{-# LANGUAGE DataKinds #-}
{-# LANGUAGE DerivingStrategies #-}
{-# LANGUAGE DuplicateRecordFields #-}
{-# LANGUAGE ImportQualifiedPost #-}
{-# LANGUAGE LambdaCase #-}
{-# LANGUAGE OverloadedStrings #-}
{-# LANGUAGE PatternSynonyms #-}
{-# LANGUAGE RecordWildCards #-}
{-# LANGUAGE StrictData #-}
{-# LANGUAGE TypeFamilies #-}
{-# LANGUAGE NoImplicitPrelude #-}
{-# OPTIONS_GHC -fno-warn-duplicate-exports #-}
{-# OPTIONS_GHC -fno-warn-name-shadowing #-}
{-# OPTIONS_GHC -fno-warn-unused-binds #-}
{-# OPTIONS_GHC -fno-warn-unused-imports #-}
{-# OPTIONS_GHC -fno-warn-unused-matches #-}

-- |
-- Module      : Gogol.IAM.Internal.Product
-- Copyright   : (c) 2015-2025 Brendan Hay
-- License     : Mozilla Public License, v. 2.0.
-- Maintainer  : Brendan Hay <brendan.g.hay+gogol@gmail.com>
--               Toni Cebrián <toni@tonicebrian.com>
-- Stability   : auto-generated
-- Portability : non-portable (GHC extensions)
module Gogol.IAM.Internal.Product
  ( -- * CloudControl2SharedOperationsReconciliationOperationMetadata
    CloudControl2SharedOperationsReconciliationOperationMetadata (..),
    newCloudControl2SharedOperationsReconciliationOperationMetadata,

    -- * GoogleCloudCommonOperationMetadata
    GoogleCloudCommonOperationMetadata (..),
    newGoogleCloudCommonOperationMetadata,

    -- * GoogleIamAdminV1AuditData
    GoogleIamAdminV1AuditData (..),
    newGoogleIamAdminV1AuditData,

    -- * GoogleIamAdminV1AuditDataPermissionDelta
    GoogleIamAdminV1AuditDataPermissionDelta (..),
    newGoogleIamAdminV1AuditDataPermissionDelta,

    -- * GoogleIamV1BindingDelta
    GoogleIamV1BindingDelta (..),
    newGoogleIamV1BindingDelta,

    -- * GoogleIamV1LoggingAuditData
    GoogleIamV1LoggingAuditData (..),
    newGoogleIamV1LoggingAuditData,

    -- * GoogleIamV1PolicyDelta
    GoogleIamV1PolicyDelta (..),
    newGoogleIamV1PolicyDelta,

    -- * GoogleIamV1betaWorkloadIdentityPoolOperationMetadata
    GoogleIamV1betaWorkloadIdentityPoolOperationMetadata (..),
    newGoogleIamV1betaWorkloadIdentityPoolOperationMetadata,

    -- * GoogleIamV2DenyRule
    GoogleIamV2DenyRule (..),
    newGoogleIamV2DenyRule,

    -- * GoogleIamV2ListPoliciesResponse
    GoogleIamV2ListPoliciesResponse (..),
    newGoogleIamV2ListPoliciesResponse,

    -- * GoogleIamV2Policy
    GoogleIamV2Policy (..),
    newGoogleIamV2Policy,

    -- * GoogleIamV2Policy_Annotations
    GoogleIamV2Policy_Annotations (..),
    newGoogleIamV2Policy_Annotations,

    -- * GoogleIamV2PolicyOperationMetadata
    GoogleIamV2PolicyOperationMetadata (..),
    newGoogleIamV2PolicyOperationMetadata,

    -- * GoogleIamV2PolicyRule
    GoogleIamV2PolicyRule (..),
    newGoogleIamV2PolicyRule,

    -- * GoogleIamV3OperationMetadata
    GoogleIamV3OperationMetadata (..),
    newGoogleIamV3OperationMetadata,

    -- * GoogleIamV3alphaOperationMetadata
    GoogleIamV3alphaOperationMetadata (..),
    newGoogleIamV3alphaOperationMetadata,

    -- * GoogleIamV3betaOperationMetadata
    GoogleIamV3betaOperationMetadata (..),
    newGoogleIamV3betaOperationMetadata,

    -- * GoogleIamV3mainOperationMetadata
    GoogleIamV3mainOperationMetadata (..),
    newGoogleIamV3mainOperationMetadata,

    -- * GoogleLongrunningOperation
    GoogleLongrunningOperation (..),
    newGoogleLongrunningOperation,

    -- * GoogleLongrunningOperation_Metadata
    GoogleLongrunningOperation_Metadata (..),
    newGoogleLongrunningOperation_Metadata,

    -- * GoogleLongrunningOperation_Response
    GoogleLongrunningOperation_Response (..),
    newGoogleLongrunningOperation_Response,

    -- * GoogleRpcStatus
    GoogleRpcStatus (..),
    newGoogleRpcStatus,

    -- * GoogleRpcStatus_DetailsItem
    GoogleRpcStatus_DetailsItem (..),
    newGoogleRpcStatus_DetailsItem,

    -- * GoogleTypeExpr
    GoogleTypeExpr (..),
    newGoogleTypeExpr,
  )
where

import Gogol.IAM.Internal.Sum
import Gogol.Prelude qualified as Core

-- | Operation metadata returned by the CLH during resource state reconciliation.
--
-- /See:/ 'newCloudControl2SharedOperationsReconciliationOperationMetadata' smart constructor.
data CloudControl2SharedOperationsReconciliationOperationMetadata = CloudControl2SharedOperationsReconciliationOperationMetadata
  { -- | DEPRECATED. Use exclusive_action instead.
    deleteResource :: (Core.Maybe Core.Bool),
    -- | Excluisive action returned by the CLH.
    exclusiveAction ::
      ( Core.Maybe
          CloudControl2SharedOperationsReconciliationOperationMetadata_ExclusiveAction
      )
  }
  deriving (Core.Eq, Core.Show, Core.Generic)

-- | Creates a value of 'CloudControl2SharedOperationsReconciliationOperationMetadata' with the minimum fields required to make a request.
newCloudControl2SharedOperationsReconciliationOperationMetadata ::
  CloudControl2SharedOperationsReconciliationOperationMetadata
newCloudControl2SharedOperationsReconciliationOperationMetadata =
  CloudControl2SharedOperationsReconciliationOperationMetadata
    { deleteResource =
        Core.Nothing,
      exclusiveAction = Core.Nothing
    }

instance
  Core.FromJSON
    CloudControl2SharedOperationsReconciliationOperationMetadata
  where
  parseJSON =
    Core.withObject
      "CloudControl2SharedOperationsReconciliationOperationMetadata"
      ( \o ->
          CloudControl2SharedOperationsReconciliationOperationMetadata
            Core.<$> (o Core..:? "deleteResource")
            Core.<*> (o Core..:? "exclusiveAction")
      )

instance
  Core.ToJSON
    CloudControl2SharedOperationsReconciliationOperationMetadata
  where
  toJSON
    CloudControl2SharedOperationsReconciliationOperationMetadata {..} =
      Core.object
        ( Core.catMaybes
            [ ("deleteResource" Core..=) Core.<$> deleteResource,
              ("exclusiveAction" Core..=) Core.<$> exclusiveAction
            ]
        )

