be set to false or left unset.",
+          "description": "Optional. The session length. Setting this field to zero allows for sessions that are active indefinitely. Also, setting `session_length_enabled` to `false` disregards session limits, which means that sessions never expire. If `use_oidc_max_age` is `true`, for OIDC apps, the session length will be the minimum of this field and the OIDC `max_age` param. If this field is set to zero, `session_length_enabled` must be set to `false` or left unset.",
           "format": "google-duration",
           "type": "string"
         },

discovery/agentidentitycredentials-v1.json

@@ -12,7 +12,7 @@
   "baseUrl": "https://agentidentitycredentials.googleapis.com/",
   "batchPath": "batch",
   "canonicalName": "Agent Identity Credentials",
-  "description": "agentidentitycredentials.googleapis.com API.",
+  "description": "The Agent Identity Credentials API retrieves and finalizes authorization credentials for auth providers.",
   "discoveryVersion": "v1",
   "documentationLink": "https://cloud.google.com/iam/docs/",
   "fullyEncodeReservedExpansion": true,
@@ -123,7 +123,7 @@
                       ],
                       "parameters": {
                         "authProvider": {
-                          "description": "Required. The resource name of the AuthProvider. Format: `projects/{project}/locations/{location}/authProviders/{auth_provider}`",
+                          "description": "Required. The resource name of the auth provider. Format: `projects/{project}/locations/{location}/authProviders/{auth_provider}`",
                           "location": "path",
                           "pattern": "^projects/[^/]+/locations/[^/]+/authProviders/[^/]+$",
                           "required": true,
@@ -142,7 +142,7 @@
                       ]
                     },
                     "retrieve": {
-                      "description": "Retrieves authorization credentials for an authprovider, or indicates what action needs to be taken to obtain credentials. If the `token` field in the response is populated, credential retrieval was successful. If one of the fields in the `status` oneof is populated, further action is required to obtain credentials, such as redirecting the user for consent. View comments on `RetrieveCredentialsResponse` for more information.",
+                      "description": "Retrieves authorization credentials for an auth provider, or indicates what action needs to be taken to obtain credentials. If the `token` field in the response is populated, credential retrieval was successful. If one of the fields in the `result` oneof is populated, further action is required to obtain credentials, such as redirecting the user for consent. View comments on `RetrieveCredentialsResponse` for more information.",
                       "flatPath": "v1/projects/{projectsId}/locations/{locationsId}/authProviders/{authProvidersId}/credentials:retrieve",
                       "httpMethod": "POST",
                       "id": "agentidentitycredentials.projects.locations.authProviders.credentials.retrieve",
@@ -151,7 +151,7 @@
                       ],
                       "parameters": {
                         "authProvider": {
-                          "description": "Required. The parent resource name of the AuthProvider. Format: `projects/{project}/locations/{location}/authProviders/{auth_provider}`",
+                          "description": "Required. The resource name of the auth provider. Format: `projects/{project}/locations/{location}/authProviders/{auth_provider}`",
                           "location": "path",
                           "pattern": "^projects/[^/]+/locations/[^/]+/authProviders/[^/]+$",
                           "required": true,
@@ -178,21 +178,21 @@
       }
     }
   },
-  "revision": "20260717",
+  "revision": "20260813",
   "rootUrl": "https://agentidentitycredentials.googleapis.com/",
   "schemas": {
     "GoogleCloudAgentidentitycredentialsV1_ConsentRejected": {
-      "description": "Indicates the user has rejected the permission delegation or cancelled the request.",
+      "description": "Indicates the user has rejected the permission delegation or canceled the request.",
       "id": "GoogleCloudAgentidentitycredentialsV1_ConsentRejected",
       "properties": {},
       "type": "object"
     },
     "GoogleCloudAgentidentitycredentialsV1_FinalizeCredentialsRequest": {
-      "description": "Request message for FinalizeCredentials.",
+      "description": "Request message for `FinalizeCredentials`.",
       "id": "GoogleCloudAgentidentitycredentialsV1_FinalizeCredentialsRequest",
       "properties": {
         "consentNonce": {
-          "description": "Required. The same consent_nonce value that was provided during redirect in the UriConsentRequired metadata.",
+          "description": "Required. The same `consent_nonce` value that was provided during retrieval in the [UriConsentRequired](https://cloud.google.com/iam/docs/reference/agentidentitycredentials/rest/v1/projects.locations.authProviders.credentials/retrieve#UriConsentRequired) metadata.",
           "type": "string"
         },
         "userId": {
@@ -208,27 +208,27 @@
       "type": "object"
     },
     "GoogleCloudAgentidentitycredentialsV1_FinalizeCredentialsResponse": {
-      "description": "Response message for FinalizeCredentials. Intentionally empty",
+      "description": "Response message for `FinalizeCredentials`. Intentionally empty.",
       "id": "GoogleCloudAgentidentitycredentialsV1_FinalizeCredentialsResponse",
