credentials

type M2MOptions struct {
	// ClientID is the OAuth client ID (service principal application ID).
	// Required.
	ClientID string

	// ClientSecret is the OAuth client secret. Required.
	ClientSecret string

	// Host is the Databricks workspace or account URL (for example,
	// "https://example.cloud.databricks.com"). Required.
	Host string

	// Scopes overrides the OAuth scopes requested for the token. If empty,
	// defaults to ["all-apis"].
	Scopes []string

	// HTTPClient is the HTTP client used for OIDC endpoint discovery and
	// for the OAuth token exchange. If nil, [http.DefaultClient] is used.
	HTTPClient *http.Client
}

type U2MOptions struct {
	// Profile is the databricks CLI profile name. When set, the CLI is
	// invoked with --profile. Host, when also set, is used as a fallback
	// for older CLI versions that do not support --profile.
	Profile string

	// Host is the workspace or account URL. Required when Profile is empty.
	Host string

	// AccountID is passed as --account-id when invoking the CLI via --host
	// for account-level hosts. Optional.
	AccountID string

	// CLIPath overrides the "databricks" binary to execute. If empty, the
	// binary is looked up in PATH.
	CLIPath string
}