-- | Represents the metadata of the long-running operation.
--
-- /See:/ 'newGoogleCloudCommonOperationMetadata' smart constructor.
data GoogleCloudCommonOperationMetadata = GoogleCloudCommonOperationMetadata
  { -- | Output only. API version used to start the operation.
    apiVersion :: (Core.Maybe Core.Text),
    -- | Output only. Identifies whether the user has requested cancellation of the operation. Operations that have been cancelled successfully have google.longrunning.Operation.error value with a google.rpc.Status.code of @1@, corresponding to @Code.CANCELLED@.
    cancelRequested :: (Core.Maybe Core.Bool),
    -- | Output only. The time the operation was created.
    createTime :: (Core.Maybe Core.DateTime),
    -- | Output only. The time the operation finished running.
    endTime :: (Core.Maybe Core.DateTime),
    -- | Output only. Human-readable status of the operation, if any.
    statusDetail :: (Core.Maybe Core.Text),
    -- | Output only. Server-defined resource path for the target of the operation.
    target :: (Core.Maybe Core.Text),
    -- | Output only. Name of the verb executed by the operation.
    verb :: (Core.Maybe Core.Text)
  }
  deriving (Core.Eq, Core.Show, Core.Generic)

-- | Creates a value of 'GoogleCloudCommonOperationMetadata' with the minimum fields required to make a request.
newGoogleCloudCommonOperationMetadata ::
  GoogleCloudCommonOperationMetadata
newGoogleCloudCommonOperationMetadata =
  GoogleCloudCommonOperationMetadata
    { apiVersion = Core.Nothing,
      cancelRequested = Core.Nothing,
      createTime = Core.Nothing,
      endTime = Core.Nothing,
      statusDetail = Core.Nothing,
      target = Core.Nothing,
      verb = Core.Nothing
    }

instance Core.FromJSON GoogleCloudCommonOperationMetadata where
  parseJSON =
    Core.withObject
      "GoogleCloudCommonOperationMetadata"
      ( \o ->
          GoogleCloudCommonOperationMetadata
            Core.<$> (o Core..:? "apiVersion")
            Core.<*> (o Core..:? "cancelRequested")
            Core.<*> (o Core..:? "createTime")
            Core.<*> (o Core..:? "endTime")
            Core.<*> (o Core..:? "statusDetail")
            Core.<*> (o Core..:? "target")
            Core.<*> (o Core..:? "verb")
      )

instance Core.ToJSON GoogleCloudCommonOperationMetadata where
  toJSON GoogleCloudCommonOperationMetadata {..} =
    Core.object
      ( Core.catMaybes
          [ ("apiVersion" Core..=) Core.<$> apiVersion,
            ("cancelRequested" Core..=) Core.<$> cancelRequested,
            ("createTime" Core..=) Core.<$> createTime,
            ("endTime" Core..=) Core.<$> endTime,
            ("statusDetail" Core..=) Core.<$> statusDetail,
            ("target" Core..=) Core.<$> target,
            ("verb" Core..=) Core.<$> verb
          ]
      )

-- | Audit log information specific to Cloud IAM admin APIs. This message is serialized as an @Any@ type in the @ServiceData@ message of an @AuditLog@ message.
--
-- /See:/ 'newGoogleIamAdminV1AuditData' smart constructor.
newtype GoogleIamAdminV1AuditData = GoogleIamAdminV1AuditData
  { -- | The permission_delta when when creating or updating a Role.
    permissionDelta :: (Core.Maybe GoogleIamAdminV1AuditDataPermissionDelta)
  }
  deriving (Core.Eq, Core.Show, Core.Generic)

-- | Creates a value of 'GoogleIamAdminV1AuditData' with the minimum fields required to make a request.
newGoogleIamAdminV1AuditData ::
  GoogleIamAdminV1AuditData
newGoogleIamAdminV1AuditData =
  GoogleIamAdminV1AuditData {permissionDelta = Core.Nothing}

instance Core.FromJSON GoogleIamAdminV1AuditData where
  parseJSON =
    Core.withObject
      "GoogleIamAdminV1AuditData"
      ( \o ->
          GoogleIamAdminV1AuditData Core.<$> (o Core..:? "permissionDelta")
      )

instance Core.ToJSON GoogleIamAdminV1AuditData where
  toJSON GoogleIamAdminV1AuditData {..} =
    Core.object
      ( Core.catMaybes
          [("permissionDelta" Core..=) Core.<$> permissionDelta]
      )

-- | A PermissionDelta message to record the added/permissions and removed/permissions inside a role.
--
-- /See:/ 'newGoogleIamAdminV1AuditDataPermissionDelta' smart constructor.
data GoogleIamAdminV1AuditDataPermissionDelta = GoogleIamAdminV1AuditDataPermissionDelta
  { -- | Added permissions.
    addedPermissions :: (Core.Maybe [Core.Text]),
    -- | Removed permissions.
    removedPermissions :: (Core.Maybe [Core.Text])
  }
  deriving (Core.Eq, Core.Show, Core.Generic)

-- | Creates a value of 'GoogleIamAdminV1AuditDataPermissionDelta' with the minimum fields required to make a request.
newGoogleIamAdminV1AuditDataPermissionDelta ::
  GoogleIamAdminV1AuditDataPermissionDelta
newGoogleIamAdminV1AuditDataPermissionDelta =
  GoogleIamAdminV1AuditDataPermissionDelta
    { addedPermissions =
        Core.Nothing,
      removedPermissions = Core.Nothing
    }

instance Core.FromJSON GoogleIamAdminV1AuditDataPermissionDelta where
  parseJSON =
    Core.withObject
      "GoogleIamAdminV1AuditDataPermissionDelta"
      ( \o ->
          GoogleIamAdminV1AuditDataPermissionDelta
            Core.<$> (o Core..:? "addedPermissions")
            Core.<*> (o Core..:? "removedPermissions")
      )

instance Core.ToJSON GoogleIamAdminV1AuditDataPermissionDelta where
  toJSON GoogleIamAdminV1AuditDataPermissionDelta {..} =
    Core.object
      ( Core.catMaybes
          [ ("addedPermissions" Core..=) Core.<$> addedPermissions,
            ("removedPermissions" Core..=) Core.<$> removedPermissions
          ]
      )

-- | One delta entry for Binding. Each individual change (only one member in each entry) to a binding will be a separate entry.
--
-- /See:/ 'newGoogleIamV1BindingDelta' smart constructor.
data GoogleIamV1BindingDelta = GoogleIamV1BindingDelta
  { -- | The action that was performed on a Binding. Required
    action :: (Core.Maybe GoogleIamV1BindingDelta_Action),
    -- | The condition that is associated with this binding.
    condition :: (Core.Maybe GoogleTypeExpr),
    -- | A single identity requesting access for a Google Cloud resource. Follows the same format of Binding.members. Required
    member :: (Core.Maybe Core.Text),
    -- | Role that is assigned to @members@. For example, @roles\/viewer@, @roles\/editor@, or @roles\/owner@. Required
    role' :: (Core.Maybe Core.Text)
  }
  deriving (Core.Eq, Core.Show, Core.Generic)

-- | Creates a value of 'GoogleIamV1BindingDelta' with the minimum fields required to make a request.
newGoogleIamV1BindingDelta ::
  GoogleIamV1BindingDelta
newGoogleIamV1BindingDelta =
  GoogleIamV1BindingDelta
    { action = Core.Nothing,
      condition = Core.Nothing,
      member = Core.Nothing,
      role' = Core.Nothing
    }

instance Core.FromJSON GoogleIamV1BindingDelta where
  parseJSON =
    Core.withObject
      "GoogleIamV1BindingDelta"
      ( \o ->
          GoogleIamV1BindingDelta
            Core.<$> (o Core..:? "action")
            Core.<*> (o Core..:? "condition")
            Core.<*> (o Core..:? "member")
            Core.<*> (o Core..:? "role")
      )

instance Core.ToJSON GoogleIamV1BindingDelta where
  toJSON GoogleIamV1BindingDelta {..} =
    Core.object
      ( Core.catMaybes
          [ ("action" Core..=) Core.<$> action,
            ("condition" Core..=) Core.<$> condition,
            ("member" Core..=) Core.<$> member,
            ("role" Core..=) Core.<$> role'
          ]
      )