       "properties": {},
       "type": "object"
     },
     "GoogleCloudAgentidentitycredentialsV1_Pending": {
-      "description": "Indicates that the credential retrieval is pending. The caller should retry the RetrieveCredentials request after some time.",
+      "description": "Indicates that the credential retrieval is pending. The caller should retry the `RetrieveCredentials` request after some time.",
       "id": "GoogleCloudAgentidentitycredentialsV1_Pending",
       "properties": {},
       "type": "object"
     },
     "GoogleCloudAgentidentitycredentialsV1_RetrieveCredentialsRequest": {
-      "description": "Request message for RetrieveCredentials.",
+      "description": "Request message for `RetrieveCredentials`.",
       "id": "GoogleCloudAgentidentitycredentialsV1_RetrieveCredentialsRequest",
       "properties": {
         "continueUri": {
-          "description": "Optional. The URI to redirect the user to after consent is completed. This field is required for authproviders using the 3-legged OAuth flow. For other authprovider types, this field is unused but not rejected.",
+          "description": "Optional. The URI to redirect the user to after consent is completed. This field is required for auth providers using the 3-legged OAuth flow. For other auth provider types, this field is unused but not rejected.",
           "type": "string"
         },
         "forceRefreshToken": {
-          "description": "Optional. Input only. Set this field only if the previous token was expired or invalid. This value must be the full, previously returned token string. Will trigger a refresh of the access token with a stored refresh token, if possible, or a new consent flow.",
+          "description": "Optional. Input only. Set this field only if the previous token was expired or invalid. This value must be the full, previously returned token string. Setting this field triggers a refresh of the access token with a stored refresh token, if possible, or a new consent flow.",
           "type": "string"
         },
         "scopes": {
@@ -246,7 +246,7 @@
       "type": "object"
     },
     "GoogleCloudAgentidentitycredentialsV1_RetrieveCredentialsResponse": {
-      "description": "Response message for RetrieveCredentials. Contains the access tokens and related artifacts.",
+      "description": "Response message for `RetrieveCredentials`. Contains the access tokens and related artifacts.",
       "id": "GoogleCloudAgentidentitycredentialsV1_RetrieveCredentialsResponse",
       "properties": {
         "consentRejected": {
@@ -263,7 +263,7 @@
         },
         "uriConsentRequired": {
           "$ref": "GoogleCloudAgentidentitycredentialsV1_UriConsentRequired",
-          "description": "Message indicating uri based consent is required."
+          "description": "Message indicating URI-based consent is required."
         }
       },
       "type": "object"
@@ -289,14 +289,14 @@
           "type": "array"
         },
         "token": {
-          "description": "The retrieved access token or credential for the end user. On MCPTool call, for an invalid token OAuth spec says this should return 401 or 403, but MCPServers may implement this differently. If you get any flavor of `PERMISSION_DENIED`, retry your original request to RetrieveCredentials with force_refresh_token set to the expired/invalid token string, which will fetch a new token or initiate a new consent flow.",
+          "description": "The retrieved access token or credential for the end user. On an MCP tool call, for an invalid token the OAuth spec states that this should return `401` or `403`, but MCP servers may implement this differently. If you get any flavor of `PERMISSION_DENIED`, retry your original request to `RetrieveCredentials` with force_refresh_token set to the expired/invalid token string, which will fetch a new token or initiate a new consent flow.",
           "type": "string"
         }
       },
       "type": "object"
     },
     "GoogleCloudAgentidentitycredentialsV1_UriConsentRequired": {
-      "description": "Indicates that the user must visit the provided URI to consent to delegate permission to the agent to act on their behalf. The caller can either poll the `RetrieveCredentials` method, or await the /ValidateUserId callback",
+      "description": "Indicates that the user must visit the provided URI to consent to delegate permission to the agent to act on their behalf. The caller can either poll the `RetrieveCredentials` method, or await the /ValidateUserId callback.",
       "id": "GoogleCloudAgentidentitycredentialsV1_UriConsentRequired",
       "properties": {
         "authorizationUri": {
@@ -305,7 +305,7 @@
           "type": "string"
         },
         "consentNonce": {
-          "description": "Output only. A one-time, randomly generated value that validates the entire consent flow is handled by a single user, avoiding CSRF attacks. It must be submitted with the FinalizeCredentials request to complete the OAuth exchange. This will always be present. Implemented per https://www.rfc-editor.org/rfc/rfc6819#section-5.3.5",
+          "description": "Output only. A one-time, randomly generated value that validates the entire consent flow is handled by a single user, avoiding CSRF attacks. It must be submitted with the `FinalizeCredentials` request to complete the OAuth exchange. This will always be present. Implemented per [RFC 6819 Section 5.3.5](https://www.rfc-editor.org/rfc/rfc6819#section-5.3.5).",
           "readOnly": true,
           "type": "string"
         },