-- | Audit log information specific to Cloud IAM. This message is serialized as an @Any@ type in the @ServiceData@ message of an @AuditLog@ message.
--
-- /See:/ 'newGoogleIamV1LoggingAuditData' smart constructor.
newtype GoogleIamV1LoggingAuditData = GoogleIamV1LoggingAuditData
  { -- | Policy delta between the original policy and the newly set policy.
    policyDelta :: (Core.Maybe GoogleIamV1PolicyDelta)
  }
  deriving (Core.Eq, Core.Show, Core.Generic)

-- | Creates a value of 'GoogleIamV1LoggingAuditData' with the minimum fields required to make a request.
newGoogleIamV1LoggingAuditData ::
  GoogleIamV1LoggingAuditData
newGoogleIamV1LoggingAuditData =
  GoogleIamV1LoggingAuditData {policyDelta = Core.Nothing}

instance Core.FromJSON GoogleIamV1LoggingAuditData where
  parseJSON =
    Core.withObject
      "GoogleIamV1LoggingAuditData"
      ( \o ->
          GoogleIamV1LoggingAuditData Core.<$> (o Core..:? "policyDelta")
      )

instance Core.ToJSON GoogleIamV1LoggingAuditData where
  toJSON GoogleIamV1LoggingAuditData {..} =
    Core.object
      (Core.catMaybes [("policyDelta" Core..=) Core.<$> policyDelta])

-- | The difference delta between two policies.
--
-- /See:/ 'newGoogleIamV1PolicyDelta' smart constructor.
newtype GoogleIamV1PolicyDelta = GoogleIamV1PolicyDelta
  { -- | The delta for Bindings between two policies.
    bindingDeltas :: (Core.Maybe [GoogleIamV1BindingDelta])
  }
  deriving (Core.Eq, Core.Show, Core.Generic)

-- | Creates a value of 'GoogleIamV1PolicyDelta' with the minimum fields required to make a request.
newGoogleIamV1PolicyDelta ::
  GoogleIamV1PolicyDelta
newGoogleIamV1PolicyDelta =
  GoogleIamV1PolicyDelta {bindingDeltas = Core.Nothing}

instance Core.FromJSON GoogleIamV1PolicyDelta where
  parseJSON =
    Core.withObject
      "GoogleIamV1PolicyDelta"
      ( \o ->
          GoogleIamV1PolicyDelta Core.<$> (o Core..:? "bindingDeltas")
      )

instance Core.ToJSON GoogleIamV1PolicyDelta where
  toJSON GoogleIamV1PolicyDelta {..} =
    Core.object
      (Core.catMaybes [("bindingDeltas" Core..=) Core.<$> bindingDeltas])

-- | Metadata for long-running WorkloadIdentityPool operations.
--
-- /See:/ 'newGoogleIamV1betaWorkloadIdentityPoolOperationMetadata' smart constructor.
data GoogleIamV1betaWorkloadIdentityPoolOperationMetadata = GoogleIamV1betaWorkloadIdentityPoolOperationMetadata
  deriving (Core.Eq, Core.Show, Core.Generic)

-- | Creates a value of 'GoogleIamV1betaWorkloadIdentityPoolOperationMetadata' with the minimum fields required to make a request.
newGoogleIamV1betaWorkloadIdentityPoolOperationMetadata ::
  GoogleIamV1betaWorkloadIdentityPoolOperationMetadata
newGoogleIamV1betaWorkloadIdentityPoolOperationMetadata =
  GoogleIamV1betaWorkloadIdentityPoolOperationMetadata

instance
  Core.FromJSON
    GoogleIamV1betaWorkloadIdentityPoolOperationMetadata
  where
  parseJSON =
    Core.withObject
      "GoogleIamV1betaWorkloadIdentityPoolOperationMetadata"
      ( \o ->
          Core.pure GoogleIamV1betaWorkloadIdentityPoolOperationMetadata
      )

instance
  Core.ToJSON
    GoogleIamV1betaWorkloadIdentityPoolOperationMetadata
  where
  toJSON = Core.const Core.emptyObject

-- | A deny rule in an IAM deny policy.
--
-- /See:/ 'newGoogleIamV2DenyRule' smart constructor.
data GoogleIamV2DenyRule = GoogleIamV2DenyRule
  { -- | The condition that determines whether this deny rule applies to a request. If the condition expression evaluates to @true@, then the deny rule is applied; otherwise, the deny rule is not applied. Each deny rule is evaluated independently. If this deny rule does not apply to a request, other deny rules might still apply. The condition can use CEL functions that evaluate <https://cloud.google.com/iam/help/conditions/resource-tags resource tags>. Other functions and operators are not supported.
    denialCondition :: (Core.Maybe GoogleTypeExpr),
    -- | The permissions that are explicitly denied by this rule. Each permission uses the format @{service_fqdn}\/{resource}.{verb}@, where @{service_fqdn}@ is the fully qualified domain name for the service. For example, @iam.googleapis.com\/roles.list@.
    deniedPermissions :: (Core.Maybe [Core.Text]),
    -- | The identities that are prevented from using one or more permissions on Google Cloud resources. This field can contain the following values: * @principal:\/\/goog\/subject\/{email_id}@: A specific Google Account. Includes Gmail, Cloud Identity, and Google Workspace user accounts. For example, @principal:\/\/goog\/subject\/alice\@example.com@. * @principal:\/\/iam.googleapis.com\/projects\/-\/serviceAccounts\/{service_account_id}@: A Google Cloud service account. For example, @principal:\/\/iam.googleapis.com\/projects\/-\/serviceAccounts\/my-service-account\@iam.gserviceaccount.com@. * @principalSet:\/\/goog\/group\/{group_id}@: A Google group. For example, @principalSet:\/\/goog\/group\/admins\@example.com@. * @principalSet:\/\/goog\/public:all@: A special identifier that represents any principal that is on the internet, even if they do not have a Google Account or are not logged in. * @principalSet:\/\/goog\/cloudIdentityCustomerId\/{customer_id}@: All of the principals associated with the specified Google
    -- Workspace or Cloud Identity customer ID. For example, @principalSet:\/\/goog\/cloudIdentityCustomerId\/C01Abc35@. * @principal:\/\/iam.googleapis.com\/locations\/global\/workforcePools\/{pool_id}\/subject\/{subject_attribute_value}@: A single identity in a workforce identity pool. * @principalSet:\/\/iam.googleapis.com\/locations\/global\/workforcePools\/{pool_id}\/group\/{group_id}@: All workforce identities in a group. * @principalSet:\/\/iam.googleapis.com\/locations\/global\/workforcePools\/{pool_id}\/attribute.{attribute_name}\/{attribute_value}@: All workforce identities with a specific attribute value. * @principalSet:\/\/iam.googleapis.com\/locations\/global\/workforcePools\/{pool_id}\/*@: All identities in a workforce identity pool. * @principal:\/\/iam.googleapis.com\/projects\/{project_number}\/locations\/global\/workloadIdentityPools\/{pool_id}\/subject\/{subject_attribute_value}@: A single identity in a workload identity pool. *
    -- @principalSet:\/\/iam.googleapis.com\/projects\/{project_number}\/locations\/global\/workloadIdentityPools\/{pool_id}\/group\/{group_id}@: A workload identity pool group. * @principalSet:\/\/iam.googleapis.com\/projects\/{project_number}\/locations\/global\/workloadIdentityPools\/{pool_id}\/attribute.{attribute_name}\/{attribute_value}@: All identities in a workload identity pool with a certain attribute. * @principalSet:\/\/iam.googleapis.com\/projects\/{project_number}\/locations\/global\/workloadIdentityPools\/{pool_id}\/*@: All identities in a workload identity pool. * @principalSet:\/\/cloudresourcemanager.googleapis.com\/[projects|folders|organizations]\/{project_number|folder_number|org_number}\/type\/ServiceAccount@: All service accounts grouped under a resource (project, folder, or organization). * @principalSet:\/\/cloudresourcemanager.googleapis.com\/[projects|folders|organizations]\/{project_number|folder_number|org_number}\/type\/ServiceAgent@: All service agents grouped under a resource
    -- (project, folder, or organization). * @deleted:principal:\/\/goog\/subject\/{email_id}?uid={uid}@: A specific Google Account that was deleted recently. For example, @deleted:principal:\/\/goog\/subject\/alice\@example.com?uid=1234567890@. If the Google Account is recovered, this identifier reverts to the standard identifier for a Google Account. * @deleted:principalSet:\/\/goog\/group\/{group_id}?uid={uid}@: A Google group that was deleted recently. For example, @deleted:principalSet:\/\/goog\/group\/admins\@example.com?uid=1234567890@. If the Google group is restored, this identifier reverts to the standard identifier for a Google group. * @deleted:principal:\/\/iam.googleapis.com\/projects\/-\/serviceAccounts\/{service_account_id}?uid={uid}@: A Google Cloud service account that was deleted recently. For example, @deleted:principal:\/\/iam.googleapis.com\/projects\/-\/serviceAccounts\/my-service-account\@iam.gserviceaccount.com?uid=1234567890@. If the service account is undeleted, this identifier reverts to
    -- the standard identifier for a service account. * @deleted:principal:\/\/iam.googleapis.com\/locations\/global\/workforcePools\/{pool_id}\/subject\/{subject_attribute_value}@: Deleted single identity in a workforce identity pool. For example, @deleted:principal:\/\/iam.googleapis.com\/locations\/global\/workforcePools\/my-pool-id\/subject\/my-subject-attribute-value@.
    deniedPrincipals :: (Core.Maybe [Core.Text]),
    -- | Specifies the permissions that this rule excludes from the set of denied permissions given by @denied_permissions@. If a permission appears in @denied_permissions@ /and/ in @exception_permissions@ then it will /not/ be denied. The excluded permissions can be specified using the same syntax as @denied_permissions@.
    exceptionPermissions :: (Core.Maybe [Core.Text]),
    -- | The identities that are excluded from the deny rule, even if they are listed in the @denied_principals@. For example, you could add a Google group to the @denied_principals@, then exclude specific users who belong to that group. This field can contain the same values as the @denied_principals@ field, excluding @principalSet:\/\/goog\/public:all@, which represents all users on the internet.
    exceptionPrincipals :: (Core.Maybe [Core.Text])
  }
  deriving (Core.Eq, Core.Show, Core.Generic)

-- | Creates a value of 'GoogleIamV2DenyRule' with the minimum fields required to make a request.
newGoogleIamV2DenyRule ::
  GoogleIamV2DenyRule
newGoogleIamV2DenyRule =
  GoogleIamV2DenyRule
    { denialCondition = Core.Nothing,
      deniedPermissions = Core.Nothing,
      deniedPrincipals = Core.Nothing,
      exceptionPermissions = Core.Nothing,
      exceptionPrincipals = Core.Nothing
    }

instance Core.FromJSON GoogleIamV2DenyRule where
  parseJSON =
    Core.withObject
      "GoogleIamV2DenyRule"
      ( \o ->
          GoogleIamV2DenyRule
            Core.<$> (o Core..:? "denialCondition")
            Core.<*> (o Core..:? "deniedPermissions")
            Core.<*> (o Core..:? "deniedPrincipals")
            Core.<*> (o Core..:? "exceptionPermissions")
            Core.<*> (o Core..:? "exceptionPrincipals")
      )

instance Core.ToJSON GoogleIamV2DenyRule where
  toJSON GoogleIamV2DenyRule {..} =
    Core.object
      ( Core.catMaybes
          [ ("denialCondition" Core..=) Core.<$> denialCondition,
            ("deniedPermissions" Core..=) Core.<$> deniedPermissions,
            ("deniedPrincipals" Core..=) Core.<$> deniedPrincipals,
            ("exceptionPermissions" Core..=) Core.<$> exceptionPermissions,
            ("exceptionPrincipals" Core..=) Core.<$> exceptionPrincipals
          ]
      )

-- | Response message for @ListPolicies@.
--
-- /See:/ 'newGoogleIamV2ListPoliciesResponse' smart constructor.
data GoogleIamV2ListPoliciesResponse = GoogleIamV2ListPoliciesResponse
  { -- | A page token that you can use in a ListPoliciesRequest to retrieve the next page. If this field is omitted, there are no additional pages.
    nextPageToken :: (Core.Maybe Core.Text),
    -- | Metadata for the policies that are attached to the resource.
    policies :: (Core.Maybe [GoogleIamV2Policy])
  }
  deriving (Core.Eq, Core.Show, Core.Generic)

-- | Creates a value of 'GoogleIamV2ListPoliciesResponse' with the minimum fields required to make a request.
newGoogleIamV2ListPoliciesResponse ::
  GoogleIamV2ListPoliciesResponse
newGoogleIamV2ListPoliciesResponse =
  GoogleIamV2ListPoliciesResponse
    { nextPageToken = Core.Nothing,
      policies = Core.Nothing
    }

instance Core.FromJSON GoogleIamV2ListPoliciesResponse where
  parseJSON =
    Core.withObject
      "GoogleIamV2ListPoliciesResponse"
      ( \o ->
          GoogleIamV2ListPoliciesResponse
            Core.<$> (o Core..:? "nextPageToken")
            Core.<*> (o Core..:? "policies")
      )

instance Core.ToJSON GoogleIamV2ListPoliciesResponse where
  toJSON GoogleIamV2ListPoliciesResponse {..} =
    Core.object
      ( Core.catMaybes
          [ ("nextPageToken" Core..=) Core.<$> nextPageToken,
            ("policies" Core..=) Core.<$> policies
          ]
      )

-- | Data for an IAM policy.
--
-- /See:/ 'newGoogleIamV2Policy' smart constructor.
data GoogleIamV2Policy = GoogleIamV2Policy
  { -- | A key-value map to store arbitrary metadata for the @Policy@. Keys can be up to 63 characters. Values can be up to 255 characters.
    annotations :: (Core.Maybe GoogleIamV2Policy_Annotations),
    -- | Output only. The time when the @Policy@ was created.
    createTime :: (Core.Maybe Core.DateTime),
    -- | Output only. The time when the @Policy@ was deleted. Empty if the policy is not deleted.
    deleteTime :: (Core.Maybe Core.DateTime),
    -- | A user-specified description of the @Policy@. This value can be up to 63 characters.
    displayName :: (Core.Maybe Core.Text),
    -- | An opaque tag that identifies the current version of the @Policy@. IAM uses this value to help manage concurrent updates, so they do not cause one update to be overwritten by another. If this field is present in a CreatePolicyRequest, the value is ignored.
    etag :: (Core.Maybe Core.Text),
    -- | Output only. The kind of the @Policy@. Always contains the value @DenyPolicy@.
    kind :: (Core.Maybe Core.Text),
    -- | Immutable. The resource name of the @Policy@, which must be unique. Format: @policies\/{attachment_point}\/denypolicies\/{policy_id}@ The attachment point is identified by its URL-encoded full resource name, which means that the forward-slash character, @\/@, must be written as @%2F@. For example, @policies\/cloudresourcemanager.googleapis.com%2Fprojects%2Fmy-project\/denypolicies\/my-deny-policy@. For organizations and folders, use the numeric ID in the full resource name. For projects, requests can use the alphanumeric or the numeric ID. Responses always contain the numeric ID.
    name :: (Core.Maybe Core.Text),
    -- | A list of rules that specify the behavior of the @Policy@. All of the rules should be of the @kind@ specified in the @Policy@.
    rules :: (Core.Maybe [GoogleIamV2PolicyRule]),
    -- | Immutable. The globally unique ID of the @Policy@. Assigned automatically when the @Policy@ is created.
    uid :: (Core.Maybe Core.Text),
    -- | Output only. The time when the @Policy@ was last updated.
    updateTime :: (Core.Maybe Core.DateTime)
  }
  deriving (Core.Eq, Core.Show, Core.Generic)

-- | Creates a value of 'GoogleIamV2Policy' with the minimum fields required to make a request.
newGoogleIamV2Policy ::
  GoogleIamV2Policy
newGoogleIamV2Policy =
  GoogleIamV2Policy
    { annotations = Core.Nothing,
      createTime = Core.Nothing,
      deleteTime = Core.Nothing,
      displayName = Core.Nothing,
      etag = Core.Nothing,
      kind = Core.Nothing,
      name = Core.Nothing,
      rules = Core.Nothing,
      uid = Core.Nothing,
      updateTime = Core.Nothing
    }

instance Core.FromJSON GoogleIamV2Policy where
  parseJSON =
    Core.withObject
      "GoogleIamV2Policy"
      ( \o ->
          GoogleIamV2Policy
            Core.<$> (o Core..:? "annotations")
            Core.<*> (o Core..:? "createTime")
            Core.<*> (o Core..:? "deleteTime")
            Core.<*> (o Core..:? "displayName")
            Core.<*> (o Core..:? "etag")
            Core.<*> (o Core..:? "kind")
            Core.<*> (o Core..:? "name")
            Core.<*> (o Core..:? "rules")
            Core.<*> (o Core..:? "uid")
            Core.<*> (o Core..:? "updateTime")
      )

instance Core.ToJSON GoogleIamV2Policy where
  toJSON GoogleIamV2Policy {..} =
    Core.object
      ( Core.catMaybes
          [ ("annotations" Core..=) Core.<$> annotations,
            ("createTime" Core..=) Core.<$> createTime,
            ("deleteTime" Core..=) Core.<$> deleteTime,
            ("displayName" Core..=) Core.<$> displayName,
            ("etag" Core..=) Core.<$> etag,
            ("kind" Core..=) Core.<$> kind,
            ("name" Core..=) Core.<$> name,
            ("rules" Core..=) Core.<$> rules,
            ("uid" Core..=) Core.<$> uid,
            ("updateTime" Core..=) Core.<$> updateTime
          ]
      )

-- | A key-value map to store arbitrary metadata for the @Policy@. Keys can be up to 63 characters. Values can be up to 255 characters.
--
-- /See:/ 'newGoogleIamV2Policy_Annotations' smart constructor.
newtype GoogleIamV2Policy_Annotations = GoogleIamV2Policy_Annotations
  { additional :: (Core.HashMap Core.Text Core.Text)
  }
  deriving (Core.Eq, Core.Show, Core.Generic)

-- | Creates a value of 'GoogleIamV2Policy_Annotations' with the minimum fields required to make a request.
newGoogleIamV2Policy_Annotations ::
  -- |  See 'additional'.
  Core.HashMap Core.Text Core.Text ->
  GoogleIamV2Policy_Annotations
newGoogleIamV2Policy_Annotations additional =
  GoogleIamV2Policy_Annotations {additional = additional}

instance Core.FromJSON GoogleIamV2Policy_Annotations where
  parseJSON =
    Core.withObject
      "GoogleIamV2Policy_Annotations"
      ( \o ->
          GoogleIamV2Policy_Annotations Core.<$> (Core.parseJSONObject o)
      )

instance Core.ToJSON GoogleIamV2Policy_Annotations where
  toJSON GoogleIamV2Policy_Annotations {..} = Core.toJSON additional

-- | Metadata for long-running @Policy@ operations.
--
-- /See:/ 'newGoogleIamV2PolicyOperationMetadata' smart constructor.
newtype GoogleIamV2PolicyOperationMetadata = GoogleIamV2PolicyOperationMetadata
  { -- | Timestamp when the @google.longrunning.Operation@ was created.
    createTime :: (Core.Maybe Core.DateTime)
  }
  deriving (Core.Eq, Core.Show, Core.Generic)

-- | Creates a value of 'GoogleIamV2PolicyOperationMetadata' with the minimum fields required to make a request.
newGoogleIamV2PolicyOperationMetadata ::
  GoogleIamV2PolicyOperationMetadata
newGoogleIamV2PolicyOperationMetadata =
  GoogleIamV2PolicyOperationMetadata {createTime = Core.Nothing}

instance Core.FromJSON GoogleIamV2PolicyOperationMetadata where
  parseJSON =
    Core.withObject
      "GoogleIamV2PolicyOperationMetadata"
      ( \o ->
          GoogleIamV2PolicyOperationMetadata
            Core.<$> (o Core..:? "createTime")
      )

instance Core.ToJSON GoogleIamV2PolicyOperationMetadata where
  toJSON GoogleIamV2PolicyOperationMetadata {..} =
    Core.object
      (Core.catMaybes [("createTime" Core..=) Core.<$> createTime])

-- | A single rule in a @Policy@.
--
-- /See:/ 'newGoogleIamV2PolicyRule' smart constructor.
data GoogleIamV2PolicyRule = GoogleIamV2PolicyRule
  { -- | A rule for a deny policy.
    denyRule :: (Core.Maybe GoogleIamV2DenyRule),
    -- | A user-specified description of the rule. This value can be up to 256 characters.
    description :: (Core.Maybe Core.Text)
  }
  deriving (Core.Eq, Core.Show, Core.Generic)

-- | Creates a value of 'GoogleIamV2PolicyRule' with the minimum fields required to make a request.
newGoogleIamV2PolicyRule ::
  GoogleIamV2PolicyRule
newGoogleIamV2PolicyRule =
  GoogleIamV2PolicyRule
    { denyRule = Core.Nothing,
      description = Core.Nothing
    }

instance Core.FromJSON GoogleIamV2PolicyRule where
  parseJSON =
    Core.withObject
      "GoogleIamV2PolicyRule"
      ( \o ->
          GoogleIamV2PolicyRule
            Core.<$> (o Core..:? "denyRule")
            Core.<*> (o Core..:? "description")
      )

instance Core.ToJSON GoogleIamV2PolicyRule where
  toJSON GoogleIamV2PolicyRule {..} =
    Core.object
      ( Core.catMaybes
          [ ("denyRule" Core..=) Core.<$> denyRule,
            ("description" Core..=) Core.<$> description
          ]
      )

-- | Represents the metadata of the long-running operation.
--
-- /See:/ 'newGoogleIamV3OperationMetadata' smart constructor.
data GoogleIamV3OperationMetadata = GoogleIamV3OperationMetadata
  { -- | Output only. API version used to start the operation.
    apiVersion :: (Core.Maybe Core.Text),
    -- | Output only. The time the operation was created.
    createTime :: (Core.Maybe Core.DateTime),
    -- | Output only. The time the operation finished running.
    endTime :: (Core.Maybe Core.DateTime),
    -- | Output only. Identifies whether the user has requested cancellation of the operation. Operations that have successfully been cancelled have Operation.error value with a google.rpc.Status.code of 1, corresponding to @Code.CANCELLED@.
    requestedCancellation :: (Core.Maybe Core.Bool),
    -- | Output only. Human-readable status of the operation, if any.
    statusMessage :: (Core.Maybe Core.Text),
    -- | Output only. Server-defined resource path for the target of the
    target :: (Core.Maybe Core.Text),
    -- | Output only. Name of the verb executed by the operation.
    verb :: (Core.Maybe Core.Text)
  }
  deriving (Core.Eq, Core.Show, Core.Generic)

-- | Creates a value of 'GoogleIamV3OperationMetadata' with the minimum fields required to make a request.
newGoogleIamV3OperationMetadata ::
  GoogleIamV3OperationMetadata
newGoogleIamV3OperationMetadata =
  GoogleIamV3OperationMetadata
    { apiVersion = Core.Nothing,
      createTime = Core.Nothing,
      endTime = Core.Nothing,
      requestedCancellation = Core.Nothing,
      statusMessage = Core.Nothing,
      target = Core.Nothing,
      verb = Core.Nothing
    }

instance Core.FromJSON GoogleIamV3OperationMetadata where
  parseJSON =
    Core.withObject
      "GoogleIamV3OperationMetadata"
      ( \o ->
          GoogleIamV3OperationMetadata
            Core.<$> (o Core..:? "apiVersion")
            Core.<*> (o Core..:? "createTime")
            Core.<*> (o Core..:? "endTime")
            Core.<*> (o Core..:? "requestedCancellation")
            Core.<*> (o Core..:? "statusMessage")
            Core.<*> (o Core..:? "target")
            Core.<*> (o Core..:? "verb")
      )

instance Core.ToJSON GoogleIamV3OperationMetadata where
  toJSON GoogleIamV3OperationMetadata {..} =
    Core.object
      ( Core.catMaybes
          [ ("apiVersion" Core..=) Core.<$> apiVersion,
            ("createTime" Core..=) Core.<$> createTime,
            ("endTime" Core..=) Core.<$> endTime,
            ("requestedCancellation" Core..=) Core.<$> requestedCancellation,
            ("statusMessage" Core..=) Core.<$> statusMessage,
            ("target" Core..=) Core.<$> target,
            ("verb" Core..=) Core.<$> verb
          ]
      )

-- | Represents the metadata of the long-running operation.
--
-- /See:/ 'newGoogleIamV3alphaOperationMetadata' smart constructor.
data GoogleIamV3alphaOperationMetadata = GoogleIamV3alphaOperationMetadata
  { -- | Output only. API version used to start the operation.
    apiVersion :: (Core.Maybe Core.Text),
    -- | Output only. The time the operation was created.
    createTime :: (Core.Maybe Core.DateTime),
    -- | Output only. The time the operation finished running.
    endTime :: (Core.Maybe Core.DateTime),
    -- | Output only. Identifies whether the user has requested cancellation of the operation. Operations that have successfully been cancelled have Operation.error value with a google.rpc.Status.code of 1, corresponding to @Code.CANCELLED@.
    requestedCancellation :: (Core.Maybe Core.Bool),
    -- | Output only. Human-readable status of the operation, if any.
    statusMessage :: (Core.Maybe Core.Text),
    -- | Output only. Server-defined resource path for the target of the
    target :: (Core.Maybe Core.Text),
    -- | Output only. Name of the verb executed by the operation.
    verb :: (Core.Maybe Core.Text)
  }
  deriving (Core.Eq, Core.Show, Core.Generic)

-- | Creates a value of 'GoogleIamV3alphaOperationMetadata' with the minimum fields required to make a request.
newGoogleIamV3alphaOperationMetadata ::
  GoogleIamV3alphaOperationMetadata
newGoogleIamV3alphaOperationMetadata =
  GoogleIamV3alphaOperationMetadata
    { apiVersion = Core.Nothing,
      createTime = Core.Nothing,
      endTime = Core.Nothing,
      requestedCancellation = Core.Nothing,
      statusMessage = Core.Nothing,
      target = Core.Nothing,
      verb = Core.Nothing
    }

instance Core.FromJSON GoogleIamV3alphaOperationMetadata where
  parseJSON =
    Core.withObject
      "GoogleIamV3alphaOperationMetadata"
      ( \o ->
          GoogleIamV3alphaOperationMetadata
            Core.<$> (o Core..:? "apiVersion")
            Core.<*> (o Core..:? "createTime")
            Core.<*> (o Core..:? "endTime")
            Core.<*> (o Core..:? "requestedCancellation")
            Core.<*> (o Core..:? "statusMessage")
            Core.<*> (o Core..:? "target")
            Core.<*> (o Core..:? "verb")
      )

instance Core.ToJSON GoogleIamV3alphaOperationMetadata where
  toJSON GoogleIamV3alphaOperationMetadata {..} =
    Core.object
      ( Core.catMaybes
          [ ("apiVersion" Core..=) Core.<$> apiVersion,
            ("createTime" Core..=) Core.<$> createTime,
            ("endTime" Core..=) Core.<$> endTime,
            ("requestedCancellation" Core..=) Core.<$> requestedCancellation,
            ("statusMessage" Core..=) Core.<$> statusMessage,
            ("target" Core..=) Core.<$> target,
            ("verb" Core..=) Core.<$> verb
          ]
      )

-- | Represents the metadata of the long-running operation.
--
-- /See:/ 'newGoogleIamV3betaOperationMetadata' smart constructor.
data GoogleIamV3betaOperationMetadata = GoogleIamV3betaOperationMetadata
  { -- | Output only. API version used to start the operation.
    apiVersion :: (Core.Maybe Core.Text),
    -- | Output only. The time the operation was created.
    createTime :: (Core.Maybe Core.DateTime),
    -- | Output only. The time the operation finished running.
    endTime :: (Core.Maybe Core.DateTime),
    -- | Output only. Identifies whether the user has requested cancellation of the operation. Operations that have successfully been cancelled have Operation.error value with a google.rpc.Status.code of 1, corresponding to @Code.CANCELLED@.
    requestedCancellation :: (Core.Maybe Core.Bool),
    -- | Output only. Human-readable status of the operation, if any.
    statusMessage :: (Core.Maybe Core.Text),
    -- | Output only. Server-defined resource path for the target of the
    target :: (Core.Maybe Core.Text),
    -- | Output only. Name of the verb executed by the operation.
    verb :: (Core.Maybe Core.Text)
  }
  deriving (Core.Eq, Core.Show, Core.Generic)

-- | Creates a value of 'GoogleIamV3betaOperationMetadata' with the minimum fields required to make a request.
newGoogleIamV3betaOperationMetadata ::
  GoogleIamV3betaOperationMetadata
newGoogleIamV3betaOperationMetadata =
  GoogleIamV3betaOperationMetadata
    { apiVersion = Core.Nothing,
      createTime = Core.Nothing,
      endTime = Core.Nothing,
      requestedCancellation = Core.Nothing,
      statusMessage = Core.Nothing,
      target = Core.Nothing,
      verb = Core.Nothing
    }

instance Core.FromJSON GoogleIamV3betaOperationMetadata where
  parseJSON =
    Core.withObject
      "GoogleIamV3betaOperationMetadata"
      ( \o ->
          GoogleIamV3betaOperationMetadata
            Core.<$> (o Core..:? "apiVersion")
            Core.<*> (o Core..:? "createTime")
            Core.<*> (o Core..:? "endTime")
            Core.<*> (o Core..:? "requestedCancellation")
            Core.<*> (o Core..:? "statusMessage")
            Core.<*> (o Core..:? "target")
            Core.<*> (o Core..:? "verb")
      )

instance Core.ToJSON GoogleIamV3betaOperationMetadata where
  toJSON GoogleIamV3betaOperationMetadata {..} =
    Core.object
      ( Core.catMaybes
          [ ("apiVersion" Core..=) Core.<$> apiVersion,
            ("createTime" Core..=) Core.<$> createTime,
            ("endTime" Core..=) Core.<$> endTime,
            ("requestedCancellation" Core..=) Core.<$> requestedCancellation,
            ("statusMessage" Core..=) Core.<$> statusMessage,
            ("target" Core..=) Core.<$> target,
            ("verb" Core..=) Core.<$> verb
          ]
      )

-- | Represents the metadata of the long-running operation.
--
-- /See:/ 'newGoogleIamV3mainOperationMetadata' smart constructor.
data GoogleIamV3mainOperationMetadata = GoogleIamV3mainOperationMetadata
  { -- | Output only. API version used to start the operation.
    apiVersion :: (Core.Maybe Core.Text),
    -- | Output only. The time the operation was created.
    createTime :: (Core.Maybe Core.DateTime),
    -- | Output only. The time the operation finished running.
    endTime :: (Core.Maybe Core.DateTime),
    -- | Output only. Identifies whether the user has requested cancellation of the operation. Operations that have successfully been cancelled have Operation.error value with a google.rpc.Status.code of 1, corresponding to @Code.CANCELLED@.
    requestedCancellation :: (Core.Maybe Core.Bool),
    -- | Output only. Human-readable status of the operation, if any.
    statusMessage :: (Core.Maybe Core.Text),
    -- | Output only. Server-defined resource path for the target of the
    target :: (Core.Maybe Core.Text),
    -- | Output only. Name of the verb executed by the operation.
    verb :: (Core.Maybe Core.Text)
  }
  deriving (Core.Eq, Core.Show, Core.Generic)

-- | Creates a value of 'GoogleIamV3mainOperationMetadata' with the minimum fields required to make a request.
newGoogleIamV3mainOperationMetadata ::
  GoogleIamV3mainOperationMetadata
newGoogleIamV3mainOperationMetadata =
  GoogleIamV3mainOperationMetadata
    { apiVersion = Core.Nothing,
      createTime = Core.Nothing,
      endTime = Core.Nothing,
      requestedCancellation = Core.Nothing,
      statusMessage = Core.Nothing,
      target = Core.Nothing,
      verb = Core.Nothing
    }

instance Core.FromJSON GoogleIamV3mainOperationMetadata where
  parseJSON =
    Core.withObject
      "GoogleIamV3mainOperationMetadata"
      ( \o ->
          GoogleIamV3mainOperationMetadata
            Core.<$> (o Core..:? "apiVersion")
            Core.<*> (o Core..:? "createTime")
            Core.<*> (o Core..:? "endTime")
            Core.<*> (o Core..:? "requestedCancellation")
            Core.<*> (o Core..:? "statusMessage")
            Core.<*> (o Core..:? "target")
            Core.<*> (o Core..:? "verb")
      )

instance Core.ToJSON GoogleIamV3mainOperationMetadata where
  toJSON GoogleIamV3mainOperationMetadata {..} =
    Core.object
      ( Core.catMaybes
          [ ("apiVersion" Core..=) Core.<$> apiVersion,
            ("createTime" Core..=) Core.<$> createTime,
            ("endTime" Core..=) Core.<$> endTime,
            ("requestedCancellation" Core..=) Core.<$> requestedCancellation,
            ("statusMessage" Core..=) Core.<$> statusMessage,
            ("target" Core..=) Core.<$> target,
            ("verb" Core..=) Core.<$> verb
          ]
      )

-- | This resource represents a long-running operation that is the result of a network API call.
--
-- /See:/ 'newGoogleLongrunningOperation' smart constructor.
data GoogleLongrunningOperation = GoogleLongrunningOperation
  { -- | If the value is @false@, it means the operation is still in progress. If @true@, the operation is completed, and either @error@ or @response@ is available.
    done :: (Core.Maybe Core.Bool),
    -- | The error result of the operation in case of failure or cancellation.
    error :: (Core.Maybe GoogleRpcStatus),
    -- | Service-specific metadata associated with the operation. It typically contains progress information and common metadata such as create time. Some services might not provide such metadata. Any method that returns a long-running operation should document the metadata type, if any.
    metadata :: (Core.Maybe GoogleLongrunningOperation_Metadata),
    -- | The server-assigned name, which is only unique within the same service that originally returns it. If you use the default HTTP mapping, the @name@ should be a resource name ending with @operations\/{unique_id}@.
    name :: (Core.Maybe Core.Text),
    -- | The normal, successful response of the operation. If the original method returns no data on success, such as @Delete@, the response is @google.protobuf.Empty@. If the original method is standard @Get@\/@Create@\/@Update@, the response should be the resource. For other methods, the response should have the type @XxxResponse@, where @Xxx@ is the original method name. For example, if the original method name is @TakeSnapshot()@, the inferred response type is @TakeSnapshotResponse@.
    response :: (Core.Maybe GoogleLongrunningOperation_Response)
  }
  deriving (Core.Eq, Core.Show, Core.Generic)

-- | Creates a value of 'GoogleLongrunningOperation' with the minimum fields required to make a request.
newGoogleLongrunningOperation ::
  GoogleLongrunningOperation
newGoogleLongrunningOperation =
  GoogleLongrunningOperation
    { done = Core.Nothing,
      error = Core.Nothing,
      metadata = Core.Nothing,
      name = Core.Nothing,
      response = Core.Nothing
    }

instance Core.FromJSON GoogleLongrunningOperation where
  parseJSON =
    Core.withObject
      "GoogleLongrunningOperation"
      ( \o ->
          GoogleLongrunningOperation
            Core.<$> (o Core..:? "done")
            Core.<*> (o Core..:? "error")
            Core.<*> (o Core..:? "metadata")
            Core.<*> (o Core..:? "name")
            Core.<*> (o Core..:? "response")
      )

instance Core.ToJSON GoogleLongrunningOperation where
  toJSON GoogleLongrunningOperation {..} =
    Core.object
      ( Core.catMaybes
          [ ("done" Core..=) Core.<$> done,
            ("error" Core..=) Core.<$> error,
            ("metadata" Core..=) Core.<$> metadata,
            ("name" Core..=) Core.<$> name,
            ("response" Core..=) Core.<$> response
          ]
      )

-- | Service-specific metadata associated with the operation. It typically contains progress information and common metadata such as create time. Some services might not provide such metadata. Any method that returns a long-running operation should document the metadata type, if any.
--
-- /See:/ 'newGoogleLongrunningOperation_Metadata' smart constructor.
newtype GoogleLongrunningOperation_Metadata = GoogleLongrunningOperation_Metadata
  { -- | Properties of the object. Contains field \@type with type URL.
    additional :: (Core.HashMap Core.Text Core.Value)
  }
  deriving (Core.Eq, Core.Show, Core.Generic)

-- | Creates a value of 'GoogleLongrunningOperation_Metadata' with the minimum fields required to make a request.
newGoogleLongrunningOperation_Metadata ::
  -- |  Properties of the object. Contains field \@type with type URL. See 'additional'.
  Core.HashMap Core.Text Core.Value ->
  GoogleLongrunningOperation_Metadata
newGoogleLongrunningOperation_Metadata additional =
  GoogleLongrunningOperation_Metadata {additional = additional}

instance Core.FromJSON GoogleLongrunningOperation_Metadata where
  parseJSON =
    Core.withObject
      "GoogleLongrunningOperation_Metadata"
      ( \o ->
          GoogleLongrunningOperation_Metadata
            Core.<$> (Core.parseJSONObject o)
      )

instance Core.ToJSON GoogleLongrunningOperation_Metadata where
  toJSON GoogleLongrunningOperation_Metadata {..} =
    Core.toJSON additional

-- | The normal, successful response of the operation. If the original method returns no data on success, such as @Delete@, the response is @google.protobuf.Empty@. If the original method is standard @Get@\/@Create@\/@Update@, the response should be the resource. For other methods, the response should have the type @XxxResponse@, where @Xxx@ is the original method name. For example, if the original method name is @TakeSnapshot()@, the inferred response type is @TakeSnapshotResponse@.
--
-- /See:/ 'newGoogleLongrunningOperation_Response' smart constructor.
newtype GoogleLongrunningOperation_Response = GoogleLongrunningOperation_Response
  { -- | Properties of the object. Contains field \@type with type URL.
    additional :: (Core.HashMap Core.Text Core.Value)
  }
  deriving (Core.Eq, Core.Show, Core.Generic)

-- | Creates a value of 'GoogleLongrunningOperation_Response' with the minimum fields required to make a request.
newGoogleLongrunningOperation_Response ::
  -- |  Properties of the object. Contains field \@type with type URL. See 'additional'.
  Core.HashMap Core.Text Core.Value ->
  GoogleLongrunningOperation_Response
newGoogleLongrunningOperation_Response additional =
  GoogleLongrunningOperation_Response {additional = additional}

instance Core.FromJSON GoogleLongrunningOperation_Response where
  parseJSON =
    Core.withObject
      "GoogleLongrunningOperation_Response"
      ( \o ->
          GoogleLongrunningOperation_Response
            Core.<$> (Core.parseJSONObject o)
      )

instance Core.ToJSON GoogleLongrunningOperation_Response where
  toJSON GoogleLongrunningOperation_Response {..} =
    Core.toJSON additional

-- | The @Status@ type defines a logical error model that is suitable for different programming environments, including REST APIs and RPC APIs. It is used by <https://github.com/grpc gRPC>. Each @Status@ message contains three pieces of data: error code, error message, and error details. You can find out more about this error model and how to work with it in the <https://cloud.google.com/apis/design/errors API Design Guide>.
--
-- /See:/ 'newGoogleRpcStatus' smart constructor.
data GoogleRpcStatus = GoogleRpcStatus
  { -- | The status code, which should be an enum value of google.rpc.Code.
    code :: (Core.Maybe Core.Int32),
    -- | A list of messages that carry the error details. There is a common set of message types for APIs to use.
    details :: (Core.Maybe [GoogleRpcStatus_DetailsItem]),
    -- | A developer-facing error message, which should be in English. Any user-facing error message should be localized and sent in the google.rpc.Status.details field, or localized by the client.
    message :: (Core.Maybe Core.Text)
  }
  deriving (Core.Eq, Core.Show, Core.Generic)

-- | Creates a value of 'GoogleRpcStatus' with the minimum fields required to make a request.
newGoogleRpcStatus ::
  GoogleRpcStatus
newGoogleRpcStatus =
  GoogleRpcStatus
    { code = Core.Nothing,
      details = Core.Nothing,
      message = Core.Nothing
    }

instance Core.FromJSON GoogleRpcStatus where
  parseJSON =
    Core.withObject
      "GoogleRpcStatus"
      ( \o ->
          GoogleRpcStatus
            Core.<$> (o Core..:? "code")
            Core.<*> (o Core..:? "details")
            Core.<*> (o Core..:? "message")
      )

instance Core.ToJSON GoogleRpcStatus where
  toJSON GoogleRpcStatus {..} =
    Core.object
      ( Core.catMaybes
          [ ("code" Core..=) Core.<$> code,
            ("details" Core..=) Core.<$> details,
            ("message" Core..=) Core.<$> message
          ]
      )

--
-- /See:/ 'newGoogleRpcStatus_DetailsItem' smart constructor.
newtype GoogleRpcStatus_DetailsItem = GoogleRpcStatus_DetailsItem
  { -- | Properties of the object. Contains field \@type with type URL.
    additional :: (Core.HashMap Core.Text Core.Value)
  }
  deriving (Core.Eq, Core.Show, Core.Generic)

-- | Creates a value of 'GoogleRpcStatus_DetailsItem' with the minimum fields required to make a request.
newGoogleRpcStatus_DetailsItem ::
  -- |  Properties of the object. Contains field \@type with type URL. See 'additional'.
  Core.HashMap Core.Text Core.Value ->
  GoogleRpcStatus_DetailsItem
newGoogleRpcStatus_DetailsItem additional =
  GoogleRpcStatus_DetailsItem {additional = additional}

instance Core.FromJSON GoogleRpcStatus_DetailsItem where
  parseJSON =
    Core.withObject
      "GoogleRpcStatus_DetailsItem"
      ( \o ->
          GoogleRpcStatus_DetailsItem Core.<$> (Core.parseJSONObject o)
      )

instance Core.ToJSON GoogleRpcStatus_DetailsItem where
  toJSON GoogleRpcStatus_DetailsItem {..} = Core.toJSON additional

-- | Represents a textual expression in the Common Expression Language (CEL) syntax. CEL is a C-like expression language. The syntax and semantics of CEL are documented at https:\/\/github.com\/google\/cel-spec. Example (Comparison): title: \"Summary size limit\" description: \"Determines if a summary is less than 100 chars\" expression: \"document.summary.size() \< 100\" Example (Equality): title: \"Requestor is owner\" description: \"Determines if requestor is the document owner\" expression: \"document.owner == request.auth.claims.email\" Example (Logic): title: \"Public documents\" description: \"Determine whether the document should be publicly visible\" expression: \"document.type != \'private\' && document.type != \'internal\'\" Example (Data Manipulation): title: \"Notification string\" description: \"Create a notification string with a timestamp.\" expression: \"\'New message received at \' + string(document.create_time)\" The exact variables and functions that may be referenced within an expression are
-- determined by the service that evaluates it. See the service documentation for additional information.
--
-- /See:/ 'newGoogleTypeExpr' smart constructor.
data GoogleTypeExpr = GoogleTypeExpr
  { -- | Optional. Description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.
    description :: (Core.Maybe Core.Text),
    -- | Textual representation of an expression in Common Expression Language syntax.
    expression :: (Core.Maybe Core.Text),
    -- | Optional. String indicating the location of the expression for error reporting, e.g. a file name and a position in the file.
    location :: (Core.Maybe Core.Text),
    -- | Optional. Title for the expression, i.e. a short string describing its purpose. This can be used e.g. in UIs which allow to enter the expression.
    title :: (Core.Maybe Core.Text)
  }
  deriving (Core.Eq, Core.Show, Core.Generic)

-- | Creates a value of 'GoogleTypeExpr' with the minimum fields required to make a request.
newGoogleTypeExpr ::
  GoogleTypeExpr
newGoogleTypeExpr =
  GoogleTypeExpr
    { description = Core.Nothing,
      expression = Core.Nothing,
      location = Core.Nothing,
      title = Core.Nothing
    }

instance Core.FromJSON GoogleTypeExpr where
  parseJSON =
    Core.withObject
      "GoogleTypeExpr"
      ( \o ->
          GoogleTypeExpr
            Core.<$> (o Core..:? "description")
            Core.<*> (o Core..:? "expression")
            Core.<*> (o Core..:? "location")
            Core.<*> (o Core..:? "title")
      )

instance Core.ToJSON GoogleTypeExpr where
  toJSON GoogleTypeExpr {..} =
    Core.object
      ( Core.catMaybes
          [ ("description" Core..=) Core.<$> description,
            ("expression" Core..=) Core.<$> expression,
            ("location" Core..=) Core.<$> location,
            ("title" Core..=) Core.<$> title
          ]
      )